gocsaf Development Community CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH gocsaf Development Community CVE published 2026-10-16

CVE-2026-107564

An unauthenticated remote attacker may use an allocation of resources without limits or throttling weakness in the gocsaf/csaf csaf_provider product to cause high CPU load leading to a denial of service. This vulnerability affects csaf_provider versions less than or equal to 3.6.0. Defenders should assess exposure and potential for denial of service attacks. The CVE record and source item provide details [truncated]