dash-uploader DoS Vulnerability Analysis (CVE-2026-38361)

Vulnerability Overview Vulnerability ID: CVE-2026-38361 Vulnerability Name: dash-uploader DoS suite Description: This vulnerability involves multiple security issues, including uncontrolled resource consumption (OOM), arbitrary file truncation (TRUNCATE), and disk space exhaustion (EXHAUST). Affected Scope Affected Versions: All released versions of (0.1.0 to 0.7.0a2) Ecosystem: Python Package Archive Status: The package was archived on 2025-07-19; no patched version exists. Remediation Current Status: The vulnerability remains unpatched because the package has been archived. Recommended Actions: - Avoid using the package. - Monitor for potential future patches or consider alternative solutions. Detailed Information Vulnerability Types: - OOM (CVE-400): Uncontrolled resource consumption caused by memory allocation issues in the list comprehension. - TRUNCATE (CVE-670): Arbitrary file truncation triggered when , causing , which results in the replacement of the target file with an empty file. - EXHAUST (CVE-400): Disk space exhaustion caused by creating uncleaned temporary directories via the request. Verification: - JSON validation passed. - All 16 versions have been cross-checked. - Supplementary recommendations have been submitted. Disclosure Context: - CVE Record: https://www.cve.org/CVERecord?id=CVE-2026-38361 - NVD Record: https://nvd.nist.gov/vuln/detail/CVE-2026-38361 - Public PoC: https://github.com/aloahadance/CVE-2026-38361 - Upstream Issue: dash-uploader is archived Code Blocks No specific PoC or exploit code is included on the page.

Goal Reached Thanks to every supporter — we hit 100%!

dash-uploader DoS Vulnerability Analysis (CVE-2026-38361)

More from this source