Resource abuse & availability in AI-generated code
Unbounded input, computation, memory, storage, retry, rate, or loop behavior enables denial of service or disproportionate resource use. 11 published CVEs and GitHub advisories in this category trace back to an AI-assisted code change, across 9 projects.
- Findings
- 11
- 4% of all 284
- Projects
- 9
- Most: nodemailer/nodemailer (2)
- Critical or high
- 4
- of 7 with a severity score
- Latest advisory
- Sep 11, 2026
- Data through Sep 26, 2026
Findings per month
3
May 2025Peak advisory month: May 2026Sep 2026
By advisory publication month. The latest month is partial.
AI tools
Which AI tool made the contributing change.
How AI contributed
Whether the AI-assisted change introduced the flaw, widened exposure, or left a fix incomplete.
Languages
Primary language of the affected repository.
All 11 findings
Newest first- Nodemailer's address parser appends each address part to one growing string. A Claude-co-authored change in 9.1.0 reads that string's last character before every append, which V8 can turn into a copy of the whole string, so comment-separated addresses parse in quadratic time. Mailparser feeds inbound headers here. Release 10.0.5 caches the last character.
HighCVE-2026-90776Sep 11, 2026nodemailer/nodemailer
TypeScript
ClaudeDirect introductionResource abuse & availability - When Nodemailer's address parser cannot read an address strictly, it scans the free text. A Claude-co-authored repair in 10.0.6 replaced the slow regular expression with a scanner whose two new probes still searched the rest of the value, so long headers could stall the event loop until 10.0.9 bounded them. Found by source analysis, not timing.
HighGHSA-V53P-9FQP-M79JSep 11, 2026nodemailer/nodemailer
TypeScriptClaudeIncomplete remediationResource abuse & availability - A Claude-assisted fix for a regular-expression denial of service capped pattern length and rejected one family of nested quantifiers, but other backtracking shapes still reach the regular expression, so the freeze remains possible.
MediumGHSA-X4HG-HFWF-P9MWJul 2, 2026asymmetric-effort/nogginlessdom
TypeScriptClaudeFlawed AI-written codeResource abuse & availability - A Copilot-co-authored change meant to bound recursion in Scriban's array initializers reused a depth check that only logged an error, so deeply nested templates could still crash the host with an uncatchable stack overflow.
MediumCVE-2026-74783Jun 26, 2026scriban/scriban
C#
GitHub CopilotIncomplete remediationResource abuse & availability - The change co-authored with Claude Opus 4.7 introduced the unbounded response reads in both SCA clients.
CVE-2026-44219May 12, 2026jo-jo98/ciguard
PythonClaudeDirect introductionResource abuse & availability - AI-generated PDF code failed to clamp non-finite f64 values like NaN/inf in Color::rgb, emitting invalid float tokens and causing denial-of-service.
GHSA-88Q9-CMP2-C2VQMay 11, 2026bzsanti/oxidizepdf
RustClaudeDirect introductionResource abuse & availability - AI-written code compiled ICU Select options without validating property names, allowing inherited Object.prototype keys to bypass fallback and trigger a 500 DoS.
GHSA-R27J-894H-3W3PMay 6, 2026amannn/next-intl
TypeScript
CursorDirect introductionResource abuse & availability - A Claude-assisted change added TOTP and backup-code checks with no attempt limit, and the limiter added later counts attempts only in each process's memory, so a client with a valid certificate can keep guessing codes.
CVE-2026-74878Mar 31, 2026jahlives/openssl_encrypt
PythonClaudeDirect introductionResource abuse & availability - AI-written channel ingestion code failed to enforce media byte limits before buffering, letting remote senders cause memory exhaustion and denial of service.
HighCVE-2026-32049Mar 2, 2026openclaw/openclaw
JavaScriptClaudeNew attack surfaceResource abuse & availability - Claude-coauthored rate limiting put one customer's writes on one DynamoDB partition, so heavy traffic could throttle that customer and nearby tenants.
MediumCVE-2026-27695Feb 25, 2026zeroae/zae-limiter
PythonClaudeDirect introductionResource abuse & availability - AI-written webhook handlers buffered request bodies without unified size or time limits, letting unauthenticated attackers send oversized payloads and cause memory exhaustion or denial of service.
HighCVE-2026-28478Feb 18, 2026openclaw/openclaw
JavaScriptClaudeNew attack surfaceResource abuse & availability