CVE-2026-100242 describes a vulnerability in the Mediawiki DataTransfer Extension where a dependency on a vulnerable third-party component leads to uncontrolled resource consumption, specifically excessive allocation. This affects Mediawiki DataTransfer Extension versions >=1.46.0 and <1.47.0. The vulnerability is identified by CWE-1395 (Dependency on Vulnerable Component) and CWE-400 (Uncontrolled Resource Consumption). No CVSS score or detailed exploit information is provided.

The vulnerability can cause excessive allocation of resources, potentially leading to denial of service conditions or degraded performance of the Mediawiki DataTransfer Extension. There is no indication of active exploitation in the wild or direct compromise beyond resource exhaustion.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Users should monitor vendor communications for updates and consider limiting resource usage or applying temporary controls if possible.