Threats tagged 'ghsa-64fc-j4cf-g8cj'

A memory exhaustion vulnerability exists in In Progress® Telerik® UI for ASP.NET Core versions 2015.1.318 through 2026.3.811. Repeated server-side aggregation requests cause dynamic assemblies and load contexts to accumulate, leading to increased process memory consumption. An unauthenticated remote attacker can exploit this if the aggregation endpoint is exposed without authentication, potentially causing denial of service due to resource exhaustion. The issue is fixed in version 2026.3.1015.