Threats tagged 'ghsa-cj39-vjcm-ccfj'

A vulnerability in Progress® Telerik® UI for ASP.NET MVC versions 2012.2.710 through 2026.3.811 allows unauthenticated remote attackers to cause denial of service by exploiting a race condition in ClassFactory. The issue involves unsafe updates to a shared class dictionary and emission of non-collectible dynamic assemblies, leading to increased CPU and memory usage and potential application availability degradation. The vulnerability is fixed in version 2026.3.1015.