Multiple denial of service vulnerabilities were found in libmodulemd prior to version 2.15.0-2.oe2403sp4. These include stack exhaustion from deeply nested YAML xmd fields, excessive resource consumption from decompressing crafted compressed YAML without size limits, and out-of-bounds reads causing crashes during YAML serialization of module stream v2 metadata with multiple digest types. These flaws can be triggered by supplying specially crafted module metadata.