Executive brief
Allocation of Resources Without Limits or Throttling in nvflare
Affected products
- PyPI nvflare
Junglewise Threat Intelligence
CVE-2022-21822: PYSEC-2026-695 - Allocation of Resources Without Limits or Throttling in nvflare
CVE-2022-21822 · Severity: low · CVSS 3.1 · Published 2026-07-02
Technologies: nvflare (PyPI). Vendors: PyPI.
Related threats
- NVIDIA NVFlare Dashboard authorization bypass in user management system
- PYSEC-2022-257 - NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivile
- PYSEC-2022-231 - NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pi
- PYSEC-2022-232 - NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml.