By weakness (CWE)

CWE-1124: related vulnerabilities

CVEs classified under CWE-1124. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-48042HIGH 7.5

  Envoy, an open source proxy widely used in cloud-native infrastructure, contains a flaw in how it handles JSON parsing. When processing JSON with extremely deep nesting—roughly 100,000 levels—the proxy's memory cleanup process can overflow the call stack, crashing the service. This is a denial-of-service vulnerability: an attacker can send a specially crafted JSON payload to exhaust resources and take down an Envoy instance. The vulnerability affects multiple versions across the supported release lines.