https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T00:06:05.029723+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-21822 CVE-2022-21822 2026-10-16T00:06:05.031484+00:00

Affected: NVIDIA FLARE

NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable.

 https://cve.radiocsirt.org/vuln/pysec-2026-695 PYSEC-2026-695 — Allocation of Resources Without Limits or Throttling in nvflare 2026-10-16T00:06:05.031543+00:00

Affected: PyPI: nvflare

### Impact NVIDIA FLARE contains a vulnerability in Admin Interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable

All versions before 2.0.16 are affected.

### Patches The patch will be included in nvflare==2.0.16.

### Workarounds The changes in commits https://github.com/NVIDIA/NVFlare/commit/93588b3a0dff9bd4568983071b74d8b420de3a6e and https://github.com/NVIDIA/NVFlare/commit/93588b3a0dff9bd4568983071b74d8b420de3a6e can be applied to any version of the NVIDIA FLARE without any adverse effect.

### Additional information Issue Found on: 2022.3.3 Issue Found by: Oliver Sellwood (@Nintorac)