CVE-2026-41150: Infinite Loop Date Increment Dos
A while loop compares start and end dates/values, but both are incremented using `.add()` without an explicit bounding check or maximum iteration guard. This can lead to infinite loops (DoS) if user input forces the loop to continuously evaluate the increment condition. Introduce a maximum iteration limit combined with a throw, break, or return statement.
JSgreprules fetch cve-2026-41150-infinite-loop-date-increment-dos --engine opengrepDescription
A while loop compares start and end dates/values, but both are incremented using `.add()` without an explicit bounding check or maximum iteration guard. This can lead to infinite loops (DoS) if user input forces the loop to continuously evaluate the increment condition. Introduce a maximum iteration limit combined with a throw, break, or return statement.
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.