CVE-2026-73089: Javascript Unbounded Object Cache

In-memory cache uses an unbounded plain JavaScript object with dynamic key assignments and no size limit or eviction policy. If populated with dynamic inputs, this can cause unbounded memory growth and process crash (DoS).

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0JS
greprules fetch cve-2026-73089-javascript-unbounded-object-cache --engine opengrep

Description

In-memory cache uses an unbounded plain JavaScript object with dynamic key assignments and no size limit or eviction policy. If populated with dynamic inputs, this can cause unbounded memory growth and process crash (DoS).