Resource exhaustion in Spinframework Containerd-shim-spin
CVE-2026-27887
Spin is an open source developer tool for building and running serverless applications powered by WebAssembly. When Spin is configured to allow connections to a database or web server which could return responses of unbounded size (e.g. ta…
EPSS: 0.002 (13.3th percentile) — read the EPSS interpretation.
Affected products
- Spinframework Containerd-shim-spin — versions < 0.22.1
- Spinframework Spin — versions < 3.6.1
- Spinframework Spinkube — versions < 0.6.2
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)