Ray

Allocation of resources without limits or throttling allows an unauthorized attacker to cause a denial of service over a network. Specifically, Blazor static-SSR client validation retains attacker-controlled rendered field names in an unbounded singleton cache, which can lead to remote process memory exhaustion.

The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL, specifically through the open-in-browser command.

The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by sending a long string to the IMAP port (143/tcp).