zeroae vulnerabilities

Products

• zae-limiter 1

Latest zeroae CVEs

Newest publication first

1. CVE-2026-27695 zae-limiter: DynamoDB hot partition throttling enables per-entity Denial of Service

   Published 2026-02-25

   Medium·CVSS 4.3

   zae-limiter is a rate limiting library using the token bucket algorithm. Prior to version 0.10.1, all rate limit buckets for a single entity share the same DynamoDB partition key (namespace/ENTITY#{id}). A high-traffic entity can exceed DynamoDB's per-partition throughput limits...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.