cwe-400-resource-exhaustion

What problem does it solve?

This Skill addresses vulnerabilities related to uncontrolled resource consumption in Java applications, preventing potential denial-of-service or system instability.

Core Features & Use Cases

• Identify Vulnerable Patterns: Detects insecure code that can lead to unbounded resource growth (e.g., memory, collections).
• Apply Secure Implementations: Provides deterministic fixes by enforcing limits, using streaming, and setting timeouts.
• Use Case: Secure a web application's file upload endpoint by adding size limits and ensuring large files are streamed to disk instead of loaded into memory, preventing an attacker from crashing the server with a large upload.

Quick Start

Use the cwe-400-resource-exhaustion skill to secure the provided Java code snippet against uncontrolled resource consumption.