CVE-2026-66276 affects multiple packages. An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. See references for individual vulnerability details.