SilverStripe through 4.3.3 allows a Denial of Service on flush and development URL tools.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-12246.json"