Stoatchat versions prior to 0.15.0 are affected by an uncontrolled resource consumption vulnerability during SVG rendering, which can lead to a denial of service.

This vulnerability, classified under CWE-400, stems from the application's failure to properly cap resources while rendering SVG files. An unauthenticated attacker can exploit this by submitting specifically crafted SVG content, causing the application to consume excessive system resources and crash.

The CVSS score of 7.5 indicates a high severity rating due to the potential for complete service disruption. A successful denial of service attack could render the chat platform unavailable to users, causing significant operational impact and loss of communication capabilities.

Immediate Action: Update the stoatchat software to version 0.15.0 or later to patch the resource consumption vulnerability.

Proactive Monitoring: Monitor server CPU and memory usage for spikes that may indicate attempts to exploit SVG rendering processes.

Compensating Controls: Implement input validation or sanitization layers to filter or block malicious SVG files before they reach the rendering engine.

Public Exploit Available: No (unknown).

Availability is a core requirement for chat applications, and this vulnerability poses a direct threat to that goal. It is strongly recommended that all administrators apply the update to version 0.15.0 immediately to prevent potential service outages caused by malicious SVG payloads.