Skip to main content
cve.nowby Sazabi
← crates.io
crates.ioPackage

routinator

7 known vulnerabilities (1 critical, 3 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 1 critical, 3 high
Weekly downloads
36
Dependents
0
Registry
crates.io

Advisories 7

  • Routinator crashes on specifically crafted RRDP XML files

    Affected: fixed in 0.15.2.

  • Routinator crashes on specifically crafted ASN strings in the API

    Affected: fixed in 0.15.2.

  • Routinator cache path traversal using rogue rsync URIs

    Affected: fixed in 0.15.2.

  • CVE-2023-39916Critical 9.3

    Possible path traversal when storing RRDP responses

    Affected: from 0.9.0, fixed in 0.12.2.

  • Fatal error on incorrect base64 data in RRDP

    Affected: from 0.9.0, fixed in 0.11.3.

  • gzip transfer encoding caused out-of-memory crash

    Affected: from 0.9.0, fixed in 0.10.2.

  • Infinite length chain of RRDP repositories

    Affected: fixed in 0.10.2.