Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

zeroconf

5 known vulnerabilities (5 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 5 medium
Registry
PyPI

Advisories 5

  • CVE-2026-48487Medium 5.3

    Zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet

    Affected: fixed in 0.149.16.

  • CVE-2026-48045Medium 6.5

    Zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood

    Affected: fixed in 0.149.12.

  • CVE-2026-47184Medium 6.5

    Zeroconf: Unbounded DNS record cache allows LAN-local memory exhaustion via multicast flood

    Affected: fixed in 0.149.7.

  • CVE-2026-47183Medium 6.5

    Zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion

    Affected: fixed in 0.149.6.

  • CVE-2026-47180Medium 6.5

    Zeroconf: Unbounded recursion in DNS compression-pointer decoder allows LAN-local denial of service

    Affected: fixed in 0.149.5.