mtrudel

Records24All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

mtrudel records in CISA KEV

No mtrudel vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bandit 2 records HIGH

Records

2 records in Bandit · all components

TI-2026-28689 CVE-2026-39806 · GHSA-rf5q-vwxw-gmrf

HTTP/1 chunked decoder infinite loop on requests with trailer fields in bandit

HIGH 77

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in mtrudel bandit allows unauthenticated remote denial of service via worker process exhaustion.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00637 Published 2026-05-13 Fixed in 1.11.1 CWE-835

TI-2026-28686 CVE-2026-39803 · GHSA-9q9q-324x-93r2

HTTP/1 chunked body reader ignores length cap in bandit

HIGH 77

Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00642 Published 2026-05-13 Fixed in 1.11.1 CWE-770

Open these records in search →

Critical	0
High	17
Medium	7
Low	0
No CVSS	0