Nbdkit Project

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Nbdkit Project records in CISA KEV

No Nbdkit Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Nbdkit · all components

TI-2019-11055 CVE-2019-14851 · GHSA-hj75-x8cx-fm4w

LOW 31

A denial of service vulnerability was discovered in nbdkit.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00988 Published 2021-03-18 No fix listed CWE-617

TI-2025-30209 CVE-2025-47712 · GHSA-fpfc-3gjg-hfhp

LOW 29

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00527 Published 2025-06-09 Partial fix · 1.38.6, 1.40.6 +1 CWE-190

TI-2025-30208 CVE-2025-47711 · GHSA-c8xj-fr2w-pjfc

LOW 29

There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00484 Published 2025-06-09 Partial fix · 1.38.6, 1.40.6 +1 CWE-193

TI-2019-11054 CVE-2019-14850 · GHSA-j552-f62v-mc74

LOW 21

A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01601 Published 2021-03-18 Partial fix CWE-406

TI-2021-02650 CVE-2021-3716 · GHSA-3vpg-mwgf-4jvj

LOW 16

A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00582 Published 2022-03-02 Partial fix CWE-924