Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Cesanta Frozen 1.7 Clear all filters
TI-2025-00590 CVE-2025-0696 · GHSA-j86m-4332-jm3w

NULL pointer dereference in Cesanta Frozen

Priority LOW 30

A NULL Pointer Dereference vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00378 Published 2025-01-27 Fixed in 1.7 CWE-476
TI-2025-00589 CVE-2025-0695 · GHSA-59j2-vr29-mmmc

Resource allocation without limits in Cesanta Frozen

Priority LOW 30

An Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafte…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00378 Published 2025-01-27 Fixed in 1.7 CWE-770