Vulnerabilities

TI-2025-19714 CVE-2025-26819 · GHSA-w9f7-3m82-hj3j

Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections.

MEDIUM 44

Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00557 Published 2025-02-14 Fixed CWE-770

TI-2020-16371 CVE-2020-26947 · GHSA-84vm-7xwp-67qq

monero-wallet-gui in Monero GUI before 0.17.1.0 includes the .

LOW 34

monero-wallet-gui in Monero GUI before 0.17.1.0 includes the .

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00334 Published 2020-10-10 No fix listed CWE-427

TI-2018-02940 CVE-2018-3972 · GHSA-4844-9f5j-f96x

Deserialization of untrusted data in https://github.com/sabelnikov Epee

MEDIUM 48

An exploitable code execution vulnerability exists in the Levin deserialization functionality of the Epee library, as used in Monero 'Lithium Luna' (v0.12.2.0-master-ffab6700) and other cryptocurrencies.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03686 Published 2018-09-26 No fix listed CWE-502

Vulnerabilities

Filters

Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections.

monero-wallet-gui in Monero GUI before 0.17.1.0 includes the .

Deserialization of untrusted data in https://github.com/sabelnikov Epee