Vulnerabilities

TI-2026-45185 CVE-2026-63385

Libevent: HTTP header handling bugs create risk of access control bypass.

MEDIUM 42

Libevent is an event notification library.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.01292 Published 2026-08-20 Partial fix · 2.2.2-alpha, 2.1.13 CWE-444

TI-2026-45179 CVE-2026-63379

Libevent: HTTP Header smuggling

LOW 35

Libevent is an event notification library.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00518 Published 2026-08-20 Partial fix · 2.1.13, 2.2.2-alpha CWE-444

TI-2026-45187 CVE-2026-63387

Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response

MEDIUM 64

Libevent is an event notification library.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00416 Published 2026-08-20 Partial fix · 2.2.2-alpha, 2.1.13 CWE-121

TI-2026-45184 CVE-2026-63384

Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value.

HIGH 77

Libevent is an event notification library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00488 Published 2026-08-20 Partial fix · 2.2.2-alpha, 2.1.13 CWE-190

TI-2026-45180 CVE-2026-63380

Libevent: Null Pointer Dereference in `evws_new_session`

MEDIUM 59

Libevent is an event notification library.

CVSS 4.0MEDIUM 5.7 Local Low privileges No interaction EPSS 0.0014 Published 2026-08-20 Partial fix · 2.2.2-alpha CWE-416

TI-2026-45182 CVE-2026-63382

libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling

HIGH 81

Libevent is an event notification library.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.01991 Published 2026-08-20 Partial fix · 2.2.2-alpha, 2.1.13 CWE-444

TI-2026-45181 CVE-2026-63381

Libevent: Dangling Pointer in `evbuffer_add_buffer_reference`

LOW 25

Libevent is an event notification library.

CVSS 4.0MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00121 Published 2026-08-20 Partial fix · 2.2.2-alpha, 2.1.13 CWE-908

TI-2026-45237 CVE-2026-63495

Libevent: Unbounded memory accumulation in WebSocket server via fragmented frames

HIGH 72

Libevent is an event notification library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00609 Published 2026-08-20 Partial fix · 2.2.2-alpha CWE-400

TI-2026-45183 CVE-2026-63383

Libevent: decode_tag_internal() can lead to out-of-bounds read

HIGH 77

Libevent is an event notification library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00488 Published 2026-08-20 Partial fix · 2.2.2-alpha, 2.1.13 CWE-125

TI-2026-45188 CVE-2026-63388

Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept

LOW 37

Libevent is an event notification library.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00142 Published 2026-08-20 Partial fix · 2.1.13, 2.2.2-alpha CWE-617

Vulnerabilities

Filters