Vulnerabilities

TI-2026-32329 CVE-2026-44372 · GHSA-9phm-9p8f-hw5m

Nitro: Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules

LOW 32

Nitro is a next generation server toolkit.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0028 Published 2026-05-13 Fixed in 3.0.260429-beta, 2.13.4 CWE-601

TI-2026-32330 CVE-2026-44373 · GHSA-5w89-w975-hf9q

MEDIUM 57

Nitro is a next generation server toolkit.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00453 Published 2026-05-13 Fixed in 3.0.260429-beta, 2.13.4 CWE-22

TI-2016-07170 CVE-2016-8713 · GHSA-vf37-jh3m-72wr

LOW 36

A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01057 Published 2017-02-10 No fix listed CWE-787

TI-2016-07168 CVE-2016-8711 · GHSA-qgx3-p567-99p4

LOW 38

A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01958 Published 2017-02-10 No fix listed

TI-2016-07166 CVE-2016-8709 · GHSA-mw22-w3fv-8wcc

LOW 37

A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01293 Published 2017-02-10 No fix listed CWE-787