Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

108 records

TI-2026-63304 CVE-2026-94084 · GHSA-4jpj-5857-48jp

Use after free in OISF Suricata

Priority MEDIUM 49

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.0054 Published 2026-09-20 Fixed in 8.0.7 CWE-416
TI-2026-63303 CVE-2026-94083 · GHSA-4wwf-734g-mqm8

Type confusion in OISF Suricata

Priority MEDIUM 49

Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 (when there is a DoH2 request with an HTTP1 to HT…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.0054 Published 2026-09-20 Fixed in 8.0.7 CWE-843
Load more