Vulnerabilities

TI-2026-35849 CVE-2026-48487 · GHSA-qc2x-6f54-m6h9

Zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet

LOW 24

Zeroconf is a pure Python implementation of multicast DNS service discovery.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00467 Published 2026-07-17 Partial fix · 0.149.16 CWE-130

TI-2026-35487 CVE-2026-48045 · GHSA-9663-mqmp-p9mm

LOW 29

Zeroconf is a pure Python implementation of multicast DNS service discovery.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0037 Published 2026-07-17 Partial fix · 0.149.12 CWE-770

TI-2026-34773 CVE-2026-47184 · GHSA-rfg2-pjw2-56x2

LOW 29

Zeroconf is a pure Python implementation of multicast DNS service discovery.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00389 Published 2026-07-17 Partial fix · 0.149.7 CWE-770

TI-2026-34772 CVE-2026-47183 · GHSA-phvx-9mgw-67r5

LOW 29

Zeroconf is a pure Python implementation of multicast DNS service discovery.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00389 Published 2026-07-17 Partial fix · 0.149.6 CWE-400

TI-2026-34769 CVE-2026-47180 · GHSA-9pgc-3ccv-5297

LOW 29

Zeroconf is a pure Python implementation of multicast DNS service discovery.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0037 Published 2026-07-17 Partial fix · 0.149.5 CWE-674