PU
Product
pupnp
by pupnp · last CVE Oct 16, 2026
6
CVEs
0
On KEV
7.5
Max CVSS
5
New 30D
Severity mix
Critical 0High 4Medium 2Low 0
Watch

Add pupnp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41682
6.9
0%
May 8
pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion
Affected: < 1.18.5
CVE-2026-55862
6.5
0%
Oct 16
pupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow
Affected: < 2.0.0
Showing 2