MT
Vendor
mtrudel
24
CVEs
0
On KEV
14
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116078 New | BA bandit mtrudel | 8.7 | Oct 28 | HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit |
| CVE-2026-108529 New | BA bandit mtrudel | 8.7 | Oct 26 | SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit |
| CVE-2026-110499 New | BA bandit mtrudel | 8.7 | Oct 26 | Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit |
| CVE-2026-109584 New | BA bandit mtrudel | 8.7 | Oct 26 | HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit |
| CVE-2026-111103 New | BA bandit mtrudel | 8.2 | Oct 26 | HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit |
| CVE-2026-111101 New | BA bandit mtrudel | 8.7 | Oct 26 | HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit |
| CVE-2026-113436 New | BA bandit mtrudel | 8.7 | Oct 26 | Quadratic bignum parsing of Content-Length and Host port values in Bandit |
| CVE-2026-110314 New | BA bandit mtrudel | 6.3 | Oct 26 | WebSocket frames keep reaching the WebSock after a server-initiated close in Bandit |
| CVE-2026-114213 New | BA bandit mtrudel | 8.7 | Oct 26 | WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Bandit |
| CVE-2026-114216 New | BA bandit mtrudel | 6.3 | Oct 26 | Chunk extensions accept bare LF and CR, enabling request smuggling in Bandit |
| CVE-2026-115269 New | BA bandit mtrudel | 8.7 | Oct 26 | HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit |
| CVE-2026-108525 New | BA bandit mtrudel | 8.7 | Oct 26 | HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit |
| CVE-2026-105660 | BA bandit mtrudel | 6.9 | Oct 15 | Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit |
| CVE-2026-105659 | BA bandit mtrudel | 8.7 | Oct 14 | HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in Bandit |
| CVE-2026-75484 | BA bandit mtrudel | 6.9 | Aug 20 | HTTP/2 header field values containing CR, LF or NUL are passed to the application unvalidated in Bandit |
| CVE-2026-74836 | BA bandit mtrudel | 8.7 | Aug 20 | HTTP/2 connection-window starvation pins Plug processes indefinitely in Bandit |
| CVE-2026-65623 | BA bandit mtrudel | 8.7 | Jul 24 | Quadratic CPU blow-up reassembling fragmented WebSocket messages in Bandit |
| CVE-2026-39806 | BA bandit mtrudel | 7.5 | May 13 | HTTP/1 chunked decoder infinite loop on requests with trailer fields in bandit |
| CVE-2026-39803 | BA bandit mtrudel | 7.5 | May 13 | HTTP/1 chunked body reader ignores length cap in bandit |
| CVE-2026-39805 | BA bandit mtrudel | 6.3 | May 1 | CL.CL HTTP request smuggling via duplicate Content-Length in bandit |
| CVE-2026-39804 | BA bandit mtrudel | 8.2 | May 1 | WebSocket permessage-deflate inflate has no output-size cap in bandit |
| CVE-2026-39807 | BA bandit mtrudel | 6.3 | May 1 | Client-supplied URI scheme trusted without transport verification in bandit |
| CVE-2026-42786 | BA bandit mtrudel | 8.7 | May 1 | WebSocket fragmented message reassembly unbounded in bandit |
| CVE-2026-42788 | BA bandit mtrudel | 6.9 | May 1 | HTTP/2 frame size limit checked after body is buffered in bandit |