esp-protocols vulnerabilities

CVEs whose affected-version data names the esp-protocols package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-64860Medium· 6.5

yesterday

espressif/mdns has Uncontrolled Recursion in mDNS Name Decompression

ESP-Protocols is a collection of protocol components for ESP-IDF. Prior to mDNS version 1.11.2, the `mdns` component follows DNS name-compression pointers recursively when parsing fully qualified domain names (FQDNs) in inbound mDNS pack…

▾ Sunlitespressif · esp-protocolsvia CVEORG