nicotine-plus vulnerabilities
CVEs whose affected-version data names the nicotine-plus package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-68911High· 8.7Nicotine+ is a graphical client for the Soulseek peer-to-peer network
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient…
▾ Twilightnicotine-plus · nicotine-plusEPSS 0.30%via NVD
CVE-2021-45848High· 7.5Nicotine+ DoS on Null Character in Download Request
Nicotine+ DoS on Null Character in Download Request
▾ Twilightnicotine-plus · nicotine-plusEPSS 1.6%via OSV