pupnp vulnerabilities
CVEs whose affected-version data names the pupnp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-77630High· 7.5libupnp: libupnp: Denial of Service via synchronous hostname resolution (CVE-2026-77630)
A flaw was found in libupnp. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by submitting requests containing slow or non-responsive hostnames. Because the library performs synchronous netwo…
CVE-2026-57486High· 7.5PoCpupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes
pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNode_compare in ixml/src/node.c passes the nullable nodeValue, namespaceURI, prefix, and localName fields directly to strcmp. Non-namespac…
CVE-2026-57487High· 7.5libupnp: libupnp: Denial of Service via oversized chunked HTTP requests (CVE-2026-57487)
A flaw was found in libupnp. The HTTP parser fails to enforce configured message size limits when processing chunked transfer-encoded HTTP requests. A remote attacker can exploit this vulnerability by sending an excessively large chunked p…
CVE-2026-57488High· 7.1PoCpupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling
pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the …
CVE-2026-55862Medium· 6.5PoClibupnp: libupnp: Denial of Service via deeply nested XML (CVE-2026-55862)
A flaw was found in libupnp. Several Document Object Model (DOM) traversal functions process deeply nested XML structures using unbounded recursion. An unauthenticated attacker on the local network can exploit this flaw by sending a crafte…