sniproxy vulnerabilities

CVEs whose affected-version data names the sniproxy package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119760High· 7.5

1w ago

sniproxy through 0.7.0 NULL Pointer Dereference via resolv_cancel()

sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthenticated attackers to crash the daemon by sending overlong hostnames. Attackers can send a 254 or 255 character TLS SNI…

▾ Twilightdlundquist · sniproxyEPSS 0.48%via CVEORG