What’s Vulnerable › Products

python-zeroconf vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your python-zeroconf version is affected

Latest python-zeroconf vulnerabilities

• CVE-2026-48487 — Zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet (CVSS 5.3)
• CVE-2026-48045 — Zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood (CVSS 6.5)
• CVE-2026-47184 — Zeroconf: Unbounded DNS record cache allows LAN-local memory exhaustion via multicast flood (CVSS 6.5)
• CVE-2026-47183 — Zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion (CVSS 6.5)
• CVE-2026-47180 — Zeroconf: Unbounded recursion in DNS compression-pointer decoder allows LAN-local denial of service (CVSS 6.5)