What’s Vulnerable › Products

pupnp vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your pupnp version is affected

Latest pupnp vulnerabilities

• CVE-2026-77630 — pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing (CVSS 7.5)
• CVE-2026-57488 — pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling (CVSS 7.1)
• CVE-2026-57487 — libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered (CVSS 7.5)
• CVE-2026-57486 — pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes (CVSS 7.5)
• CVE-2026-55862 — pupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow (CVSS 6.5)
• CVE-2026-41682 — pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion (CVSS 6.9)
• CVE-2021-29462 — DNS rebinding in pupnp (CVSS 9.8)
• CVE-2021-28302 — (CVSS 7.5)