RO
Product
Routinator
19
CVEs
0
On KEV
8.7
Max CVSS
7
New 30D
Severity mix
Critical 0High 15Medium 3Low 1
Watch
Add Routinator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-49232 | 8.7 | Jun 8 | Routinator exits when accepting an incoming HTTP or RTR connection fails Affected: All versions, or not specified |
| CVE-2026-72753 New | 8.2 | Oct 26 | Routinator incorrectly handles delta updates Affected: All versions, or not specified |
| CVE-2026-72758 New | 7.5 | Oct 26 | Routinator may exit on malformed ranges Affected: All versions, or not specified |
| CVE-2026-72756 New | 7.5 | Oct 26 | Routinator exits on malformed rsync URIs Affected: All versions, or not specified |
| CVE-2026-72754 New | 7.5 | Oct 26 | Routinator exits when parsing an incorrect or very large CRL file Affected: All versions, or not specified |
| CVE-2026-49235 | 7.5 | Jun 8 | Routinator crashes on specifically crafted RRDP XML files Affected: All versions, or not specified |
| CVE-2026-49234 | 7.5 | Jun 8 | Routinator crashes on specifically crafted ASN strings in the API Affected: All versions, or not specified |
| CVE-2026-49233 | 7.5 | Jun 8 | Routinator cache path traversal using rogue rsync URIs Affected: All versions, or not specified |
| CVE-2025-0638 | 7.5 | Jan 22 | Routinator crashes when illegal characters are present in manifest file names Affected: All versions, or not specified |
| CVE-2024-1622 | 7.5 | Feb 26 | Routinator terminates when RTR connection is reset too quickly after opening Affected: All versions, or not specified |
| CVE-2023-39915 | 7.5 | Sep 13 | Crashes on parsing certain invalid RPKI objects Affected: before 0.12.2 |
| CVE-2022-3029 | 7.5 | Sep 13 | Fatal error on incorrect base64 data in RRDP Affected: through 0.11.2 |
| CVE-2021-43174 | 7.5 | Nov 9 | gzip transfer encoding caused out-of-memory crash Affected: through 0.10.1 |
| CVE-2021-43173 | 7.5 | Nov 9 | Hanging RRDP request Affected: through 0.10.1 |
| CVE-2021-43172 | 7.5 | Nov 9 | Infinite length chain of RRDP repositories Affected: through 0.10.1 |
Showing 15
