GHSA-5qf9-cf9c-hjc6
NoneCVSS
—
EPSS
—
Published
Jun 8, 2026
CISA due date
—
The record
Routinator crashes when encountering maliciously crafted RRDP XML files
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | routinator | 0 | 0.15.2 |
Related vulnerabilities
- CVE-2026-49235 When Routinator encounters a file via RRDP using a specifically crafted Document Type… Same vulnerability
- GHSA-33mj-99mg-8g73 Routinator has cache path traversal when processing the module component of rsync URIs Also affects routinator
- GHSA-gc6q-cwcj-3vh9 Routinator crashes when sending a maliciously crafted select-asn query parameter Also affects routinator
- CVE-2026-49234 When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the… Also affects routinator
- CVE-2026-49233 Routinator does not properly check the module component of rsync URIs, which are used to… Also affects routinator
- CVE-2026-113795 pypdf is a free and open-source pure-python PDF library. CWE-400
- CVE-2026-83400 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… CWE-400
- CVE-2026-112400 Pillow is a Python imaging library. CWE-400