OSV - Open Source Vulnerabilities

PYSEC-2026-3438

PyPI/zeroconf

zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet

4 days ago

Fix available
Severity - 4.9 (Medium)

PYSEC-2026-3435

PyPI/zeroconf

python-zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood

4 days ago

Fix available
Severity - 6.5 (Medium)

PYSEC-2026-3439

PyPI/zeroconf

zeroconf has unbounded DNS record cache that allows LAN-local memory exhaustion via multicast flood

4 days ago

Fix available
Severity - 6.5 (Medium)

PYSEC-2026-3437

PyPI/zeroconf

zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion

4 days ago

Fix available
Severity - 6.5 (Medium)

PYSEC-2026-3436

PyPI/zeroconf

zeroconf has unbounded recursion in DNS compression-pointer decoder that allows LAN-local denial of service

4 days ago

Fix available
Severity - 6.5 (Medium)

GHSA-qc2x-6f54-m6h9

PyPI/zeroconf

zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet

22 Jun

Fix available
Severity - 4.9 (Medium)

GHSA-9663-mqmp-p9mm

PyPI/zeroconf

python-zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood

11 Jun

Fix available
Severity - 6.5 (Medium)

GHSA-rfg2-pjw2-56x2

PyPI/zeroconf

zeroconf has unbounded DNS record cache that allows LAN-local memory exhaustion via multicast flood

29 May

Fix available
Severity - 6.5 (Medium)

GHSA-phvx-9mgw-67r5

PyPI/zeroconf

zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion

29 May

Fix available
Severity - 6.5 (Medium)

GHSA-9pgc-3ccv-5297

PyPI/zeroconf

zeroconf has unbounded recursion in DNS compression-pointer decoder that allows LAN-local denial of service

29 May

Fix available
Severity - 6.5 (Medium)