CVE-2026-15276

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-15276
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-15276.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-15276
Downstream
Published
2026-07-09T22:00:12.390Z
Modified
2026-07-15T01:49:12.810771749Z
Severity
  • 1.9 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
pdeljanov Symphonia Metadata denial of service
Details

A flaw has been found in pdeljanov Symphonia up to 0.6.0. This vulnerability affects unknown code of the component Metadata Handler. This manipulation causes denial of service. The attack needs to be launched locally. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

Database specific 
{
    "cwe_ids": [
        "CWE-404"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/15xxx/CVE-2026-15276.json",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "0.1"
                },
                {
                    "last_affected": "0.1"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/pdeljanov/symphonia

Affected ranges

Type
GIT
Repo
https://github.com/pdeljanov/symphonia
Events
Introduced
4a0a61a3ed795ce57c40a07e2a598c37dd60c874
Last affected
980bf5830a90e069fd64641d9c38f067ab772a24
Database specific 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "0.2"
        },
        {
            "last_affected": "0.2"
        },
        {
            "introduced": "0.3"
        },
        {
            "last_affected": "0.3"
        },
        {
            "introduced": "0.4"
        },
        {
            "last_affected": "0.4"
        },
        {
            "introduced": "0.5"
        },
        {
            "last_affected": "0.5"
        },
        {
            "introduced": "0.6.0"
        },
        {
            "last_affected": "0.6.0"
        }
    ]
}

Affected versions

0.*
0.2
0.3
0.4
0.5
0.6.0
v0.*
v0.2.0
v0.3.0
v0.4.0
v0.5.0
v0.5.1
v0.5.2
v0.5.4
v0.6.0
v0.6.0-alpha.1
v0.6.0-alpha.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-15276.json"