Mongoose is an embedded web server and network library. Prior to 7.22, a remote unauthenticated attacker can exploit an HTTP/1.0 reverse-proxy deployment by sending a request with Transfer-Encoding: chunked and conflicting framing. The httpcb() function in src/http.c tests hm.proto.len with an impossible greater-than-eight condition even though mghttpparse() requires an eight-byte protocol string, so ishttp10 is never set. Mongoose consequently processes chunked encoding that an HTTP/1.0 proxy can ignore, enabling request smuggling and unauthorized access or state changes. This issue is fixed in version 7.22.
{
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-444"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73256.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73256.json"
[
{
"target": {
"function": "mg_tls_recv_cert",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-004dae75",
"signature_version": "v1",
"digest": {
"length": 3711.0,
"function_hash": "287628499716142521955651966755790710557"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/tls_rsa.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-00572943",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"135878911087546785168183389357946430568",
"140388943525191225273174121718188200172"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "rx_ndp_ra",
"file": "src/net_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-014dc236",
"signature_version": "v1",
"digest": {
"length": 1949.0,
"function_hash": "291002711997149435366708935068436443899"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_http_next_multipart",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-02b34820",
"signature_version": "v1",
"digest": {
"length": 1332.0,
"function_hash": "271772299627380034480793415644141608842"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_der_debug_cert_name",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-05c9ce62",
"signature_version": "v1",
"digest": {
"length": 876.0,
"function_hash": "119484312311729218313841294515703490182"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_verify_cert_cn",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-073f8323",
"signature_version": "v1",
"digest": {
"length": 356.0,
"function_hash": "223520999800417555437934450563538821997"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_file_write",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-07c95ca0",
"signature_version": "v1",
"digest": {
"length": 486.0,
"function_hash": "210789633457643583043259984651009903760"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/dns.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-0dee8c68",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"323762034003313938239191035668036545734",
"278088108927226750224863652108869185913",
"258780519879097280652998131942610438013",
"210666658011398534004262757687681192459"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "mg_ssl_key_log",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-0e3c5078",
"signature_version": "v1",
"digest": {
"length": 620.0,
"function_hash": "178757615423858552878285911075762362845"
},
"signature_type": "Function"
},
{
"target": {
"function": "ssl_keylog_cb",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-0f2cbd5f",
"signature_version": "v1",
"digest": {
"length": 279.0,
"function_hash": "26042152181086916149296364037127903400"
},
"signature_type": "Function"
},
{
"target": {
"function": "skip_chunk",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-102a63fe",
"signature_version": "v1",
"digest": {
"length": 713.0,
"function_hash": "256451399111438138895174480287355639934"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_verify_cert_san",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-11eda537",
"signature_version": "v1",
"digest": {
"length": 1218.0,
"function_hash": "245598739821504207986080235075487799128"
},
"signature_type": "Function"
},
{
"target": {
"function": "printdirentry",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-14f16fab",
"signature_version": "v1",
"digest": {
"length": 1385.0,
"function_hash": "197196291767139600441749744914094809170"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_init",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-16ddf083",
"signature_version": "v1",
"digest": {
"length": 4249.0,
"function_hash": "78487270749648106634604725345797439449"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/drivers/cyw.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-1782825f",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"33386847719558698537727800308650150078",
"73016749896233373528860427606944990587",
"95113038063131343464802745742757593491",
"260253014940381019242356514965318486913"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "mg_l2_ppp_init",
"file": "src/l2_ppp.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-1ae0c3ae",
"signature_version": "v1",
"digest": {
"length": 124.0,
"function_hash": "288947917236156155490905987055432606671"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_parse_cert_der",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-1b383e5e",
"signature_version": "v1",
"digest": {
"length": 4730.0,
"function_hash": "203975432014465076341191972595335290773"
},
"signature_type": "Function"
},
{
"target": {
"file": "tutorials/mqtt/mqtt-server/main.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-1c0ab715",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"144287353989316942174917432103467706274",
"86345465872091345859928361637993396758",
"332483499486768402489767670898298009887",
"129703102680295537620519127194602614367",
"312542443499427273288122984437586581366",
"212180053471062612464638912731021188668",
"49572783198542565138427400835896609152",
"258181605499529108847897015353598100333"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "find_opt",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-1c70093e",
"signature_version": "v1",
"digest": {
"length": 382.0,
"function_hash": "338435928879605611046398857867264628027"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_init",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-1e1d64ae",
"signature_version": "v1",
"digest": {
"length": 4249.0,
"function_hash": "78487270749648106634604725345797439449"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/fs.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-1e72e5c0",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"230430873763238066469482013697192065017",
"224627688305521428575807905152272914446",
"310408317756248008075785314933596041003",
"87690224252503130711311032426523966420",
"115077142643673349757901192911319661264",
"268026456378666524531312189182996048302",
"102258537728051947322975896684432937595",
"269069890299507051023317814716822813978",
"295109766319707597293891709606188630851",
"119149522512066640484223909619193016085",
"177427404384975480371774329621742561779",
"124012712097989189377296174327090009662",
"201913907345666952727676808657515996295",
"191030403299871298014566886997312975349"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "skip_chunk",
"file": "src/http.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-24f76cc6",
"signature_version": "v1",
"digest": {
"length": 713.0,
"function_hash": "256451399111438138895174480287355639934"
},
"signature_type": "Function"
},
{
"target": {
"function": "listdir",
"file": "src/http.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-288f0503",
"signature_version": "v1",
"digest": {
"length": 3035.0,
"function_hash": "316624409977202983390184587231308637144"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_der_find_oid",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-321a6ff6",
"signature_version": "v1",
"digest": {
"length": 435.0,
"function_hash": "183403931862235246509971980857171726939"
},
"signature_type": "Function"
},
{
"target": {
"function": "rx_ip",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-32f2cf5d",
"signature_version": "v1",
"digest": {
"length": 3002.0,
"function_hash": "60018149680491766373986046346055696805"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-386f6bc0",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"196480247972839381791816979746574616765",
"19571469751945612133790407869324927414",
"135738648813901628968059912069456480808",
"15460033969417638971828292509880011651",
"200231667551056318621568619775785224323",
"33198753835631155674895965219918538826",
"147780645116516167870796938058621591162",
"220879119185117989693561401495440539596",
"316787075831798734384953909413843080907",
"2783115143475840227859844843821035493",
"163713228361641250898968470540051066349",
"112287400186701863962073463703547609574",
"246224180538254291469104668407583774803",
"69364965006474916416363729380470562763",
"189165530753507570940644856966377329192",
"92485289566479090987540088768870402169",
"38527071832268731725426950801845647146",
"89165040637268650732813974495735033753",
"189852552634466819005250730163380464968",
"157041747907666006208044891451190885906",
"15816353358796487354358396085376359099",
"28240404497880903972189619398287436840",
"88021926929185532458955840426579985467",
"164756482020469435388436325313877315462",
"2221777887795751017617688661864893591",
"305407463024304548130196606906410878762",
"60009996524188474217093682539147842829",
"227118336089805870812864826341105371868",
"21784341378700188027974319065888775563",
"203335200195116276984833050988434047487",
"206492324704945625654862249349976438507",
"144815525664916353913140625001006660039",
"79034505402800722861868156437850219145",
"321723477737740125454197823596542652706",
"313049198470387297537794644905491985654",
"44505765909491870592298937651470080687",
"173249299508180350782252823162533369663",
"139180089924521928383560901509702502751",
"70584283708665997819962806195533184925",
"214705088167228414953236740661648073536",
"189226502013782129419550274744100556885",
"176285187880089093561480489738000288018",
"305113864016631800646296723664919733415",
"339176960987294900202080000164739298196",
"249105431065302940479115253991436174933",
"95391750759930538679428868582085558538",
"290759218603385751554429593277677055881",
"297809011341383347336703406327010480625",
"61542593005966947055733028662414149458",
"10714498546213741401743468168633824269",
"258770002393716746640150119328410327173",
"31435421984330512662993246907942280128",
"272823635109084798438112164603587191888",
"255939596092783587984493327782854963919",
"185984173708500757653837962644550893333",
"212714826820092570153070731402317387706",
"312380295388490930042275647167876787590",
"127677395595787442576521572158330094602",
"155270041178741552002345129105328586692",
"268992290226833759395226851762309115823",
"111472750078548222216015413945263622375",
"267868390585593816517915983992887850017",
"136803458577079335620766807177727942285",
"184191480112958967387205082461126484008",
"320385786278485115696251022103476911193",
"45023453441225608848665406981917597392",
"44410860698388288439204454003800754978",
"3665073216006753514618862081777752249",
"10653606925425677975126701360033739048",
"27987974001485429266384084916625572562",
"326790896270386239037718290041699567012",
"339248409394338858364104821540364491004",
"210227221900903306717702479895397220242",
"181511796645686442639179598100905657826",
"336549907333876443539050669328785927507",
"287667717728167268361733128802414307356",
"161711644820091367793862800852356511072",
"176155408544253685655214622469624104212",
"333524572826694396681287479974129676957",
"134703114333521490549881677821607104315",
"36470572211285718732348029145255010120",
"180358384075521211883730399165940572684",
"135116063973474434553655234550213805537",
"263507037420949922950770560590017284010",
"297295444819886776360825326696600298970",
"237091077963936437947498310383627899804",
"83794079943830085462744832257669246335",
"132062244101569587596745813497247937483",
"169672006949913823979663260497495943820",
"5638527425915817927799472676386071671",
"16529865300211693623870178952980903025",
"280930834117853212902094316619686846844",
"2425361400536483050697752040274890085",
"197666525578706352099309819999654182909",
"145995069942282369056304534640208644827",
"1861194980013761239651449453405677138",
"164623427066540388397036661264812601005",
"68446135275369846144487391830739339539",
"148586744301685106588095027273899497414",
"148925615984659153759026475201527803607",
"275863428623025763261412570172699824520",
"36790375108998893732688547977499404378",
"94163129876526644181961621107837825680",
"173458148812154465894027571614359292397",
"258366589447180125150910512487336853510",
"105328809235888547998450664627098827353",
"325626069971103235195642729215934349876",
"190156542111070956014582074505834952066",
"90381076227464047808699584178186310469",
"66999194520399122903551864098802542073",
"229502949640248129603772470893921984433",
"149353026389045427958795460773600920857",
"105766952094404296810022732704911101474",
"236786974811405036836787363631893401902",
"229474298323209594761370949532420781648",
"278593657661054376277533400876072660851",
"108944754070022152407668540485191220649",
"173566431643807476763727849464544689133",
"279606985497198810375515453324598036147",
"197324619768808038779438852083397046123",
"138889878243091156284632651012974200476",
"87289462312804180252600322307577151836",
"108424785653033183106946992607965838466",
"113012497480877804534774384955236685022",
"71472467297603241073929397709260350263",
"2975354743608892629608989244975485664",
"278199329522120092411417415282829743247",
"90506609868245861838015579044343469090",
"296917873473010081886039270526276322527",
"336611567347049620732329420555644016311",
"121826454884805953535597634349078809183",
"99846133856492044547093843593490919452",
"215285410891476796156916613398866516606",
"327812755415604668472748789109743528175",
"317938451070749609689298893835456130460",
"293435598131634151551609676646860660674",
"56673162217852094411700792378178116698",
"51337264676664327826336571402041424948",
"292529381370465992307320862172413837633",
"164964469027713502571297813205030189035",
"201067898980678872724437180292939236379",
"282712885768977940211066990092485447517",
"41793161490796715102359109991495279459",
"264467030943599513130432271317758826371",
"107438321627802814811431583083867570154",
"169771800780111346940420437804080209639",
"210138463810262537321795091002868603566",
"336528393942168812515596928259927525885",
"185416056443798254176007086120694330185",
"287849806752779988392061023546911269209",
"203504624751826365860019485907826851413",
"164661308221380417377525832944874642277",
"36240222373818586103152093764597059602",
"89434136947122063517622444501038772398",
"90149692098701916256665802452602801418",
"55764996051404441321771434999679479806",
"25918007604254469958258029993456842122",
"104994446321625607360309755818921126143",
"305191474246975814514692871660333724306",
"154445442251196475412757146298364530683",
"227912314176454724057469772962829100499",
"251369218191359433076590312471197259330",
"232487347917717147897500862682534331198",
"10339574188637316680430524487429143872",
"207768197158860921235973806913297775938",
"164383082120940907404641112000968607709",
"232557516497615365632609089373382302121",
"279323618245719570534912993160880427400",
"202879780752321978350960258554829299175",
"305044321457604937421459291798851259765",
"92606193502678453847245471711234807251",
"72843265283818449893370594651375200443",
"156589332149265453555126431687180872823",
"136745404714325131069068433962413683921",
"101029245618331163826594823026111690104",
"252558451237531693731446203155695997434",
"24473394478528000454472038284135064473",
"42761725021697143898019224609692917708",
"226693977470646206675848302032299973965",
"90442131257686108749117474337121798987",
"185275514621728202234635766955889494710",
"256550698009348655608228695053974657271",
"168274967567645364791911248927988443016",
"250660384276971028873202409664886803117",
"40347156880750530389031764073694530716",
"177696559888269327619511654923480720554",
"258930192411258833291594823164625986881",
"329505966588041481371488711060843801039",
"139943472294742398921276591779247270454",
"168592425070540874042905855949882546241",
"61578227396275733176638093254854357367",
"75813122189328617333927080171974291583",
"235817542668208982769356653380238838599",
"66417746558487617050631024119894192809",
"210552768496793899294421456702942748451",
"316996834580047785750702890694286921015",
"212430159429083820243309157633391846730",
"72360967113924943574510957390216307717",
"99737620400996383635432463402739827623",
"269913924708743169513982202571577008595",
"286208907069549802375733087869714206710",
"55287624610757281583526062030251782024",
"88266645663993400860350164592737447891",
"322131690705043086041787336620827274422",
"28047059807207941205467521990333255561",
"332873612958469487832430754425114548796",
"265414682376929430097426663329266570659",
"321272112168689236930615395375495339472",
"129274256678257293675720118184715976765",
"80178392581499665406322011524160323024",
"62951553429190226830643579803814270370",
"173208216918400708884037861738995072189",
"87079156882433979316123167196031305539",
"206306016865255370452730752537998506033",
"133551016911218472965760610188417523364",
"131975897850635728264177387310640768042",
"45862309754147688631798141126528658122",
"107597438453966108348215802432884643267",
"118509456994131637134459941600340425724",
"173458821424414474824247785929123968337",
"175287094098081811371018374114406663817",
"110651857497355339805356935142677484874",
"70772380586533020466973497200275263035",
"101395733483462198400359838802933345389",
"140951541816416420572470619602414953194",
"140250281726493015431970617664862547532",
"319973293508850402716062119813510765366",
"219203567917632999307861927224224084141",
"85491697752081236902538082052496432116",
"91102997286436817678750243446278973911",
"196275597185789214171438869727574948983",
"235291102320504582823644442424969462400",
"299649805363586378403039698967225429025",
"237004861150485151617057579451541901153",
"261619104848898290722097106015465777833",
"181823215701531210724769735372087061194",
"89335556806806098763068853832349346682",
"314512077817306413862923729729032604938",
"119460052135499741291393709563372770313",
"158888373103203376139019592929909013096",
"194643407671496287263325918393946527016",
"120282882101935496517330086629933792505",
"42367173893458503344840187936423554206",
"335343665999778433349182061809560065403",
"39305793639437378887194397999434501761",
"259163489026268287716417919820442054877",
"21335670049025419835650000679624768241",
"249896841789403473423573177469648317167",
"208522707338628788301839404932835464434",
"323881422038789738544605443192708321296",
"147229137252370840057910616408872557438",
"54259086156891479119666638378842805938",
"244484094314809774477346397667501102584",
"108820518643769538796036170745725241295",
"225557564602503457456933902088826082079",
"38033422020052497739913395646036957809",
"51050825397733422681276123002806643641",
"163381679406020714038890273217095983184",
"44849066221541487728077792551739097692",
"263260079282872919442309967534272447206",
"118173759627633864110024234213216766356",
"170916413850618119192095436563031487794",
"307368324365372566250344915740159246085",
"195102097404035604975787826593287533179",
"214591970131814603268892158548808108754",
"267178536257195519793995616103759823151",
"135372539677710061889473210528066544359",
"186294499592872814951351212674123644968",
"91759035101790330176583656292471516551",
"269226888281473753726088352671187090281",
"131420796044741360772915897485345608936",
"288213638710982064842699495826434138108",
"162460804885925280164062161894847912294",
"256714078351573401618158333415702030581",
"14212449010339456941003039032935016868",
"59433016979304922066902774582419420730",
"315695039565149697763735313610956015758",
"79328659598168281632584406979330784960",
"159690255197568102416964861917327801818",
"115667512532816908060596729172305984196",
"124322224408734240417929251726918137967",
"230442999336908350325688289697638495499",
"165226016383468195979863081461160323611",
"104332165290859217302589428462122783360"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "mg_tls_parse_cert_der",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-39760f0c",
"signature_version": "v1",
"digest": {
"length": 4730.0,
"function_hash": "203975432014465076341191972595335290773"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/tls_openssl.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-39887bd1",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"144245873888813543256860948554916737517",
"156974303944384768142132592772629231510",
"335002089565198348023314874690191623195",
"26703405745066101628510946356396352378",
"303164798085481983517497933712755808857",
"266071836976923005203425243708469560390",
"319859289827501350751564690823644451616",
"45881186688112204685606100939119584351",
"144046411448518943733305602929672998098",
"225579440426105750816714004337458412271",
"112093721158145502249763640542786295096",
"207252406453496841320595240011609886517"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "mg_der_parse",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-41de1b02",
"signature_version": "v1",
"digest": {
"length": 522.0,
"function_hash": "204837281810421356040448144032297700600"
},
"signature_type": "Function"
},
{
"target": {
"function": "test_http_server",
"file": "test/unit_test.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-466d9e56",
"signature_version": "v1",
"digest": {
"length": 10950.0,
"function_hash": "255182389209152823269116943376632970743"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/drivers/rw612.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-467a35b5",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"108053881415493548678616178740121635819",
"105970303446503634318863339705264358834",
"46493805877957033431410180852137793558",
"304528413051193093178670737973205436174",
"125515618518036769226182321833625464565",
"42398812645571065081727478806607162831",
"220109016561833368524810200016727232379",
"108587633537507210242609878158511307392"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "cyw_spi_tx",
"file": "src/drivers/cyw.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-48a2bd43",
"signature_version": "v1",
"digest": {
"length": 175.0,
"function_hash": "64814422700544834845641903742945723180"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_server_send_hello",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-49192cbe",
"signature_version": "v1",
"digest": {
"length": 1354.0,
"function_hash": "266027483394200838020725210988023120113"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/fs_fat.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-498dfbee",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"186778020665132596169903390885993368535",
"227716762516919383642389641604494451127",
"75642557129534238316573424586541680093",
"94838749372654004096325430835195751659",
"218142066842326008024417698923950256587",
"301486415977692652109238790770149737661",
"233029097846065087048546162461876347541",
"268125993961868321736911587253042118065",
"54092087246084178709668952642437427928",
"5677682559455175262493175153832722944",
"281032589446840747351605652032924091807",
"41048267615843948020856442143425376129",
"220884027888050459794073188008898298494",
"126481238330447032479807566805008708367",
"100051507356064322850300327951092118727"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "opendir",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-4aa141b5",
"signature_version": "v1",
"digest": {
"length": 628.0,
"function_hash": "33099097302519973937135944869964649618"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_ssi",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-4ac35f11",
"signature_version": "v1",
"digest": {
"length": 2711.0,
"function_hash": "255045508415858940969396310421318667750"
},
"signature_type": "Function"
},
{
"target": {
"function": "sendnsreq",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-4c90e3b5",
"signature_version": "v1",
"digest": {
"length": 946.0,
"function_hash": "189015025929389535477227129610619276644"
},
"signature_type": "Function"
},
{
"target": {
"function": "ppp_handle_ipcp",
"file": "src/l2_ppp.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-4c92cb08",
"signature_version": "v1",
"digest": {
"length": 1743.0,
"function_hash": "144707852256391504506290498507820758943"
},
"signature_type": "Function"
},
{
"target": {
"function": "rx_ndp_na",
"file": "src/net_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-4da9cd4e",
"signature_version": "v1",
"digest": {
"length": 1048.0,
"function_hash": "315757571796826943100881807577196416376"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/tls_aes128.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-4fe74de7",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"232926924712802004303793714499228063071",
"316939765349418211561898210592612985897",
"179652550948467297850393763174478308894"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "ppp_rx",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-50a33d1f",
"signature_version": "v1",
"digest": {
"length": 1841.0,
"function_hash": "219807646646475264545880255840701802076"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_recv_cert_verify",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-50d74b85",
"signature_version": "v1",
"digest": {
"length": 2963.0,
"function_hash": "142162602858885939250911926702291407342"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tcpip_driver_tms570_tx",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-51d74a16",
"signature_version": "v1",
"digest": {
"length": 800.0,
"function_hash": "22655348550130318506917877452664758148"
},
"signature_type": "Function"
},
{
"target": {
"function": "test_multipart",
"file": "test/unit_test.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-5617308d",
"signature_version": "v1",
"digest": {
"length": 1051.0,
"function_hash": "291115628738767968439301577568409707801"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_der_find_oid",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-5868b821",
"signature_version": "v1",
"digest": {
"length": 435.0,
"function_hash": "183403931862235246509971980857171726939"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_http_get_header_var",
"file": "src/http.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-5990253b",
"signature_version": "v1",
"digest": {
"length": 651.0,
"function_hash": "268816195737953069037066117349243959276"
},
"signature_type": "Function"
},
{
"target": {
"function": "rx_ndp_ns",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-5c72f468",
"signature_version": "v1",
"digest": {
"length": 632.0,
"function_hash": "39907512787864484157073233665895357876"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_l2_eth_init",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-63f2bb8c",
"signature_version": "v1",
"digest": {
"length": 526.0,
"function_hash": "283343547696634127647568708727816008983"
},
"signature_type": "Function"
},
{
"target": {
"function": "http_cb",
"file": "src/http.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-66f2d7e8",
"signature_version": "v1",
"digest": {
"length": 3312.0,
"function_hash": "152849641657646075686452913327616229632"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_rsa_parse_key",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-6910b7d4",
"signature_version": "v1",
"digest": {
"length": 4057.0,
"function_hash": "204011386459985006163637130409586660482"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_dtoa",
"file": "src/fmt.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-6af655a0",
"signature_version": "v1",
"digest": {
"length": 2417.0,
"function_hash": "251264346192913908584645015822363229932"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_der_to_tlv",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-6bb718f1",
"signature_version": "v1",
"digest": {
"length": 505.0,
"function_hash": "11357603138552287084322613246366122547"
},
"signature_type": "Function"
},
{
"target": {
"function": "trim_len",
"file": "src/net_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-6e228b44",
"signature_version": "v1",
"digest": {
"length": 708.0,
"function_hash": "265007262428071382475737538858570700360"
},
"signature_type": "Function"
},
{
"target": {
"function": "listdir",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-6e33b8f7",
"signature_version": "v1",
"digest": {
"length": 3035.0,
"function_hash": "316624409977202983390184587231308637144"
},
"signature_type": "Function"
},
{
"target": {
"function": "rx_dhcp_client",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-6e58db61",
"signature_version": "v1",
"digest": {
"length": 2785.0,
"function_hash": "222663043280264277440285146591822436632"
},
"signature_type": "Function"
},
{
"target": {
"function": "printdirentry",
"file": "src/http.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-6f5b9d18",
"signature_version": "v1",
"digest": {
"length": 1385.0,
"function_hash": "197196291767139600441749744914094809170"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_l2_pppoe_init",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-70a087ab",
"signature_version": "v1",
"digest": {
"length": 139.0,
"function_hash": "146752807320950357188200675449620747160"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_http_get_header_var",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-729458f0",
"signature_version": "v1",
"digest": {
"length": 651.0,
"function_hash": "268816195737953069037066117349243959276"
},
"signature_type": "Function"
},
{
"target": {
"function": "p_open",
"file": "src/fs_posix.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-72bbb5ec",
"signature_version": "v1",
"digest": {
"length": 526.0,
"function_hash": "286490505432086704529913239567738418855"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/tls_mbed.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-73eda081",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"304276758035176213820008124128387380417",
"246381098992938506014427961290510053735",
"274450533055416817840035141949678278389",
"75302083506702360242546784120397149879",
"56318326073886482746093620067816599056",
"201759285918805679111781362907772595727"
]
},
"signature_type": "Line"
},
{
"target": {
"file": "src/drivers/w5100.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-749634fe",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"326697922935978718052798301453278600361",
"182625943539435487100416887666253125269",
"268482827345399059428716783907251575725",
"280453099871745013888269062103775047372"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "fn",
"file": "tutorials/mqtt/mqtt-server/main.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-77b22367",
"signature_version": "v1",
"digest": {
"length": 2425.0,
"function_hash": "321737930763856018544212443513626513369"
},
"signature_type": "Function"
},
{
"target": {
"function": "rx_ip",
"file": "src/net_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-797acc3c",
"signature_version": "v1",
"digest": {
"length": 3002.0,
"function_hash": "60018149680491766373986046346055696805"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_ssl_key_log",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-7a4d55e0",
"signature_version": "v1",
"digest": {
"length": 620.0,
"function_hash": "178757615423858552878285911075762362845"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_der_parse",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-7ba0a605",
"signature_version": "v1",
"digest": {
"length": 522.0,
"function_hash": "204837281810421356040448144032297700600"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_recv_cert",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-7d52e1e7",
"signature_version": "v1",
"digest": {
"length": 3711.0,
"function_hash": "287628499716142521955651966755790710557"
},
"signature_type": "Function"
},
{
"target": {
"function": "test_http_parse",
"file": "test/unit_test.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-7e97943e",
"signature_version": "v1",
"digest": {
"length": 9496.0,
"function_hash": "160748329794274715824655333124482214942"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_verify_cert_signature",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-7f32a786",
"signature_version": "v1",
"digest": {
"length": 2179.0,
"function_hash": "14386722866325618864365220643133344707"
},
"signature_type": "Function"
},
{
"target": {
"function": "p_open",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-836a5001",
"signature_version": "v1",
"digest": {
"length": 526.0,
"function_hash": "286490505432086704529913239567738418855"
},
"signature_type": "Function"
},
{
"target": {
"function": "ssl_keylog_cb",
"file": "src/tls_openssl.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-83711f3d",
"signature_version": "v1",
"digest": {
"length": 279.0,
"function_hash": "26042152181086916149296364037127903400"
},
"signature_type": "Function"
},
{
"target": {
"function": "test_get_header_var",
"file": "test/unit_test.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-8472a230",
"signature_version": "v1",
"digest": {
"length": 808.0,
"function_hash": "267677229965731130675602404411685819855"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/tls_rsa.h"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-8644e19a",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"63234238436408128346569295680319629374",
"93657657415803076279618327217106205549"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "mg_rsa_parse_key",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-875dc4ab",
"signature_version": "v1",
"digest": {
"length": 4057.0,
"function_hash": "204011386459985006163637130409586660482"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_getlocaddr",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-877cd709",
"signature_version": "v1",
"digest": {
"length": 523.0,
"function_hash": "305064657750647659304825378023284657388"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_verify_cert_cn",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-8897e3f3",
"signature_version": "v1",
"digest": {
"length": 356.0,
"function_hash": "223520999800417555437934450563538821997"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_server_recv_hello",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-89701285",
"signature_version": "v1",
"digest": {
"length": 1930.0,
"function_hash": "189361870129030812527636788623212835959"
},
"signature_type": "Function"
},
{
"target": {
"file": "mongoose.h"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-8979909f",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"186388939181727772123624172363572657432",
"7588578880416528792867536791396030827",
"336024404004259824295186760987943136963",
"162853106003109879288863775933944586457",
"21255891873267076408725805477426003370",
"144928626139825828132896966338559634803",
"297569722208579716499868644029805491298",
"332752220513131143677019910708639785883",
"63234238436408128346569295680319629374",
"93657657415803076279618327217106205549",
"90176081595663856307024062216103079738",
"270466688298648336580686587313220374403",
"255493820131430178780815624398974533783",
"32870992540978555694895556285995505804",
"71215188809416414206558730536130492433",
"247886055415482892323145708777549743381",
"42534444737071065431979111044662763921",
"307867030048059952677566901650498523629",
"117697165015020473974008027673078976239",
"194577605538956948465613093456367739805",
"264077251853344549832812150358357612135",
"161106519323044023166967671368733748317",
"330364093545651486818297357194276315872",
"137206143642184674755342978091433859051",
"23329378839753313082214110279705997965",
"32269175367645784998188078571109551976",
"212396902195735538925793597877839960026",
"232604775179228794155406850893242118857",
"296800923812276391123047925305607001903",
"139709318635672484487719147725739403038",
"17884536607169968715497648949250537551",
"109856146259773939211303860787621976593",
"102438386045945335441542179747158823817",
"316050142080738983965610281059742256046",
"335913038654316668398873647426691174541",
"310052236057784896047484551922310467021",
"102454241192805793547737264730913550287",
"94614230889720956992569806089669747111",
"33515487361449333373059033931112739570",
"286415054147141141621172783067746341409",
"209335420178028219619889441596791819778",
"308860174242911248561982787243390965775",
"161106519323044023166967671368733748317",
"330364093545651486818297357194276315872",
"222584082258608923296573209625991463753",
"405745595212064580480573659327403022",
"291596617966579849266566021428943112572",
"231000949121281362308035236617362329997",
"232604775179228794155406850893242118857",
"296800923812276391123047925305607001903",
"139709318635672484487719147725739403038",
"290901104530435194421940808622851650705",
"146758916195305740260189668157809327219",
"247309962125617896177295266492970040212",
"125691360815792156791741557337436007614",
"309218000106675724978885834096695170417",
"289173267345967380006025982313881193453",
"241967988240033406839745589512843618001",
"151276422976034789868230132511483621812",
"327727332437277942167923215812067897631",
"242290762747709630156428973878867709480"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "mg_mqtt_next_topic",
"file": "tutorials/mqtt/mqtt-server/main.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-89970c49",
"signature_version": "v1",
"digest": {
"length": 529.0,
"function_hash": "321877531088533983418360194676476078731"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_dtoa",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-8c715b69",
"signature_version": "v1",
"digest": {
"length": 2417.0,
"function_hash": "251264346192913908584645015822363229932"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/ssi.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-8d3e10f7",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"327528153837616108180732984241306889745",
"82932389729463723964742144023821258569",
"334669115418950000905848780034535459327",
"153730503228608883928365182125895818042",
"242850211570246717362825680837133738379",
"16803070731296709529133462690510653581",
"123188025574472424347376842225839589598",
"183158794146043360856632466404811135792",
"26662672119941337583445625381608462640",
"302962388654527217165700382275878417486",
"42000623512612506194174183234772188851",
"183158794146043360856632466404811135792",
"19118461932106003208324415301218376559",
"273534204866643341722586609675306628785",
"261598961927031496233267961056413687158",
"91105777953908969442851698158819201372"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "mg_mbed_rng",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-905b0aae",
"signature_version": "v1",
"digest": {
"length": 140.0,
"function_hash": "228454465559437109636165937966375079274"
},
"signature_type": "Function"
},
{
"target": {
"function": "rx_dhcp_client",
"file": "src/net_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-919a1b02",
"signature_version": "v1",
"digest": {
"length": 2785.0,
"function_hash": "222663043280264277440285146591822436632"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/fs_posix.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-92780b55",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"277840084619429309169820782105630046090",
"137618295355999849936789956524487315674",
"209788375983641876417413140524590629425",
"156618466997212993020609071404751603783",
"208182738204056530674459876987392218114",
"90835024582323586770954149120046096649",
"120815785270048307012053685355904814597",
"97077352404277084334586724304618225669",
"268006363877550828310742211798586495872",
"22887757470580693923616992596776336485",
"73338679105600809599524101029824951802",
"114577549168716584835864622254006742420",
"311391330171894091038264897153757426129",
"83407861238460236865874734759406659832",
"240035361279206561444735964044856754382",
"61773025525868218168212883378633838323",
"148213917324399502996234691476680256514",
"229732664523481451329421092543428939174",
"7176549575687091606362298138257133432",
"184562138998852139290102418610862582150"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "rx_ndp_ns",
"file": "src/net_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-940d6bc2",
"signature_version": "v1",
"digest": {
"length": 632.0,
"function_hash": "39907512787864484157073233665895357876"
},
"signature_type": "Function"
},
{
"target": {
"function": "main",
"file": "test/unit_test.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-94bd439e",
"signature_version": "v1",
"digest": {
"length": 2246.0,
"function_hash": "141533145239444814057831351035814298519"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/mqtt.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-9773eaf3",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"164152625189726106530208833459003020025",
"135344969956571930553413290789615620400",
"107729403280546907405352762372015011301",
"250140706304601261024608711565251705050",
"211337324184314518447402242057455373358",
"55936661597008455902343324812484385257",
"140860969175154889556869353390704131812",
"174360756373574727504408614543585995268",
"80344897492932376770366796932190488090",
"164661446281829550464988689485354769566",
"104994448961684223116031165914865599599",
"157080406295080167176854399720734585070",
"207610488265503715233462925176853625803",
"56332457651194841685087308838558744654",
"337379681717253109351939629884420088918",
"164655058455177996932131446633685513942",
"126599125380177487566886487398276912258",
"145499557497877904078325984931340392095",
"265113080050938157938360508318388696066",
"275934322135983309655067815044667244409",
"46102823199172315987384267741637247878",
"338293920761715452192256971331028318479",
"271106954823914074341646999779106200205",
"89928454165133266222837315886223204074",
"208004112586870883516496852852161916271",
"303973979534405243003744623931607253220",
"176203913466200811276976879236069216916",
"288656179798127448257043877735441202219",
"56910248768135473312058461856263642218",
"196419544304439397137337166813976827981",
"10517598998454137368283183016139180017",
"192367631224742006502308206570206347615",
"75809067046916479555918617340535988050",
"196760180043561058996468499306564942354",
"54272490461782022043354543427559301457",
"290257302448613156865238469512744021720",
"68350381497032607604747545873039685452",
"213342719146166512649708120356124139612",
"164655058455177996932131446633685513942",
"24763303025435969971199646254746901608",
"36775082806449854742865769464880989804",
"278638053223021532522395625373446827072",
"170090515793554754494624314976444320179",
"124870339559104477302378965181716223623",
"159818437361778952013995189114716991625",
"164655058455177996932131446633685513942",
"24763303025435969971199646254746901608",
"36775082806449854742865769464880989804",
"115113231348161745269756978498754833557",
"165743058665161084120229256116842756499",
"83059283518474165133274382626218366937",
"126557378887292825272382071710570880418",
"200722786590879000163091011753797672041",
"293489245664493734830972135261788985142"
]
},
"signature_type": "Line"
},
{
"target": {
"file": "src/net_builtin.h"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-98ad2cba",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"255493820131430178780815624398974533783",
"32870992540978555694895556285995505804",
"71215188809416414206558730536130492433",
"247886055415482892323145708777549743381"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "ENET_IRQHandler",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-9b361a28",
"signature_version": "v1",
"digest": {
"length": 627.0,
"function_hash": "228445232316529376904697781694588407450"
},
"signature_type": "Function"
},
{
"target": {
"function": "opendir",
"file": "src/fs_posix.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-9c10384f",
"signature_version": "v1",
"digest": {
"length": 628.0,
"function_hash": "33099097302519973937135944869964649618"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_mqtt_next_prop",
"file": "src/mqtt.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-a126324a",
"signature_version": "v1",
"digest": {
"length": 2300.0,
"function_hash": "297478003486870093209047169448117249664"
},
"signature_type": "Function"
},
{
"target": {
"function": "find_opt",
"file": "src/l2_ppp.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-a2c59b6f",
"signature_version": "v1",
"digest": {
"length": 382.0,
"function_hash": "338435928879605611046398857867264628027"
},
"signature_type": "Function"
},
{
"target": {
"function": "ppp_rx",
"file": "src/l2_ppp.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-a370b010",
"signature_version": "v1",
"digest": {
"length": 1841.0,
"function_hash": "219807646646475264545880255840701802076"
},
"signature_type": "Function"
},
{
"target": {
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-a4beff61",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"323762034003313938239191035668036545734",
"278088108927226750224863652108869185913",
"258780519879097280652998131942610438013",
"210666658011398534004262757687681192459",
"249201271154140185139148218901907817223",
"327544047385751518830033137180857612239",
"207884397697624765387657846274719681390",
"235335861063375011275998644062205506303",
"175947087846104647541960985881667655427",
"149426187040948549804152790751678066638",
"292460998959887412033868254762586371858",
"317682071141090553951937090744153446979",
"215475986172447245248851167869066877373",
"325755990828620746284430538311609094083",
"268831670790193834588593758156729844395",
"230430873763238066469482013697192065017",
"224627688305521428575807905152272914446",
"310408317756248008075785314933596041003",
"87690224252503130711311032426523966420",
"115077142643673349757901192911319661264",
"268026456378666524531312189182996048302",
"102258537728051947322975896684432937595",
"269069890299507051023317814716822813978",
"295109766319707597293891709606188630851",
"119149522512066640484223909619193016085",
"177427404384975480371774329621742561779",
"124012712097989189377296174327090009662",
"201913907345666952727676808657515996295",
"191030403299871298014566886997312975349",
"331013872314983313838105789119412291420",
"247621528251539611755958952668483970955",
"327244287523192818206608892259741779576",
"227716762516919383642389641604494451127",
"75642557129534238316573424586541680093",
"94838749372654004096325430835195751659",
"218142066842326008024417698923950256587",
"301486415977692652109238790770149737661",
"233029097846065087048546162461876347541",
"268125993961868321736911587253042118065",
"54092087246084178709668952642437427928",
"5677682559455175262493175153832722944",
"281032589446840747351605652032924091807",
"41048267615843948020856442143425376129",
"220884027888050459794073188008898298494",
"126481238330447032479807566805008708367",
"100051507356064322850300327951092118727",
"277840084619429309169820782105630046090",
"137618295355999849936789956524487315674",
"209788375983641876417413140524590629425",
"156618466997212993020609071404751603783",
"208182738204056530674459876987392218114",
"90835024582323586770954149120046096649",
"120815785270048307012053685355904814597",
"97077352404277084334586724304618225669",
"268006363877550828310742211798586495872",
"22887757470580693923616992596776336485",
"73338679105600809599524101029824951802",
"114577549168716584835864622254006742420",
"311391330171894091038264897153757426129",
"83407861238460236865874734759406659832",
"240035361279206561444735964044856754382",
"61773025525868218168212883378633838323",
"148213917324399502996234691476680256514",
"229732664523481451329421092543428939174",
"7176549575687091606362298138257133432",
"184562138998852139290102418610862582150",
"99342585454143777211350405329767100061",
"248294475111140147738139081459710553955",
"83676957240267948432784433686949417896",
"309126626636784460366346434015915836102",
"53699379035316945307103614845636360962",
"322057797807023915417422099710759813235",
"12608644803414312341906168578498211188",
"218183266410598798868456208805174360949",
"198019577245798686762376498405309537769",
"4675447083554238506820061998440755501",
"46261138378107135129619199813354419958",
"142844824120641163646805929380945553510",
"59695784179284873399780135285505236857",
"198435265031343286959514138136958807048",
"130849680294096236336762133066034833544",
"330954618847211712111480644574668114517",
"291214677664358870679059348658916443555",
"41270427135968948595167591816308366365",
"2340485204048480290306362518943657906",
"67662686367943076569912702482612093162",
"160370732258197891332190861591633380867",
"98397136104908480003007361365872276568",
"32983516885811725247436427593559123394",
"18324813607879728527198333859018603185",
"136420616721741630092496883130158009944",
"180770559211514367430176512904444568873",
"7163089261868026582484244702442972568",
"131861569474381731981005820227864782136",
"50786082939306426641404448511908051481",
"122723938748502137683345004685485561282",
"157757955406629505963616556659381487928",
"141105778517667782293543287728468063285",
"183183204323554068904530174504477652067",
"242457721775811471694110189969814814586",
"186113893409086500723983940667536827098",
"240861874435480958264566001679519302302",
"251673027696174936086638688488483585291",
"137921944477973262619164937177676893702",
"104589755636448847603654897489936002544",
"335950390102436926516538388288075908611",
"221922356941496295474567706133186603625",
"185648501262827272406864547306822980135",
"132659740659252892467136899753093707496",
"321755651175231108483435821749255336998",
"6805998124725932905837966780304118366",
"44846076011534437306771832574705087165",
"210700036504541413205400206437034613116",
"301459480098871612290876373699931211139",
"144141124954863966953849682954257443095",
"90784301873837109792002765955779591973",
"51946077068503489399100396167028562692",
"128633798611727188053141037472620578102",
"115539991898476260809720732711039540316",
"61811326622362936380586426516825184444",
"168983563939743086617911439064109307044",
"162131536624210630258532783560063500221",
"16759876271196354007921171445775180199",
"105785922687588013154608486469754047603",
"208016186166475080528590036005348369234",
"164940676610025362342467540887581744055",
"28192222082713045277041552874166311137",
"272254147317233844332377775853185317066",
"158085801864188863102420045339659264557",
"178158639400985782115775742907731456460",
"131050402288987949107801998183233874922",
"262447246316188583341118875694751900722",
"244017845212642679696498021548749826337",
"108683598193899600660555118763465070635",
"71891034684932793068235081629274130068",
"131375036761111438886864767865604879158",
"164152625189726106530208833459003020025",
"135344969956571930553413290789615620400",
"107729403280546907405352762372015011301",
"250140706304601261024608711565251705050",
"211337324184314518447402242057455373358",
"55936661597008455902343324812484385257",
"140860969175154889556869353390704131812",
"174360756373574727504408614543585995268",
"80344897492932376770366796932190488090",
"164661446281829550464988689485354769566",
"104994448961684223116031165914865599599",
"157080406295080167176854399720734585070",
"207610488265503715233462925176853625803",
"56332457651194841685087308838558744654",
"337379681717253109351939629884420088918",
"164655058455177996932131446633685513942",
"126599125380177487566886487398276912258",
"145499557497877904078325984931340392095",
"265113080050938157938360508318388696066",
"275934322135983309655067815044667244409",
"46102823199172315987384267741637247878",
"338293920761715452192256971331028318479",
"271106954823914074341646999779106200205",
"89928454165133266222837315886223204074",
"208004112586870883516496852852161916271",
"303973979534405243003744623931607253220",
"176203913466200811276976879236069216916",
"288656179798127448257043877735441202219",
"56910248768135473312058461856263642218",
"196419544304439397137337166813976827981",
"10517598998454137368283183016139180017",
"192367631224742006502308206570206347615",
"75809067046916479555918617340535988050",
"196760180043561058996468499306564942354",
"54272490461782022043354543427559301457",
"290257302448613156865238469512744021720",
"68350381497032607604747545873039685452",
"213342719146166512649708120356124139612",
"164655058455177996932131446633685513942",
"24763303025435969971199646254746901608",
"36775082806449854742865769464880989804",
"278638053223021532522395625373446827072",
"170090515793554754494624314976444320179",
"124870339559104477302378965181716223623",
"159818437361778952013995189114716991625",
"164655058455177996932131446633685513942",
"24763303025435969971199646254746901608",
"36775082806449854742865769464880989804",
"115113231348161745269756978498754833557",
"165743058665161084120229256116842756499",
"83059283518474165133274382626218366937",
"126557378887292825272382071710570880418",
"200722786590879000163091011753797672041",
"293489245664493734830972135261788985142",
"184432424778194453059018903206026644561",
"282235524157122978153585543657787210615",
"216646750651816536911114701935262975483",
"287119835445471814445389455881001595409",
"130314766711685514011096218664625549193",
"237822115762625171603383701162367446692",
"202488195969873964876217071277452238738",
"190811227480654258291638931809259463792",
"178264818327908383334961348351242213736",
"76215744335747107617507907362556324338",
"90587880421354331521761431954423437804",
"47747648356680362348119950469752630728",
"156172259918799478006314260980639529739",
"269124710500515455743872095066323669222",
"326880572573452944591253231263775389485",
"316817826896686347215247062605828240411",
"36070518725078829966489300122360420139",
"269745929965416415228174564452729357999",
"147108511823987637571993318951458013118",
"4382986224362415186625413319097961028",
"21656321275391505530126683999980589857",
"257875401374004179006144009685134281450",
"100029556575483966476752703518687355788",
"177405781216379767274692124197153012958",
"237594354972979077030398112944727452502",
"313290495236046815397425881845542853092",
"336154257875272690244561082134040237865",
"164144033909790737967407993535556287881",
"42798591319872964568247927391007975096",
"153669078412203485835602902441573386370",
"66308293821060073237644812334641891240",
"91202448251551208665185870025599716697",
"114680997402409336602858419450351008484",
"335567741441417446276133532312190483298",
"139776651165931751068686448251485541441",
"94725456970392450360914527354740623153",
"40530174035939598687495592746178155093",
"288472377164095506888841647393716746488",
"192894977720568520892636506319275985781",
"35756972217714085615650214992402782846",
"277255541696409224061681444384179436970",
"121338202701410305634528430584838698557",
"316447823846077459543477364129603317000",
"296930948570872899955114042366230318335",
"139978312148555582503745120256139963024",
"130815970635484525073234367400302022789",
"195015217786586399187453492352865354396",
"297176489005931213337786934732657967969",
"81577053153122909042546715822655617140",
"67311793958554583898540578098970404043",
"20597623129458789897144680401795530013",
"151170898479967806222655302763817030565",
"327724105186068470522279125673135488445",
"85765985686705052392949527995590830321",
"303707808061177147175249958113713917956",
"243208985917049500563279444917677637381",
"132973287205512784248021348657098262871",
"295451581770204946106948885209905142356",
"177637950172119102168745254549403830863",
"101994261752483313003742970878844058204",
"183178143189683555223802975689529748811",
"244473083203781192852093704993699264061",
"152900695977294297335942826982566741714",
"322606825312978807302887718607191002521",
"187906069316725684559688214368528412436",
"268712315580571127581364724339119392443",
"73719901716753933121868963999237205483",
"296684912510358519066391606184948230058",
"110939240209911654080060127547089643561",
"289777904706763247788340619108633816442",
"291966197168409223704949406631125717535",
"43291826489038750844632873822638472904",
"54928167158501418632602351280044981634",
"187396542153033047996414536458357568503",
"280024611471221257923507653847778630308",
"302047516652666317695060690310475637630",
"44009480031989343998654856928188327817",
"186245772595768562650062587735262323314",
"34862346473193482249485683535591847307",
"58568978950911508742684046650643978346",
"327348628792272726296711482643046949107",
"93644618067799922999172572463777489938",
"128176080370779006295400197808244236966",
"104979456651458905719257196396953171670",
"277775541929149641258729622782142862201",
"171400025034907121977621179106503758316",
"330724192831282921696905374670001471868",
"252058672270680023476944722100595020338",
"330672664133434005978041588125549790591",
"96328744216819732119664968667975581590",
"218044234481944049274769377439198500501",
"334065503414832852216208585299473207394",
"62928705954191394528309093181399570505",
"13511440994285131347477959522422034084",
"109530073161530386969574576644669153764",
"251608098111928451190607790767850200013",
"279501471781386834900870746797592426252",
"126483486200578404300565863256245932426",
"223138251256192077380743607572112675520",
"7448060729459024805455864324543325704",
"23028912025187168159391651227729794985",
"231584736783486107252058785271623278631",
"161561776637919187122977552308790554114",
"45986199956497282724034036123369760439",
"156868599036857846508391632272359078114",
"122087875370274594362607117400103955732",
"114967994548758739149797209690206586407",
"61580236262991167744819248863923168848",
"124771529111820166000729131115917833547",
"281048752414390230849884220545459198721",
"277860102807421018883225372556154564370",
"166511851012791237943839164401345471195",
"153439228368868783570921420995430400317",
"227383345704904791547988876869330919746",
"41275846981726361958486682564811520890",
"72441244273748335540524890260682688935",
"88202030034714274973450552998734042877",
"327528153837616108180732984241306889745",
"82932389729463723964742144023821258569",
"334669115418950000905848780034535459327",
"153730503228608883928365182125895818042",
"242850211570246717362825680837133738379",
"16803070731296709529133462690510653581",
"123188025574472424347376842225839589598",
"183158794146043360856632466404811135792",
"26662672119941337583445625381608462640",
"302962388654527217165700382275878417486",
"42000623512612506194174183234772188851",
"183158794146043360856632466404811135792",
"19118461932106003208324415301218376559",
"273534204866643341722586609675306628785",
"261598961927031496233267961056413687158",
"91105777953908969442851698158819201372",
"232926924712802004303793714499228063071",
"316939765349418211561898210592612985897",
"179652550948467297850393763174478308894",
"84300448505094831772445551356283404359",
"184362486245977619651993058153425373221",
"135738648813901628968059912069456480808",
"15460033969417638971828292509880011651",
"200231667551056318621568619775785224323",
"33198753835631155674895965219918538826",
"147780645116516167870796938058621591162",
"220879119185117989693561401495440539596",
"316787075831798734384953909413843080907",
"2783115143475840227859844843821035493",
"163713228361641250898968470540051066349",
"112287400186701863962073463703547609574",
"246224180538254291469104668407583774803",
"69364965006474916416363729380470562763",
"189165530753507570940644856966377329192",
"92485289566479090987540088768870402169",
"38527071832268731725426950801845647146",
"89165040637268650732813974495735033753",
"189852552634466819005250730163380464968",
"157041747907666006208044891451190885906",
"15816353358796487354358396085376359099",
"28240404497880903972189619398287436840",
"88021926929185532458955840426579985467",
"164756482020469435388436325313877315462",
"2221777887795751017617688661864893591",
"305407463024304548130196606906410878762",
"60009996524188474217093682539147842829",
"227118336089805870812864826341105371868",
"21784341378700188027974319065888775563",
"203335200195116276984833050988434047487",
"206492324704945625654862249349976438507",
"144815525664916353913140625001006660039",
"79034505402800722861868156437850219145",
"321723477737740125454197823596542652706",
"313049198470387297537794644905491985654",
"44505765909491870592298937651470080687",
"173249299508180350782252823162533369663",
"139180089924521928383560901509702502751",
"70584283708665997819962806195533184925",
"214705088167228414953236740661648073536",
"189226502013782129419550274744100556885",
"176285187880089093561480489738000288018",
"305113864016631800646296723664919733415",
"339176960987294900202080000164739298196",
"249105431065302940479115253991436174933",
"95391750759930538679428868582085558538",
"290759218603385751554429593277677055881",
"297809011341383347336703406327010480625",
"61542593005966947055733028662414149458",
"10714498546213741401743468168633824269",
"258770002393716746640150119328410327173",
"31435421984330512662993246907942280128",
"272823635109084798438112164603587191888",
"255939596092783587984493327782854963919",
"185984173708500757653837962644550893333",
"212714826820092570153070731402317387706",
"312380295388490930042275647167876787590",
"127677395595787442576521572158330094602",
"155270041178741552002345129105328586692",
"268992290226833759395226851762309115823",
"111472750078548222216015413945263622375",
"267868390585593816517915983992887850017",
"136803458577079335620766807177727942285",
"184191480112958967387205082461126484008",
"320385786278485115696251022103476911193",
"45023453441225608848665406981917597392",
"44410860698388288439204454003800754978",
"3665073216006753514618862081777752249",
"10653606925425677975126701360033739048",
"27987974001485429266384084916625572562",
"326790896270386239037718290041699567012",
"339248409394338858364104821540364491004",
"210227221900903306717702479895397220242",
"181511796645686442639179598100905657826",
"336549907333876443539050669328785927507",
"287667717728167268361733128802414307356",
"161711644820091367793862800852356511072",
"176155408544253685655214622469624104212",
"333524572826694396681287479974129676957",
"134703114333521490549881677821607104315",
"36470572211285718732348029145255010120",
"180358384075521211883730399165940572684",
"135116063973474434553655234550213805537",
"263507037420949922950770560590017284010",
"297295444819886776360825326696600298970",
"237091077963936437947498310383627899804",
"83794079943830085462744832257669246335",
"132062244101569587596745813497247937483",
"169672006949913823979663260497495943820",
"5638527425915817927799472676386071671",
"16529865300211693623870178952980903025",
"280930834117853212902094316619686846844",
"2425361400536483050697752040274890085",
"197666525578706352099309819999654182909",
"145995069942282369056304534640208644827",
"1861194980013761239651449453405677138",
"164623427066540388397036661264812601005",
"68446135275369846144487391830739339539",
"148586744301685106588095027273899497414",
"148925615984659153759026475201527803607",
"275863428623025763261412570172699824520",
"36790375108998893732688547977499404378",
"94163129876526644181961621107837825680",
"173458148812154465894027571614359292397",
"258366589447180125150910512487336853510",
"105328809235888547998450664627098827353",
"325626069971103235195642729215934349876",
"190156542111070956014582074505834952066",
"90381076227464047808699584178186310469",
"66999194520399122903551864098802542073",
"229502949640248129603772470893921984433",
"149353026389045427958795460773600920857",
"105766952094404296810022732704911101474",
"236786974811405036836787363631893401902",
"229474298323209594761370949532420781648",
"278593657661054376277533400876072660851",
"108944754070022152407668540485191220649",
"173566431643807476763727849464544689133",
"279606985497198810375515453324598036147",
"197324619768808038779438852083397046123",
"138889878243091156284632651012974200476",
"87289462312804180252600322307577151836",
"108424785653033183106946992607965838466",
"113012497480877804534774384955236685022",
"71472467297603241073929397709260350263",
"2975354743608892629608989244975485664",
"278199329522120092411417415282829743247",
"90506609868245861838015579044343469090",
"296917873473010081886039270526276322527",
"336611567347049620732329420555644016311",
"121826454884805953535597634349078809183",
"99846133856492044547093843593490919452",
"215285410891476796156916613398866516606",
"327812755415604668472748789109743528175",
"317938451070749609689298893835456130460",
"293435598131634151551609676646860660674",
"56673162217852094411700792378178116698",
"51337264676664327826336571402041424948",
"292529381370465992307320862172413837633",
"164964469027713502571297813205030189035",
"201067898980678872724437180292939236379",
"282712885768977940211066990092485447517",
"41793161490796715102359109991495279459",
"264467030943599513130432271317758826371",
"107438321627802814811431583083867570154",
"169771800780111346940420437804080209639",
"210138463810262537321795091002868603566",
"336528393942168812515596928259927525885",
"185416056443798254176007086120694330185",
"287849806752779988392061023546911269209",
"203504624751826365860019485907826851413",
"164661308221380417377525832944874642277",
"36240222373818586103152093764597059602",
"89434136947122063517622444501038772398",
"90149692098701916256665802452602801418",
"55764996051404441321771434999679479806",
"25918007604254469958258029993456842122",
"104994446321625607360309755818921126143",
"305191474246975814514692871660333724306",
"154445442251196475412757146298364530683",
"227912314176454724057469772962829100499",
"251369218191359433076590312471197259330",
"232487347917717147897500862682534331198",
"10339574188637316680430524487429143872",
"207768197158860921235973806913297775938",
"164383082120940907404641112000968607709",
"232557516497615365632609089373382302121",
"279323618245719570534912993160880427400",
"202879780752321978350960258554829299175",
"305044321457604937421459291798851259765",
"92606193502678453847245471711234807251",
"72843265283818449893370594651375200443",
"156589332149265453555126431687180872823",
"136745404714325131069068433962413683921",
"101029245618331163826594823026111690104",
"252558451237531693731446203155695997434",
"24473394478528000454472038284135064473",
"42761725021697143898019224609692917708",
"226693977470646206675848302032299973965",
"90442131257686108749117474337121798987",
"185275514621728202234635766955889494710",
"256550698009348655608228695053974657271",
"168274967567645364791911248927988443016",
"250660384276971028873202409664886803117",
"40347156880750530389031764073694530716",
"177696559888269327619511654923480720554",
"258930192411258833291594823164625986881",
"329505966588041481371488711060843801039",
"139943472294742398921276591779247270454",
"168592425070540874042905855949882546241",
"61578227396275733176638093254854357367",
"75813122189328617333927080171974291583",
"235817542668208982769356653380238838599",
"66417746558487617050631024119894192809",
"210552768496793899294421456702942748451",
"316996834580047785750702890694286921015",
"212430159429083820243309157633391846730",
"72360967113924943574510957390216307717",
"99737620400996383635432463402739827623",
"269913924708743169513982202571577008595",
"286208907069549802375733087869714206710",
"55287624610757281583526062030251782024",
"88266645663993400860350164592737447891",
"322131690705043086041787336620827274422",
"28047059807207941205467521990333255561",
"332873612958469487832430754425114548796",
"265414682376929430097426663329266570659",
"321272112168689236930615395375495339472",
"129274256678257293675720118184715976765",
"80178392581499665406322011524160323024",
"62951553429190226830643579803814270370",
"173208216918400708884037861738995072189",
"87079156882433979316123167196031305539",
"206306016865255370452730752537998506033",
"133551016911218472965760610188417523364",
"131975897850635728264177387310640768042",
"45862309754147688631798141126528658122",
"107597438453966108348215802432884643267",
"118509456994131637134459941600340425724",
"173458821424414474824247785929123968337",
"175287094098081811371018374114406663817",
"110651857497355339805356935142677484874",
"70772380586533020466973497200275263035",
"101395733483462198400359838802933345389",
"140951541816416420572470619602414953194",
"140250281726493015431970617664862547532",
"319973293508850402716062119813510765366",
"219203567917632999307861927224224084141",
"85491697752081236902538082052496432116",
"91102997286436817678750243446278973911",
"196275597185789214171438869727574948983",
"235291102320504582823644442424969462400",
"299649805363586378403039698967225429025",
"237004861150485151617057579451541901153",
"261619104848898290722097106015465777833",
"181823215701531210724769735372087061194",
"89335556806806098763068853832349346682",
"314512077817306413862923729729032604938",
"119460052135499741291393709563372770313",
"158888373103203376139019592929909013096",
"194643407671496287263325918393946527016",
"120282882101935496517330086629933792505",
"42367173893458503344840187936423554206",
"335343665999778433349182061809560065403",
"39305793639437378887194397999434501761",
"259163489026268287716417919820442054877",
"21335670049025419835650000679624768241",
"249896841789403473423573177469648317167",
"208522707338628788301839404932835464434",
"323881422038789738544605443192708321296",
"147229137252370840057910616408872557438",
"54259086156891479119666638378842805938",
"244484094314809774477346397667501102584",
"108820518643769538796036170745725241295",
"225557564602503457456933902088826082079",
"38033422020052497739913395646036957809",
"51050825397733422681276123002806643641",
"163381679406020714038890273217095983184",
"44849066221541487728077792551739097692",
"263260079282872919442309967534272447206",
"118173759627633864110024234213216766356",
"170916413850618119192095436563031487794",
"307368324365372566250344915740159246085",
"195102097404035604975787826593287533179",
"214591970131814603268892158548808108754",
"267178536257195519793995616103759823151",
"135372539677710061889473210528066544359",
"186294499592872814951351212674123644968",
"91759035101790330176583656292471516551",
"269226888281473753726088352671187090281",
"131420796044741360772915897485345608936",
"288213638710982064842699495826434138108",
"162460804885925280164062161894847912294",
"256714078351573401618158333415702030581",
"14212449010339456941003039032935016868",
"59433016979304922066902774582419420730",
"315695039565149697763735313610956015758",
"79328659598168281632584406979330784960",
"159690255197568102416964861917327801818",
"115667512532816908060596729172305984196",
"124322224408734240417929251726918137967",
"230442999336908350325688289697638495499",
"165226016383468195979863081461160323611",
"104332165290859217302589428462122783360",
"304276758035176213820008124128387380417",
"246381098992938506014427961290510053735",
"274450533055416817840035141949678278389",
"75302083506702360242546784120397149879",
"56318326073886482746093620067816599056",
"201759285918805679111781362907772595727",
"144245873888813543256860948554916737517",
"156974303944384768142132592772629231510",
"335002089565198348023314874690191623195",
"26703405745066101628510946356396352378",
"303164798085481983517497933712755808857",
"266071836976923005203425243708469560390",
"319859289827501350751564690823644451616",
"45881186688112204685606100939119584351",
"144046411448518943733305602929672998098",
"225579440426105750816714004337458412271",
"112093721158145502249763640542786295096",
"207252406453496841320595240011609886517",
"224281570579283631990145631064852568076",
"288524197952898349566820152003353655337",
"261504735918859126970289768887839428466",
"140388943525191225273174121718188200172",
"137085653452806426806943619726568248448",
"181407166202211333137967937368179830740",
"33386847719558698537727800308650150078",
"73016749896233373528860427606944990587",
"95113038063131343464802745742757593491",
"260253014940381019242356514965318486913",
"108053881415493548678616178740121635819",
"105970303446503634318863339705264358834",
"46493805877957033431410180852137793558",
"304528413051193093178670737973205436174",
"125515618518036769226182321833625464565",
"42398812645571065081727478806607162831",
"220109016561833368524810200016727232379",
"108587633537507210242609878158511307392",
"196158985745106643789873259015293708850",
"43218586666397312768162075240560191716",
"60067933661434082163524031991825177158",
"174479788697771909725333430256989418634",
"326697922935978718052798301453278600361",
"182625943539435487100416887666253125269",
"268482827345399059428716783907251575725",
"280453099871745013888269062103775047372"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "cyw_spi_tx",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-a57528fb",
"signature_version": "v1",
"digest": {
"length": 175.0,
"function_hash": "64814422700544834845641903742945723180"
},
"signature_type": "Function"
},
{
"target": {
"function": "test_rsa",
"file": "test/unit_test.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-ab0cdcd2",
"signature_version": "v1",
"digest": {
"length": 3965.0,
"function_hash": "298081358792469959169311133782580481745"
},
"signature_type": "Function"
},
{
"target": {
"function": "sendnsreq",
"file": "src/dns.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-ac3aae73",
"signature_version": "v1",
"digest": {
"length": 946.0,
"function_hash": "189015025929389535477227129610619276644"
},
"signature_type": "Function"
},
{
"target": {
"function": "ff_open",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-afe142b6",
"signature_version": "v1",
"digest": {
"length": 386.0,
"function_hash": "112474901257864317333447804941623234957"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_server_send_hello",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-b16063de",
"signature_version": "v1",
"digest": {
"length": 1354.0,
"function_hash": "266027483394200838020725210988023120113"
},
"signature_type": "Function"
},
{
"target": {
"file": "test/unit_test.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-b2a96d01",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"203088667939215954161485995864642778259",
"64049810033834993044941254093306134335",
"330200492270902072909323982342844718857",
"271849532341823843378843998924765722591",
"44978649480566144339347950012277144608",
"248995105589150771970983931649881858303",
"188576461899602502334837753801222022206",
"39045151694598174399317071275959247811",
"213540125985640245825752995880221193389",
"249994579588359020746185790333468516762",
"152131468233456423860331928365938150716",
"202871142172933680088857847753154532687",
"28607883059759043906361607400801910850",
"183262114272824810737254633019667469133",
"232357153479824712763863675761035648656",
"23570866880859938727692245538877432142",
"141658309376716498871534426856366062693",
"214368588950638794714993150529070328110",
"334474167595830990764512825927411607023",
"267183589708971743474326254089894577810",
"47990732819857953684904514897162177227",
"289500420239221969193707791890363563881",
"254649644694318990511323281694191215591",
"140789423104957451168720512197555088164",
"194183021527650550497609986809711183516",
"108278366963778353544764643441075007924",
"32363446191376672015772807837625839461",
"220095790646395232185704389076316257509",
"49729989112001400997937050579551397080",
"323561909299427970073744374845822132983",
"319986074426650909878590047202362720212",
"226134247192297849165981698507304974729",
"65344937120058693586645601335574154359",
"300309010343137286373577590035922491532",
"10671941947548291029719762430718857505",
"228132362870941421540775323304931130911",
"227397320468778872167696920704297708420",
"20893310575903025925604153343127747057",
"92232054829537536825852677255615254790",
"124797036859108420395550277818963378064",
"18482106245306633530315885454359056322",
"298037660293708123760264799605298509388",
"339531731943190949909694923335573640369",
"148207177040429208487880225084602780268",
"128723375580045766936760300264015795477",
"302403709417369580172048814745371539357",
"72361143080829961386264533863794422463",
"55034318809264324127411384958221690494",
"222035740728169779158215774343825954478",
"85794897248532958583956703876845489900",
"155332834535220226861945369587127243595",
"96950484733985231123710795543507112654",
"254626604511075260899676039562385774068",
"283262921074884813096120194249102669949",
"32159651908878737258810740783408564412",
"201214201148614045419246832262677493891",
"264530118823671283470045845825670270968",
"200462089459768842622063449964453865834",
"324492343335627798160790331139785978811",
"270574959421470579809609181991958128057",
"114538216164310552973198792770099387051",
"62990654856658467923709572507037542932",
"21862832935800064224368607339824780877",
"152384734339707686844290371281666074837",
"23401527315533836288518206204119426275",
"229164026358290954141927164278730499298",
"308229169330899275286483524430649395582",
"291729167599614698996669059133567949620",
"119591122189107194888393257635800502670",
"95684898664415153475733749923237597806",
"155557626955991767093730782121734024669",
"29984832952141986999414368440327199482",
"74316144192997571060105056988943278413",
"167643571153893897524719847063484705198",
"156101690735719509053210679987489043932",
"201637995999118352631011857880354941969",
"66858787428956732897621581953586537595",
"268595024158755065092157075959521568781",
"240036730762521016192465735661582553034",
"51467160687085733831449941722452774430",
"314144745519951505262785302858913097905",
"38490975246722655305076617029102420595",
"176577712860492116649166281126850783461",
"219344889720258188319154431698006619296",
"182465785853450730839682083084179968553",
"184864342455011597841984753829511627808",
"143805785575490923972882232317320111630",
"285908570407501120509587428099095863117",
"82100199059793019681626811760157549318",
"199507012295383578372302791129493951717",
"49398161750089567567633705579851432778",
"93045314724486310706355053479975762141",
"212875954119775363737301678198382327373",
"304841423613453926430024343387236518755",
"83377390431999754533953870196706354296",
"145562214076115602425891902897467908857",
"145559065371394239267260144030406686077",
"5078173137927019965872769207859144299",
"83583796764241805218758164900119408907",
"309604667699080744033275955911607700801",
"85255608687633126891817577848276576408",
"315909914870678811231264311529892503919",
"312010127630131119237905675277149784783",
"166655387878325540061000502562098443709",
"300450182487288998870538120444829656527",
"329035242791954165894535223297554267234",
"301305732798565656785827476274194927995"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "mg_tls_verify_cert_san",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-b3dc4f5b",
"signature_version": "v1",
"digest": {
"length": 1218.0,
"function_hash": "245598739821504207986080235075487799128"
},
"signature_type": "Function"
},
{
"target": {
"function": "ppp_handle_ipcp",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-b411d847",
"signature_version": "v1",
"digest": {
"length": 1743.0,
"function_hash": "144707852256391504506290498507820758943"
},
"signature_type": "Function"
},
{
"target": {
"function": "rx_ip6",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-b57f60b8",
"signature_version": "v1",
"digest": {
"length": 3235.0,
"function_hash": "258564654321190262044139813162107372522"
},
"signature_type": "Function"
},
{
"target": {
"function": "gcm_finish",
"file": "src/tls_aes128.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-b6dd896f",
"signature_version": "v1",
"digest": {
"length": 666.0,
"function_hash": "4009710381564110241834241115342202308"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tcpip_init",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-b7cb36d2",
"signature_version": "v1",
"digest": {
"length": 1135.0,
"function_hash": "89774771786308012552390545955339982694"
},
"signature_type": "Function"
},
{
"target": {
"function": "rx_icmp",
"file": "src/net_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-b8b73e67",
"signature_version": "v1",
"digest": {
"length": 992.0,
"function_hash": "254410957794899136390496323884346536232"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_der_debug_cert_name",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-b97558f1",
"signature_version": "v1",
"digest": {
"length": 876.0,
"function_hash": "119484312311729218313841294515703490182"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/sock.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-bacba088",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"166511851012791237943839164401345471195",
"153439228368868783570921420995430400317",
"227383345704904791547988876869330919746",
"41275846981726361958486682564811520890",
"72441244273748335540524890260682688935",
"88202030034714274973450552998734042877"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "ENET_IRQHandler",
"file": "src/drivers/rw612.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-bae69f7d",
"signature_version": "v1",
"digest": {
"length": 627.0,
"function_hash": "228445232316529376904697781694588407450"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_client_recv_hello",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-bb0d985f",
"signature_version": "v1",
"digest": {
"length": 1614.0,
"function_hash": "268390190517286533546049073814255390401"
},
"signature_type": "Function"
},
{
"target": {
"function": "gcm_finish",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-bcbb554e",
"signature_version": "v1",
"digest": {
"length": 666.0,
"function_hash": "4009710381564110241834241115342202308"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_l2_eth_init",
"file": "src/l2_eth.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-bccf59b1",
"signature_version": "v1",
"digest": {
"length": 526.0,
"function_hash": "283343547696634127647568708727816008983"
},
"signature_type": "Function"
},
{
"target": {
"function": "trim_len",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-c1a14699",
"signature_version": "v1",
"digest": {
"length": 708.0,
"function_hash": "265007262428071382475737538858570700360"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/fs.h"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-c26a3836",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"174675524000780235014015217530424708641",
"328795669061020985617358459115452005958",
"96205749721237622116566219941244823418",
"332752220513131143677019910708639785883"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "rx_icmp6",
"file": "src/net_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-c33d072b",
"signature_version": "v1",
"digest": {
"length": 1158.0,
"function_hash": "202979984029528356947514587850485642852"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_file_write",
"file": "src/fs.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-c857b255",
"signature_version": "v1",
"digest": {
"length": 486.0,
"function_hash": "210789633457643583043259984651009903760"
},
"signature_type": "Function"
},
{
"target": {
"function": "test_str",
"file": "test/unit_test.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-cb837932",
"signature_version": "v1",
"digest": {
"length": 12619.0,
"function_hash": "125763332447946179978782129910143621178"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/l2_ppp.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-ccf2f4bf",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"144141124954863966953849682954257443095",
"90784301873837109792002765955779591973",
"51946077068503489399100396167028562692",
"128633798611727188053141037472620578102",
"115539991898476260809720732711039540316",
"61811326622362936380586426516825184444",
"168983563939743086617911439064109307044",
"162131536624210630258532783560063500221",
"16759876271196354007921171445775180199",
"105785922687588013154608486469754047603",
"208016186166475080528590036005348369234",
"164940676610025362342467540887581744055",
"28192222082713045277041552874166311137",
"272254147317233844332377775853185317066",
"158085801864188863102420045339659264557",
"178158639400985782115775742907731456460",
"131050402288987949107801998183233874922",
"262447246316188583341118875694751900722",
"244017845212642679696498021548749826337",
"108683598193899600660555118763465070635",
"71891034684932793068235081629274130068",
"131375036761111438886864767865604879158"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "mg_tls_verify_cert_signature",
"file": "src/tls_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-cd1429ab",
"signature_version": "v1",
"digest": {
"length": 2179.0,
"function_hash": "14386722866325618864365220643133344707"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/drivers/tms570.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-cdb381d6",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"196158985745106643789873259015293708850",
"43218586666397312768162075240560191716",
"60067933661434082163524031991825177158",
"174479788697771909725333430256989418634"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "mg_mqtt_next_prop",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-ce03a646",
"signature_version": "v1",
"digest": {
"length": 2300.0,
"function_hash": "297478003486870093209047169448117249664"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_l2_pppoe_init",
"file": "src/l2_ppp.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-d0782e23",
"signature_version": "v1",
"digest": {
"length": 139.0,
"function_hash": "146752807320950357188200675449620747160"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_der_to_tlv",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-d0f0625a",
"signature_version": "v1",
"digest": {
"length": 505.0,
"function_hash": "11357603138552287084322613246366122547"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tcpip_init",
"file": "src/net_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-d127d197",
"signature_version": "v1",
"digest": {
"length": 1135.0,
"function_hash": "89774771786308012552390545955339982694"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tcpip_driver_tms570_tx",
"file": "src/drivers/tms570.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-d13afd4f",
"signature_version": "v1",
"digest": {
"length": 800.0,
"function_hash": "22655348550130318506917877452664758148"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/fmt.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-d23c9673",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"249201271154140185139148218901907817223",
"327544047385751518830033137180857612239",
"207884397697624765387657846274719681390",
"235335861063375011275998644062205506303",
"175947087846104647541960985881667655427",
"149426187040948549804152790751678066638",
"292460998959887412033868254762586371858",
"317682071141090553951937090744153446979",
"215475986172447245248851167869066877373",
"325755990828620746284430538311609094083",
"268831670790193834588593758156729844395"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "rx_icmp",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-d2a12c4b",
"signature_version": "v1",
"digest": {
"length": 992.0,
"function_hash": "254410957794899136390496323884346536232"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_http_next_multipart",
"file": "src/http.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-d64e7430",
"signature_version": "v1",
"digest": {
"length": 1332.0,
"function_hash": "271772299627380034480793415644141608842"
},
"signature_type": "Function"
},
{
"target": {
"function": "rx_icmp6",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-d6a1de88",
"signature_version": "v1",
"digest": {
"length": 1158.0,
"function_hash": "202979984029528356947514587850485642852"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_http_parse",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-d80c135f",
"signature_version": "v1",
"digest": {
"length": 2685.0,
"function_hash": "19513665646702544690134086058193230386"
},
"signature_type": "Function"
},
{
"target": {
"function": "rx_ip6",
"file": "src/net_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-d8cb7d37",
"signature_version": "v1",
"digest": {
"length": 3235.0,
"function_hash": "258564654321190262044139813162107372522"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/net_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-e0ff564b",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"184432424778194453059018903206026644561",
"282235524157122978153585543657787210615",
"216646750651816536911114701935262975483",
"287119835445471814445389455881001595409",
"130314766711685514011096218664625549193",
"237822115762625171603383701162367446692",
"202488195969873964876217071277452238738",
"190811227480654258291638931809259463792",
"178264818327908383334961348351242213736",
"76215744335747107617507907362556324338",
"90587880421354331521761431954423437804",
"47747648356680362348119950469752630728",
"156172259918799478006314260980639529739",
"269124710500515455743872095066323669222",
"326880572573452944591253231263775389485",
"316817826896686347215247062605828240411",
"36070518725078829966489300122360420139",
"269745929965416415228174564452729357999",
"147108511823987637571993318951458013118",
"4382986224362415186625413319097961028",
"21656321275391505530126683999980589857",
"257875401374004179006144009685134281450",
"100029556575483966476752703518687355788",
"177405781216379767274692124197153012958",
"237594354972979077030398112944727452502",
"313290495236046815397425881845542853092",
"336154257875272690244561082134040237865",
"164144033909790737967407993535556287881",
"42798591319872964568247927391007975096",
"153669078412203485835602902441573386370",
"66308293821060073237644812334641891240",
"91202448251551208665185870025599716697",
"114680997402409336602858419450351008484",
"335567741441417446276133532312190483298",
"139776651165931751068686448251485541441",
"94725456970392450360914527354740623153",
"40530174035939598687495592746178155093",
"288472377164095506888841647393716746488",
"192894977720568520892636506319275985781",
"35756972217714085615650214992402782846",
"277255541696409224061681444384179436970",
"121338202701410305634528430584838698557",
"316447823846077459543477364129603317000",
"296930948570872899955114042366230318335",
"139978312148555582503745120256139963024",
"130815970635484525073234367400302022789",
"195015217786586399187453492352865354396",
"297176489005931213337786934732657967969",
"81577053153122909042546715822655617140",
"67311793958554583898540578098970404043",
"20597623129458789897144680401795530013",
"151170898479967806222655302763817030565",
"327724105186068470522279125673135488445",
"85765985686705052392949527995590830321",
"303707808061177147175249958113713917956",
"243208985917049500563279444917677637381",
"132973287205512784248021348657098262871",
"295451581770204946106948885209905142356",
"177637950172119102168745254549403830863",
"101994261752483313003742970878844058204",
"183178143189683555223802975689529748811",
"244473083203781192852093704993699264061",
"152900695977294297335942826982566741714",
"322606825312978807302887718607191002521",
"187906069316725684559688214368528412436",
"268712315580571127581364724339119392443",
"73719901716753933121868963999237205483",
"296684912510358519066391606184948230058",
"110939240209911654080060127547089643561",
"289777904706763247788340619108633816442",
"291966197168409223704949406631125717535",
"43291826489038750844632873822638472904",
"54928167158501418632602351280044981634",
"187396542153033047996414536458357568503",
"280024611471221257923507653847778630308",
"302047516652666317695060690310475637630",
"44009480031989343998654856928188327817",
"186245772595768562650062587735262323314",
"34862346473193482249485683535591847307",
"58568978950911508742684046650643978346",
"327348628792272726296711482643046949107",
"93644618067799922999172572463777489938",
"128176080370779006295400197808244236966",
"104979456651458905719257196396953171670",
"277775541929149641258729622782142862201",
"171400025034907121977621179106503758316",
"330724192831282921696905374670001471868",
"252058672270680023476944722100595020338",
"330672664133434005978041588125549790591",
"96328744216819732119664968667975581590",
"218044234481944049274769377439198500501",
"334065503414832852216208585299473207394",
"62928705954191394528309093181399570505",
"13511440994285131347477959522422034084",
"109530073161530386969574576644669153764",
"251608098111928451190607790767850200013",
"279501471781386834900870746797592426252",
"126483486200578404300565863256245932426",
"223138251256192077380743607572112675520",
"7448060729459024805455864324543325704",
"23028912025187168159391651227729794985",
"231584736783486107252058785271623278631",
"161561776637919187122977552308790554114",
"45986199956497282724034036123369760439",
"156868599036857846508391632272359078114",
"122087875370274594362607117400103955732",
"114967994548758739149797209690206586407",
"61580236262991167744819248863923168848"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "mg_getlocaddr",
"file": "src/sock.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-e71b72ba",
"signature_version": "v1",
"digest": {
"length": 523.0,
"function_hash": "305064657750647659304825378023284657388"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/http.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-e846d6e8",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"99342585454143777211350405329767100061",
"248294475111140147738139081459710553955",
"83676957240267948432784433686949417896",
"309126626636784460366346434015915836102",
"53699379035316945307103614845636360962",
"322057797807023915417422099710759813235",
"12608644803414312341906168578498211188",
"218183266410598798868456208805174360949",
"198019577245798686762376498405309537769",
"4675447083554238506820061998440755501",
"46261138378107135129619199813354419958",
"142844824120641163646805929380945553510",
"59695784179284873399780135285505236857",
"198435265031343286959514138136958807048",
"130849680294096236336762133066034833544",
"330954618847211712111480644574668114517",
"291214677664358870679059348658916443555",
"41270427135968948595167591816308366365",
"2340485204048480290306362518943657906",
"67662686367943076569912702482612093162",
"160370732258197891332190861591633380867",
"98397136104908480003007361365872276568",
"32983516885811725247436427593559123394",
"18324813607879728527198333859018603185",
"136420616721741630092496883130158009944",
"180770559211514367430176512904444568873",
"7163089261868026582484244702442972568",
"131861569474381731981005820227864782136",
"50786082939306426641404448511908051481",
"122723938748502137683345004685485561282",
"157757955406629505963616556659381487928",
"141105778517667782293543287728468063285",
"183183204323554068904530174504477652067",
"242457721775811471694110189969814814586",
"186113893409086500723983940667536827098",
"240861874435480958264566001679519302302",
"251673027696174936086638688488483585291",
"137921944477973262619164937177676893702",
"104589755636448847603654897489936002544",
"335950390102436926516538388288075908611",
"221922356941496295474567706133186603625",
"185648501262827272406864547306822980135",
"132659740659252892467136899753093707496",
"321755651175231108483435821749255336998"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "rx_ndp_na",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-e95db621",
"signature_version": "v1",
"digest": {
"length": 1048.0,
"function_hash": "315757571796826943100881807577196416376"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_server_recv_hello",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-ea50417e",
"signature_version": "v1",
"digest": {
"length": 1930.0,
"function_hash": "189361870129030812527636788623212835959"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_mbed_rng",
"file": "src/tls_mbed.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-eaebea6a",
"signature_version": "v1",
"digest": {
"length": 140.0,
"function_hash": "228454465559437109636165937966375079274"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_l2_ppp_init",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-eafd5374",
"signature_version": "v1",
"digest": {
"length": 124.0,
"function_hash": "288947917236156155490905987055432606671"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/l2_eth.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-ed8aaca6",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"6805998124725932905837966780304118366",
"44846076011534437306771832574705087165",
"210700036504541413205400206437034613116",
"301459480098871612290876373699931211139"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "rx_dhcp_server",
"file": "src/net_builtin.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-f13b2655",
"signature_version": "v1",
"digest": {
"length": 1379.0,
"function_hash": "193800181989568197373335938661115432317"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_http_parse",
"file": "src/http.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-f1b1d51e",
"signature_version": "v1",
"digest": {
"length": 2685.0,
"function_hash": "19513665646702544690134086058193230386"
},
"signature_type": "Function"
},
{
"target": {
"function": "rx_dhcp_server",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-f2af6d67",
"signature_version": "v1",
"digest": {
"length": 1379.0,
"function_hash": "193800181989568197373335938661115432317"
},
"signature_type": "Function"
},
{
"target": {
"file": "src/printf.h"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-f2fa4d9f",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76083579440468480901239509075554413422",
"28950194437033175201291249227614063026",
"172302567102427464353298406364958189598",
"45334518779605187077990335715402006398",
"186388939181727772123624172363572657432",
"7588578880416528792867536791396030827",
"336024404004259824295186760987943136963",
"162853106003109879288863775933944586457"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "mg_ssi",
"file": "src/ssi.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-f543a32b",
"signature_version": "v1",
"digest": {
"length": 2711.0,
"function_hash": "255045508415858940969396310421318667750"
},
"signature_type": "Function"
},
{
"target": {
"function": "rx_ndp_ra",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-f635d7d7",
"signature_version": "v1",
"digest": {
"length": 1949.0,
"function_hash": "291002711997149435366708935068436443899"
},
"signature_type": "Function"
},
{
"target": {
"function": "uc",
"file": "test/unit_test.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-f6d95e32",
"signature_version": "v1",
"digest": {
"length": 563.0,
"function_hash": "215209414384076488051122340466542534810"
},
"signature_type": "Function"
},
{
"target": {
"function": "http_cb",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-f779d102",
"signature_version": "v1",
"digest": {
"length": 3312.0,
"function_hash": "152849641657646075686452913327616229632"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_client_recv_hello",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-f8769730",
"signature_version": "v1",
"digest": {
"length": 1614.0,
"function_hash": "268390190517286533546049073814255390401"
},
"signature_type": "Function"
},
{
"target": {
"function": "ff_open",
"file": "src/fs_fat.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-f9897f48",
"signature_version": "v1",
"digest": {
"length": 386.0,
"function_hash": "112474901257864317333447804941623234957"
},
"signature_type": "Function"
},
{
"target": {
"function": "mg_tls_recv_cert_verify",
"file": "mongoose.c"
},
"deprecated": false,
"source": "https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71",
"id": "CVE-2026-73256-f9be950a",
"signature_version": "v1",
"digest": {
"length": 2963.0,
"function_hash": "142162602858885939250911926702291407342"
},
"signature_type": "Function"
}
]
"2026-08-22T16:16:21Z"