Debian/snac2: unknown
snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_json_load_lexer() that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a
Action: Upgrade snac2 to 2.93-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.93-1 | - |
Fixed versions
| 2.93-1 |
Sources
- osv: DEBIAN-CVE-2026-112021#Debian:14/snac2
- https://security-tracker.debian.org/tracker/CVE-2026-112021
published · modified · JSON