CVE-2026-48487
2 advisories.
PyPI/zeroconf CVE-2026-48487: medium 6.5
zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet
Action: Upgrade zeroconf to 0.149.16 or later.
pip install zeroconf==0.149.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.149.16 | - |
Fixed versions
| 0.149.16 |
Sources
- osv: GHSA-qc2x-6f54-m6h9
- https://github.com/python-zeroconf/python-zeroconf/security/advisories/GHSA-qc2x-6f54-m6h9
- https://github.com/python-zeroconf/python-zeroconf/issues/1752
- https://github.com/python-zeroconf/python-zeroconf/pull/1756
- https://github.com/python-zeroconf/python-zeroconf
CVE-2026-48487 · published · modified · JSON
PyPI/zeroconf CVE-2026-48487: medium 6.5
zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet
Action: Upgrade zeroconf to 0.149.16 or later.
pip install zeroconf==0.149.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.149.16 | - |
Fixed versions
| 0.149.16 |
Sources
- osv: PYSEC-2026-3438
- https://github.com/python-zeroconf/python-zeroconf/security/advisories/GHSA-qc2x-6f54-m6h9
- https://github.com/python-zeroconf/python-zeroconf/issues/1752
- https://github.com/python-zeroconf/python-zeroconf/pull/1756
- https://github.com/python-zeroconf/python-zeroconf
- https://pypi.org/project/zeroconf
- https://github.com/advisories/GHSA-qc2x-6f54-m6h9
- https://nvd.nist.gov/vuln/detail/CVE-2026-48487
CVE-2026-48487 · published · modified · JSON