Mtrudel vulnerabilities

Products

• Bandit 24

Newest

• mtrudel bandit HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit CVE-2026-116078 Fix available 8.7 HighOctober 28, 2026
• mtrudel bandit SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit CVE-2026-108529 Fix available 8.7 HighOctober 26, 2026
• mtrudel bandit Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit CVE-2026-110499 Fix available 8.7 HighOctober 26, 2026
• mtrudel bandit HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit CVE-2026-109584 Fix available 8.7 HighOctober 26, 2026
• mtrudel bandit HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit CVE-2026-111103 Fix available 8.2 HighOctober 26, 2026
• mtrudel bandit HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit CVE-2026-111101 Fix available 8.7 HighOctober 26, 2026
• mtrudel bandit Quadratic bignum parsing of Content-Length and Host port values in Bandit CVE-2026-113436 Fix available 8.7 HighOctober 26, 2026
• mtrudel bandit WebSocket frames keep reaching the WebSock after a server-initiated close in Bandit CVE-2026-110314 Fix available 6.3 MediumOctober 26, 2026
• mtrudel bandit WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Bandit CVE-2026-114213 Fix available 8.7 HighOctober 26, 2026
• mtrudel bandit Chunk extensions accept bare LF and CR, enabling request smuggling in Bandit CVE-2026-114216 Fix available 6.3 MediumOctober 26, 2026
• mtrudel bandit HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit CVE-2026-115269 Fix available 8.7 HighOctober 26, 2026
• mtrudel bandit HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit CVE-2026-108525 Fix available 8.7 HighOctober 26, 2026
• mtrudel bandit Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit CVE-2026-105660 Fix available 6.9 MediumOctober 15, 2026
• mtrudel bandit HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in Bandit CVE-2026-105659 Fix available 8.7 HighOctober 14, 2026
• mtrudel bandit HTTP/2 header field values containing CR, LF or NUL are passed to the application unvalidated in Bandit CVE-2026-75484 Fix available 6.9 MediumAugust 20, 2026
• mtrudel bandit HTTP/2 connection-window starvation pins Plug processes indefinitely in Bandit CVE-2026-74836 Fix available 8.7 HighAugust 20, 2026
• mtrudel bandit Quadratic CPU blow-up reassembling fragmented WebSocket messages in Bandit CVE-2026-65623 Fix available 8.7 HighJuly 24, 2026
• mtrudel bandit HTTP/1 chunked decoder infinite loop on requests with trailer fields in bandit CVE-2026-39806 Fix available 8.7 HighMay 13, 2026
• mtrudel bandit HTTP/1 chunked body reader ignores length cap in bandit CVE-2026-39803 Fix available 8.7 HighMay 13, 2026
• mtrudel bandit CL.CL HTTP request smuggling via duplicate Content-Length in bandit CVE-2026-39805 Fix available 6.3 MediumMay 1, 2026
• mtrudel bandit WebSocket permessage-deflate inflate has no output-size cap in bandit CVE-2026-39804 Fix available 8.2 HighMay 1, 2026
• mtrudel bandit Client-supplied URI scheme trusted without transport verification in bandit CVE-2026-39807 Fix available 6.3 MediumMay 1, 2026
• mtrudel bandit WebSocket fragmented message reassembly unbounded in bandit CVE-2026-42786 Fix available 8.7 HighMay 1, 2026
• mtrudel bandit HTTP/2 frame size limit checked after body is buffered in bandit CVE-2026-42788 Fix available 6.9 MediumMay 1, 2026