Skip to content

Exploited: 177

LatestCVE-2026-63471 — fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator

7.5

CVE-2026-121512Fix available

Missing Release of Memory after Effective Lifetime in µD3TN

D3TN GmbH µD3TN2026-11-03 14:18 UTC1 min readRead in

Summary

Memory Leak with Amplification in µD3TN BPv6 EID Reference Handling allows Unauthenticated Remote Attacker to Cause DoS

Remediation

Inventory every D3TN GmbH µD3TN deployment, including staging.
Upgrade D3TN GmbH µD3TN to 0.15.2.
Confirm the running version after the upgrade.

References

Referencehttps://gitlab.com/d3tn/ud3tn/-/work_items/292

CVSS vector

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected versions

Version	Fixed in
0 – <0.15.2	0.15.2

Weakness

CWE-401

Timeline

2026-11-03Publicly disclosed

Sources

CVE · NVD