Skip to content

Exploited: 177

LatestCVE-2026-63471 — fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator

7.5

CVE-2026-121513Fix available

Out-of-bounds Write in µD3TN

D3TN GmbH µD3TN2026-11-03 14:18 UTC1 min readRead in

Summary

Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause DoS

Remediation

Inventory every D3TN GmbH µD3TN deployment, including staging.
Upgrade D3TN GmbH µD3TN to 0.15.2.
Confirm the running version after the upgrade.

References

Referencehttps://gitlab.com/d3tn/ud3tn/-/work_items/288

CVSS vector

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected versions

Version	Fixed in
0 – <0.15.2	0.15.2

Weakness

CWE-787

Timeline

2026-11-03Publicly disclosed

Sources

CVE · NVD