Known vulnerabilities in xstream

Vendor: XStream
Software: xstream
Software CPE: cpe:2.3:a:x-stream:xstream:*:*:*:*:*:*:*:*
Website: https://x-stream.github.io/
Total vulnerabilities: 36
Public exploits: 11
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting xstream xstream is affected by 36 known vulnerabilities: 1 critical, 21 high, 14 medium Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100095 - Memory corruption
CVE-2024-47072		 CWE-119 Medium
No
No
 1.4.21 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 36 more
#VU73956 - Server-Side Request Forgery (SSRF)
CVE-2021-39152		 CWE-918 High
Available
No
 1.4.18 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73955 - Server-Side Request Forgery (SSRF)
CVE-2021-39150		 CWE-918 High
Available
No
 1.4.18 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73954 - Deserialization of Untrusted Data
CVE-2021-39151		 CWE-502 High
No
No
 1.4.18 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73953 - Deserialization of Untrusted Data
CVE-2021-39149		 CWE-502 High
No
No
 1.4.18 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73951 - Deserialization of Untrusted Data
CVE-2021-39148		 CWE-502 High
No
No
 1.4.18 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73950 - Deserialization of Untrusted Data
CVE-2021-39147		 CWE-502 High
No
No
 - 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73949 - Deserialization of Untrusted Data
CVE-2021-39146		 CWE-502 High
No
No
 1.4.18 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73948 - Deserialization of Untrusted Data
CVE-2021-39145		 CWE-502 High
No
No
 1.4.18 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 14 more
#VU73946 - Deserialization of Untrusted Data
CVE-2021-39141		 CWE-502 High
Available
No
 1.4.18 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 14 more
#VU71585 - Out-of-bounds write
CVE-2022-40151		 CWE-787 Medium
No
No
 1.4.20 26.01.2023 SB2023012653
SB2023032944
SB2023041866
and 5 more
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Available
No
 1.4.20 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU69283 - Out-of-bounds write
CVE-2022-40151		 CWE-787 Medium
No
No
 1.4.20 14.11.2022 SB2022111420
SB2022122822
SB2023012670
and 32 more
#VU68720 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-39144		 CWE-94 Critical
Available
Exploited
 1.4.18 25.10.2022 SB2021082322
SB2022102568
SB2023031801
and 17 more
#VU62511 - Improper input validation
CVE-2021-39140		 CWE-20 Medium
No
No
 1.4.18 22.04.2022 SB2022042257
SB2023012518
SB2023032239
and 15 more
#VU60527 - Resource exhaustion
CVE-2021-43859		 CWE-400 Medium
No
No
 1.4.19 11.02.2022 SB2022021102
SB2022021103
SB2022042250
and 26 more
#VU60089 - Improper input validation
CVE-2021-39153		 CWE-20 High
No
No
 1.4.18 27.01.2022 SB2022012755
SB2022042262
SB2023032239
and 13 more
#VU59813 - Improper input validation
CVE-2021-39139		 CWE-20 High
No
No
 1.4.18 19.01.2022 SB2022011911
SB2022011912
SB2022012325
and 21 more
#VU59701 - Improper input validation
CVE-2021-39154		 CWE-20 High
No
No
 1.4.18 18.01.2022 SB2022011835
SB2023032239
SB2023050815
and 12 more
#VU54675 - Deserialization of Untrusted Data
CVE-2021-29505		 CWE-502 Medium
Available
No
 1.4.17 12.07.2021 SB2021071217
SB2021071218
SB2021071389
and 19 more


Showing elements 1 - 20 out of 36