MEDIUM6.5PyPI
GHSA-9663-mqmp-p9mm· CVE-2026-48045, PYSEC-2026-3435python-zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood
Modified: 7/13/2026
package
PyPI/zeroconf
pkg:pypi/zeroconf
MEDIUM6.5PyPI
GHSA-9pgc-3ccv-5297· CVE-2026-47180, PYSEC-2026-3436zeroconf has unbounded recursion in DNS compression-pointer decoder that allows LAN-local denial of service
Modified: 7/13/2026
MEDIUM6.5PyPI
GHSA-phvx-9mgw-67r5· CVE-2026-47183, PYSEC-2026-3437zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion
Modified: 7/13/2026
MEDIUM6.5PyPI
GHSA-qc2x-6f54-m6h9· CVE-2026-48487, PYSEC-2026-3438zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet
Modified: 7/13/2026
MEDIUM6.5PyPI
GHSA-rfg2-pjw2-56x2· CVE-2026-47184, PYSEC-2026-3439zeroconf has unbounded DNS record cache that allows LAN-local memory exhaustion via multicast flood
Modified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-3435· CVE-2026-48045, GHSA-9663-mqmp-p9mmpython-zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood
Modified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-3436· CVE-2026-47180, GHSA-9pgc-3ccv-5297zeroconf has unbounded recursion in DNS compression-pointer decoder that allows LAN-local denial of service
Modified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-3437· CVE-2026-47183, GHSA-phvx-9mgw-67r5zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion
Modified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-3438· CVE-2026-48487, GHSA-qc2x-6f54-m6h9zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet
Modified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-3439· CVE-2026-47184, GHSA-rfg2-pjw2-56x2zeroconf has unbounded DNS record cache that allows LAN-local memory exhaustion via multicast flood
Modified: 7/13/2026