Product by Cesanta
Cesanta Mongoose
62 known vulnerabilities in Cesanta Mongoose (Cesanta), 0 of them actively exploited (CISA KEV).
Key figures
62
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
24
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-19307 | Cesanta Mongoose: Out-of-Bounds Write | 9.8 | |
| Critical | CVE-2017-2894 | Cesanta Mongoose: Stack-Based Buffer Overflow | 9.8 | |
| High | CVE-2017-2893 | Cesanta Mongoose: NULL Pointer Dereference | 7.5 | |
| Critical | CVE-2018-20355 | Cesanta Mongoose: Use-After-Free | 9.8 | |
| Critical | CVE-2018-20354 | Cesanta Mongoose: Use-After-Free | 9.8 | |
| Critical | CVE-2018-20353 | Cesanta Mongoose: Use-After-Free | 9.8 | |
| Critical | CVE-2018-20356 | Cesanta Mongoose: Use-After-Free | 9.8 | |
| Critical | CVE-2017-2892 | Cesanta Mongoose: Out-of-Bounds Access | 9.8 | |
| Critical | CVE-2017-2891 | Cesanta Mongoose: Use-After-Free | 9.8 | |
| Critical | CVE-2017-2922 | Cesanta Mongoose: Use-After-Free | 9.8 | |
| Critical | CVE-2019-12951 | Cesanta Mongoose: Heap-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2017-2921 | Cesanta Mongoose: Heap-Based Buffer Overflow | 8.1 | |
| Critical | CVE-2018-18765 | Cesanta Mongoose: Buffer Over-read | 9.1 | |
| Critical | CVE-2020-25756 | Cesanta Mongoose: Buffer Overflow | 9.8 | |
| Critical | CVE-2018-18764 | Cesanta Mongoose: Buffer Over-read | 9.1 | |
| Critical | CVE-2022-25299 | Arbitrary File Write | 9.8 | |
| Critical | CVE-2021-26530 | Cesanta Mongoose: security vulnerability | 9.1 | |
| Critical | CVE-2021-26529 | Cesanta Mongoose: security vulnerability | 9.1 | |
| Critical | CVE-2021-26528 | Cesanta Mongoose: security vulnerability | 9.1 | |
| Critical | CVE-2026-73257 | Mongoose: Content-Length + Transfer-Encoding coexistence enables request smuggling | 9.1 | |
| Critical | CVE-2026-5244 | Cesanta Mongoose TLS 1.3 mongoose.c mg_tls_recv_cert heap-based overflow | 9.8 | |
| High | CVE-2026-11404 | Cesanta Mongoose Out-of-Bounds Read in MG_TLS_BUILTIN ClientHello Session ID Parsing | 7.5 | |
| High | CVE-2017-2895 | Cesanta Mongoose: Out-of-Bounds Access | 8.2 | |
| High | CVE-2019-13503 | Cesanta Mongoose: Buffer Over-read | 7.5 | |
| High | CVE-2017-2909 | Cesanta Mongoose: Infinite Loop | 7.5 |