Product by Nlnet Labs

    Routinator

    20 known vulnerabilities in Routinator (Nlnet Labs), 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Routinator (Nlnet Labs)
    HighCVE-2026-72753

    Routinator incorrectly handles delta updates

    		8.2
    HighCVE-2021-43173

    Hanging RRDP request

    also in 4 other products

    		7.5
    HighCVE-2026-72754

    Routinator exits when parsing an incorrect or very large CRL file

    		7.5
    HighCVE-2026-72758

    Routinator may exit on malformed ranges

    		7.5
    HighCVE-2026-72756

    Routinator exits on malformed rsync URIs

    		7.5
    HighCVE-2024-1622

    Routinator terminates when RTR connection is reset too quickly after opening

    also in 2 other products

    		7.5
    HighCVE-2021-43174

    gzip transfer encoding caused out-of-memory crash

    also in 3 other products

    		7.5
    HighCVE-2021-43172

    Infinite length chain of RRDP repositories

    also in 1 other product

    		7.5
    HighCVE-2026-49233

    Routinator cache path traversal using rogue rsync URIs

    also in 1 other product

    		7.5
    CriticalCVE-2023-39916

    Possible path traversal when storing RRDP responses

    also in 1 other product

    		9.3
    HighCVE-2026-49235

    Routinator crashes on specifically crafted RRDP XML files

    also in 1 other product

    		7.5
    HighCVE-2026-49232

    Routinator exits when accepting an incoming HTTP or RTR connection fails

    		—
    HighCVE-2021-41531

    NLnet Labs Routinator: Improper Validation of Consistency within Input

    also in 1 other product

    		7.5
    HighCVE-2022-3029

    Fatal error on incorrect base64 data in RRDP

    also in 1 other product

    		7.5
    MediumCVE-2026-72752

    Routinator exits when requesting the output repeatedly

    		6.5
    MediumCVE-2026-72757

    Routinator HTTP server becomes unavailable with many unclosed connections

    		5.3
    HighCVE-2026-49234

    Routinator crashes on specifically crafted ASN strings in the API

    also in 1 other product

    		7.5
    HighCVE-2023-39915

    Crashes on parsing certain invalid RPKI objects

    also in 1 other product

    		7.5
    HighCVE-2025-0638

    Routinator crashes when illegal characters are present in manifest file names

    		7.5
    LowCVE-2026-72755

    Routinator stores TA certificate in cache without validation

    		3.8

    All products by Nlnet Labs