Vendor

    OISF

    108 known vulnerabilities in products by OISF, 0 of them actively exploited (CISA KEV).

    Key figures

    108

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    11

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in OISF
    HighCVE-2026-45769

    ikev2: unbounded client transform storage can lead to resource exhaustion

    		7.5
    HighCVE-2018-1000167

    OISF Suricata-update: Deserialization of Untrusted Data

    		7.8
    CriticalCVE-2018-10243

    OISF LibHTP: Buffer Over-read

    		9.8
    HighCVE-2020-19678

    OISF Suricata: Path Traversal

    also in 2 other products

    		7.5
    CriticalCVE-2019-18792

    OISF Suricata: security vulnerability

    also in 1 other product

    		9.1
    CriticalCVE-2018-10244

    OISF Suricata: Integer Overflow

    		9.8
    CriticalCVE-2021-37592

    OISF Suricata: security vulnerability

    		9.8
    HighCVE-2015-0928

    OISF LibHTP: NULL Pointer Dereference

    		7.5
    HighCVE-2019-1010251

    Open Information Security Foundation Suricata: Denial of Service

    		7.5
    CriticalCVE-2026-45764

    Suricata http2: protocol-change type confusion can lead to denial of service

    		9.1
    HighCVE-2021-35063

    OISF Suricata: security vulnerability

    also in 2 other products

    		7.5
    CriticalCVE-2026-94083

    OISF Suricata: Type Confusion

    		9.4
    HighCVE-2026-46387

    Suricata http2: decompression bomb can cause denial of service in Suricata

    		7.5
    CriticalCVE-2026-94084

    OISF Suricata: Use After Free

    		9.4
    HighCVE-2026-45759

    Suricata http1: quadratic Content-Disposition processing can lead to denial of service

    		7.5
    HighCVE-2021-45098

    OISF Suricata: security vulnerability

    also in 2 other products

    		7.5
    HighCVE-2026-57227

    Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages

    		7.5
    HighCVE-2026-63446

    Suricata app-layer: passed flows can retain transactions, causing resource exhaustion

    		7.5
    HighCVE-2026-45768

    Suricata ldap: unbounded responses per transaction can lead to resource exhaustion

    		7.5
    HighCVE-2019-18625

    OISF Suricata: security vulnerability

    also in 1 other product

    		7.5
    CriticalCVE-2023-35853

    OISF Suricata: security vulnerability

    		9.8
    HighCVE-2026-63447

    Suricata ftp: crafted FTP traffic can cause quadratic CPU consumption

    		7.5
    HighCVE-2026-63452

    Suricata http1: repeated brotli compression bombs can cause excessive CPU consumption

    		7.5
    HighCVE-2026-71418

    Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumption

    		7.5
    HighCVE-2026-45766

    Suricata nfs: unbounded stateful structures can lead to resource exhaustion

    		7.5

    All vulnerabilities in search

    Products

    Products by OISF
    OISF Suricata1000
    OISF LibHTP70