As part of our research, we identify vulnerabilities in security-critical software which we report to the vendors in coordinated disclosure. This list collects all CVEs that have been assigned and credited to our work.
CVE Records
| Id | Affected Products | Score | Links |
|---|---|---|---|
| CVE-2025-0638 | NLnet Labs Routinator (<0.14.1) | 7.5 High | CVE↗ NVD↗ |
| CVE-2024-56375 | NICMx FORT-validator (1.6.3 - <1.6.5) | 7.5 High | CVE↗ NVD↗ |
| CVE-2024-45239 | NICMx FORT-validator (1.6.3 - <1.6.5) | 7.5 High | CVE↗ NVD↗ |
| CVE-2024-45239 | NICMx FORT-validator (<1.6.3) | 7.5 High | CVE↗ NVD↗ |
| CVE-2024-45238 | NICMx FORT-validator (<1.6.3) | 7.5 High | CVE↗ NVD↗ |
| CVE-2024-45237 | NICMx FORT-validator (<1.6.3) | 9.8 Critical | CVE↗ NVD↗ |
| CVE-2024-45236 | NICMx FORT-validator (<1.6.3) | 7.5 High | CVE↗ NVD↗ |
| CVE-2024-45235 | NICMx FORT-validator (<1.6.3) | 7.5 High | CVE↗ NVD↗ |
| CVE-2024-45234 | NICMx FORT-validator (<1.6.3) | 7.5 High | CVE↗ NVD↗ |
| CVE-2023-50387 | NLnet Labs unbound (<1.19.1), ISC BIND (9.0.0 - <9.16.46, 9.18.0 - <9.18.22, 9.19.0 - <9.19.20), PowerDNS (<4.8.6, <4.9.3, <5.0.2), CZ.NIC Knot Resolver (<5.7.1) and dnsmasq (<2.90) | 7.5 High | CVE↗ NVD↗ |
| CVE-2023-39916 | NLnet Labs Routinator (0.9.0 - <0.12.2, 0.14.*) | 9.3 Critical | CVE↗ NVD↗ |
| CVE-2023-39915 | NLnet Labs Routinator (<0.12.2) | 7.5 High | CVE↗ NVD↗ |
| CVE-2023-39914 | NLnet Labs Routinator (<0.7.3) | 7.5 High | CVE↗ NVD↗ |
| CVE-2022-3616 | Cloudflare OctoRPKI (<1.4.4) | 5.4 Medium | CVE↗ NVD↗ |
| CVE-2022-3029 | NLnet Labs Routinator (0.9.0 - 0.11.2) | 7.5 High | CVE↗ NVD↗ |
| CVE-2021-3672 | c-ares (1.17.2) | 5.6 Medium | CVE↗ NVD↗ |
| CVE-2021-43523 | uClibc and uClibc-ng (<1.0.39) | 9.6 Critical | CVE↗ NVD↗ |
| CVE-2021-22931 | Node.js (<16.6.0, <14.17.4, <12.22.4) | 9.8 Critical | CVE↗ NVD↗ |
| CVE-2021-20314 | libspf2 (1.2.11) | 9.8 Critical | CVE↗ NVD↗ |
| CVE-2021-32019 | OpenWrt (<19.07.8) | 6.1 Medium | CVE↗ NVD↗ |
| CVE-2021-33195 | Go (<1.15.13, <1.16.5) | 7.3 High | CVE↗ NVD↗ |
| CVE-2021-2432 | Oracle Jaca SE JDK and JRE (7u301) | 3.7 Low | CVE↗ NVD↗ |
| CVE-2021-32642 | radsecproxy (<1.9.0) | 7.0 High | CVE↗ NVD↗ |