Capnproto

9 CVEs across 2 Capnproto products. Browse Capnproto vulnerabilities, severities, and proof-of-concept exploits.

Capnproto products with known CVEs

ProductCVEs
Capnproto9
Capnp1
Capnproto CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-32240Medium6.52026-03-12Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, when using Transfer-Encoding: chunked, if a chunk's size parsed to a…
CVE-2026-32239Medium6.52026-03-12Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length value was converted to unsigned, treating i…
CVE-2023-48230Medium5.92023-11-21Cap'n Proto is a data interchange format and capability-based RPC system. In versions 1.0 and 1.0.1, when using the KJ HTTP library with WebSocket compression…
CVE-2022-46149Medium5.42022-11-30Cap'n Proto is a data interchange format and remote procedure call (RPC) system. Cap'n Proro prior to versions 0.7.1, 0.8.1, 0.9.2, and 0.10.3, as well as vers…
CVE-2015-2313High7.52017-08-09Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application invokes the totalSize method on an object reader, allows remote peers to cau…
CVE-2015-2312High7.52017-08-09Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service (CPU and possibly general resource consumption)…
CVE-2015-2311Critical9.82017-08-09Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a denial of service or possibly obtain sen…
CVE-2015-2310Critical9.12017-08-09Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service or possibly ob…
CVE-2017-7892High7.52017-04-17Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to a compiler optimization. A remote attacker can trigger a segfault in a 32-bit libcapnp ap…