CyberSecBulletin

Dmonad vulnerabilities

We track 2 vulnerabilities in Dmonad products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 29, 2026.

2vulnerabilities
0critical
2high
0exploited
8.6average CVSS score

Latest Dmonad vulnerabilities

  • 8.6 High severity

    lib0: Out-of-bounds Read

    CVE-2026-102521Dmonad

    The decoder in `readFromDataView` in lib0 before 0.2.119 can be tricked into reading more than it should from a buffer. The vulnerability allows reading past the decoders' view, thus exposing adjacent process memory. This can be anything that is currently in t

  • 8.6 High severity

    lib0: Out-of-bounds Read

    CVE-2026-102360Dmonad

    A missing bounds check in the binary decoder in lib0, versions 0.2.1-0.2.117 and earlier and 1.0.0-rc.32 and earlier, lets any unauthenticated remote peer read adjacent process memory and receive it back. `readUint8Array` never compares the wire-supplied lengt