snac2 vulnerabilities

1 known vulnerability in snac2 from Grunfink. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  snac2: Heap-based Buffer Overflow

  CVE-2026-112021Oct 18, 2026Grunfink

  snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_json_load_lexer() that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted applicati