irrd vulnerabilities

2 known vulnerabilities in irrd from Irrdnet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  irrd: URL Redirection to Untrusted Site

  CVE-2026-28681Mar 6, 2026Irrdnet

  Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. From version 4.4.0 to before version 4.4.5 and from version 4.5.0 to before version 4.5.1, an attacker can manipulate the HTTP Host header on a pas

• 7.5 High severity

  irrd: Improper Removal of Sensitive Information Before Storage or Transfer

  CVE-2022-24798Mar 31, 2022IrrdnetEPSS 1.42%

  Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd did not always filter password hashes in query responses relating to `mntner` objects and database exports. This may have allowed adversaries