kore vulnerabilities

1 known vulnerability in kore from Jorisvink. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  kore: Integer Underflow (Wrap or Wraparound)

  CVE-2026-121727Nov 3, 2026Jorisvink

  Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauthenticated attackers to bypass http_body_max by sending more body bytes than declared. Attackers can send oversized first segments over many concurrent