Nicotine-plus vulnerabilities
We track 1 vulnerability in Nicotine-plus products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 29, 2026.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest Nicotine-plus vulnerabilities
- 8.7 High severity
nicotine-plus: Improper Handling of Highly Compressed Data (Data Amplification)
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. Th