Tdunning vulnerabilities
We track 2 vulnerabilities in Tdunning products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 10, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Tdunning vulnerabilities
- 7.5 High severity
t-digest: Improper Validation of Specified Quantity in Input
t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in MergingDigest.fromBytes that fails to validate length and capacity fields from serialized data. Attackers can supply crafted serialized digests with mismatched header fields to trig
- 7.5 High severity
t-digest: Inefficient Algorithmic Complexity
t-digest versions 3.1 through 3.3 fail to validate centroid means during deserialization in MergingDigest.fromBytes, allowing attackers to inject NaN values that bypass validation checks. Attackers can craft malicious serialized digests containing NaN centroid