nanopb vulnerabilities
CVEs whose affected-version data names the nanopb package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2021-21401High· 7.1PoCnanopb vulnerable to invalid free() call with oneofs and PB_ENABLE_MALLOC
nanopb vulnerable to invalid free() call with oneofs and PB_ENABLE_MALLOC
▾ Midnightnanopb · nanopbEPSS 1.8%via OSV
CVE-2020-26243High· 7.5Memory leak in Nanopb
Memory leak in Nanopb
▾ Twilightnanopb · nanopbEPSS 2.7%via OSV