Skip to content
OpenAdvisories

Package · PyPI

irrd

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.1
    CVE-2026-28681

    IRRd: web UI host header injection allows password reset poisoning via attacker-controlled email links

    Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. From version 4.4.0 to before version 4.4.5 and from version 4.5.0 to before version 4.5.1, an attacker can manipulate the HTTP Host header on a pa…

    irrdnet irrd irrd PyPI
  • High 7.5
    CVE-2022-24798

    Insufficient password hash filtering in some IRRd queries and exports

    Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd did not always filter password hashes in query responses relating to `mntner` objects and database exports. This may have allowed adversaries…

    irrdnet irrd irrd PyPI