Whoopsie Project Whoopsie — known CVE vulnerabilities

Every CVE whose affected-product data names Whoopsie Project Whoopsie, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-11484 — CVSS 6.3 (medium): Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.
• CVE-2020-12135 — CVSS 5.5 (medium): bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the…
• CVE-2020-15570 — CVSS 5.5 (medium): The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to…