https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-48487.htmlhttps://patchthecve.com/cve/CVE-2026-48487.htmlMon, 17 Aug 2026 20:06:33 +0000MEDIUM 5.3: Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.16, _read_character_string and _read_string in src/zeroconf/_protocol/incoming.py advanced self.offset by attacker-declared RDLENGTH without checking it against self._data_len, allowing unauthenticated hosts https://patchthecve.com/cve/CVE-2026-48045.htmlhttps://patchthecve.com/cve/CVE-2026-48045.htmlMon, 17 Aug 2026 20:03:08 +0000MEDIUM 6.5: Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handle_query_or_defer retained every truncated TC-bit incoming query, each up to _MAX_MSG_ABSOLUTE = 8966 bytes, in self._deferred[addr] and armed a per-address timer in self._timers[addr] whttps://patchthecve.com/cve/CVE-2026-47184.htmlhttps://patchthecve.com/cve/CVE-2026-47184.htmlMon, 17 Aug 2026 19:56:27 +0000MEDIUM 6.5: Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.7, DNSCache._async_add inserted every response record into cache, _expirations, _expire_heap, and service_cache without a cap, allowing unauthenticated hosts on the local link over UDP/5353 (224.0.0.251 / ff0https://patchthecve.com/cve/CVE-2026-47183.htmlhttps://patchthecve.com/cve/CVE-2026-47183.htmlMon, 17 Aug 2026 19:50:03 +0000MEDIUM 6.5: Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.6, DNSIncoming._log_exception_debug and the four QuietLogger exception-dedup methods stored an unbounded _seen_logs dictionary keyed by attacker-influenced IncomingDecodeError messages, retaining sys.exc_infohttps://patchthecve.com/cve/CVE-2026-47180.htmlhttps://patchthecve.com/cve/CVE-2026-47180.htmlMon, 17 Aug 2026 19:48:30 +0000MEDIUM 6.5: Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.5, DNSIncoming._decode_labels_at_offset recurses once per DNS-name compression pointer, and a single mDNS packet carrying chained pointers can trigger a RecursionError that escapes DNSIncoming.__init__, causi