To report a security issue, please use the "Report a Vulnerability" tab.
The avahi project follows a 90 day disclosure timeline.
Security: avahi/avahi
Security
.github/SECURITY.md
-
Uncontrolled recursion in lookup_handle_cname (CVE-2026-24401)GHSA-h4vp-5m8j-f6w3 published
Jan 24, 2026 by evverxModerate -
Reachable assertion in avahi_wide_area_scan_cache (CVE-2025-68276)GHSA-mhf3-865v-g5rc published
Jan 12, 2026 by evverxModerate -
Reachable assertion in lookup_multicast_callback (CVE-2025-68468)GHSA-cp79-r4x9-vf52 published
Jan 12, 2026 by evverxModerate -
simple protocol server accepts unlimited connections and logs failures without limit (CVE-2025-59529)GHSA-73wf-3xmj-x82q published
Dec 18, 2025 by pemensikModerate -
Avahi Wide-Area DNS Predictable Transaction IDs (CVE-2024-52616)GHSA-r9j3-vjjh-p8vm published
Nov 16, 2024 by pemensikModerate -
Avahi Wide-Area DNS Uses Constant Source Port (CVE-2024-52615)GHSA-x6vp-f33h-h32g published
Nov 16, 2024 by pemensikModerate -
Incorrect handling of client connection allows local attacker to trigger infinite loop (CVE-2021-3468)GHSA-mrwc-c54v-3rg8 published
Nov 16, 2024 by pemensikModerate -
Reachable assertion in lookup_start (CVE-2025-68471)GHSA-56rf-42xr-qmmg published
Jan 12, 2026 by evverxModerate -
Uncontrolled recursion in lookup_handle_cname (CVE-2024-2699)GHSA-v99h-rhv2-7mpq published
Jan 12, 2026 by evverxModerate
Learn more about advisories related to avahi/avahi in the GitHub Advisory Database