https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T22:38:07.699920+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-68911 CVE-2026-68911 — Nicotine+: Decompression of peer messages can exhaust available memory 2026-10-01T22:38:07.728158+00:00

Affected: nicotine-plus

Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version 3.3.11.