Routinator exits when requesting the output repeatedly
Impact
Routinator exits due to memory issues or stack overflow when handling multiple JSON output requests or large metadata payloads. This affects users with HTTP or RTR servers exposed to untrusted networks. Version 0.15.3 is unaffected.
Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.This only affects users that make their HTTP or RTR server available to untrusted networks.
What to do
This issue is fixed in 0.15.3 and all later versions.
Affected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
NLnet Labs · NLnet Labs
Routinator
1 range
NLnet Labs · NLnet Labs
Routinator
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0.15.3 → before *
semver versions
Other versions: affected
Original source description
Routinator runs out of memory when the JSON output is requested many times concurrently. This condition can be triggered maliciously by an attacker by opening a large number of connections to the HTTP server. Additionally Routinator runs into a stack overflow and exits when a payload item with too much metadata is discarded at once.
This only affects users that make their HTTP or RTR server available to untrusted networks.
Inside the record
Evidence available
Describes the evidence in this view, not whether the product is safe.
Original records
CVE-2026-72752View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.
cve.new JSON →Underlying weaknesses
The source’s classification of what caused the vulnerability.
Contributing organizations · 2
Assigning organization
Additional data publisher
What changed
Follow changesLarge field values are marked as truncated previews. Original source snapshots remain retained.