← Database

CVE-2026-49234

HIGH CVSS: 7.5 Published: 2026-06-08 Modified: 2026-07-23

Description

When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinator crashes. This only affects users who allow API access from untrusted networks.

Affected Platforms

Nlnetlabs Routinator

Weakness Type

CWE-20, NVD-CWE-noinfo

References