-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability arises when an NFStreamer object is destroyed without being used, leaving allocated modules (like nDPI contexts) unfreed. The GitHub issue explicitly links the leak to improper cleanup in nDPI's ndpi_flow_free(), but the root cause in NFStream lies in its lifecycle management. The NFStreamer init method initializes these modules, and the NDPI plugin's del method (or related cleanup logic) fails to free them if the object is destroyed early. This matches CWE-401 (missing memory release) and the described exploit scenario.
PythonPython| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| nfstream | pip | = 5.2.0 |
Ongoing coverage of React2Shell