# Oisf Suricata


- [CVE-2023-35853](https://insights.sbomify.com/CVE-2023-35853/): Code injection in n/a (critical 9.8)
- [CVE-2021-37592](https://insights.sbomify.com/CVE-2021-37592/): Other in n/a (critical 9.8)
- [CVE-2018-10244](https://insights.sbomify.com/CVE-2018-10244/): Integer overflow in n/a (critical 9.8)
- [CVE-2026-94083](https://insights.sbomify.com/CVE-2026-94083/): Memory corruption in Suricata (critical 9.4)
- [CVE-2026-94084](https://insights.sbomify.com/CVE-2026-94084/): Use after free in Suricata (critical 9.4)
- [CVE-2026-45764](https://insights.sbomify.com/CVE-2026-45764/): Suricata http2: protocol-change type confusion can lead to denial of service (critical 9.1)
- [CVE-2019-18792](https://insights.sbomify.com/CVE-2019-18792/): Security feature bypass in n/a (critical 9.1)
- [CVE-2026-57228](https://insights.sbomify.com/CVE-2026-57228/): Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder (high 8.2)
- [CVE-2026-57227](https://insights.sbomify.com/CVE-2026-57227/): Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages (high 7.5)
- [CVE-2026-63446](https://insights.sbomify.com/CVE-2026-63446/): Suricata app-layer: passed flows can retain transactions, causing resource exhaustion (high 7.5)
- [CVE-2026-63447](https://insights.sbomify.com/CVE-2026-63447/): Suricata ftp: crafted FTP traffic can cause quadratic CPU consumption (high 7.5)
- [CVE-2026-63452](https://insights.sbomify.com/CVE-2026-63452/): Suricata http1: repeated brotli compression bombs can cause excessive CPU consumption (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/products/oisf/suricata/