{"id":"CVE-2026-73256","summary":"Mongoose: HTTP/1.0 detection off-by-one enables request smuggling via chunked TE","details":"Mongoose is an embedded web server and network library. Prior to 7.22, a remote unauthenticated attacker can exploit an HTTP/1.0 reverse-proxy deployment by sending a request with Transfer-Encoding: chunked and conflicting framing. The http_cb() function in src/http.c tests hm.proto.len with an impossible greater-than-eight condition even though mg_http_parse() requires an eight-byte protocol string, so is_http_1_0 is never set. Mongoose consequently processes chunked encoding that an HTTP/1.0 proxy can ignore, enabling request smuggling and unauthorized access or state changes. This issue is fixed in version 7.22.","aliases":["GHSA-mgp5-rjrv-h5j3"],"modified":"2026-08-24T03:59:16.312091Z","published":"2026-08-20T17:37:54.505Z","database_specific":{"cwe_ids":["CWE-444"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73256.json","cna_assigner":"GitHub_M"},"references":[{"type":"WEB","url":"https://github.com/cesanta/mongoose/releases/tag/7.22"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73256.json"},{"type":"ADVISORY","url":"https://github.com/cesanta/mongoose/security/advisories/GHSA-mgp5-rjrv-h5j3"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73256"},{"type":"FIX","url":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"type":"FIX","url":"https://github.com/cesanta/mongoose/pull/3611"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/cesanta/mongoose","events":[{"introduced":"0"},{"fixed":"a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"fixed":"beb73a65a99619ff349c59037ea5197f27c7e533"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"7.22"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["7.21","7.20","7.19","7.18","7.17","7.16","7.15","7.14","7.13","7.12","7.11","7.8","7.7","7.6","7.5","7.4","7.3","7.2","7.1","7.0","6.18","6.17","6.16","6.15","6.14","6.13","6.12","6.11","6.10","6.9","6.7","6.6","6.5","6.4","6.3","6.2","6.1","6.0","5.6","5.5_20140120","5.5","5.4","5.3","5.2","5.1","5.0","4.1","4.0","3.8","3.7","3.6","3.5","3.4","3.3","3.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73256.json","vanir_signatures_modified":"2026-08-24T03:59:16Z","vanir_signatures":[{"id":"CVE-2026-73256-004dae75","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_builtin.c","function":"mg_tls_recv_cert"},"deprecated":false,"digest":{"function_hash":"287628499716142521955651966755790710557","length":3711}},{"deprecated":false,"digest":{"line_hashes":["135878911087546785168183389357946430568","140388943525191225273174121718188200172"],"threshold":0.9},"id":"CVE-2026-73256-00572943","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_rsa.c"}},{"deprecated":false,"digest":{"function_hash":"291002711997149435366708935068436443899","length":1949},"id":"CVE-2026-73256-014dc236","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/net_builtin.c","function":"rx_ndp_ra"}},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_http_next_multipart"},"deprecated":false,"digest":{"function_hash":"271772299627380034480793415644141608842","length":1332},"id":"CVE-2026-73256-02b34820","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_der_debug_cert_name"},"deprecated":false,"digest":{"function_hash":"119484312311729218313841294515703490182","length":876},"id":"CVE-2026-73256-05c9ce62"},{"target":{"file":"mongoose.c","function":"mg_tls_verify_cert_cn"},"deprecated":false,"digest":{"function_hash":"223520999800417555437934450563538821997","length":356},"id":"CVE-2026-73256-073f8323","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_file_write"},"deprecated":false,"digest":{"function_hash":"210789633457643583043259984651009903760","length":486},"id":"CVE-2026-73256-07c95ca0"},{"digest":{"line_hashes":["323762034003313938239191035668036545734","278088108927226750224863652108869185913","258780519879097280652998131942610438013","210666658011398534004262757687681192459"],"threshold":0.9},"id":"CVE-2026-73256-0dee8c68","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/dns.c"},"deprecated":false},{"digest":{"function_hash":"178757615423858552878285911075762362845","length":620},"id":"CVE-2026-73256-0e3c5078","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_builtin.c","function":"mg_ssl_key_log"},"deprecated":false},{"id":"CVE-2026-73256-0f2cbd5f","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"ssl_keylog_cb"},"deprecated":false,"digest":{"function_hash":"26042152181086916149296364037127903400","length":279}},{"digest":{"function_hash":"256451399111438138895174480287355639934","length":713},"id":"CVE-2026-73256-102a63fe","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"skip_chunk"},"deprecated":false},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_tls_verify_cert_san"},"deprecated":false,"digest":{"function_hash":"245598739821504207986080235075487799128","length":1218},"id":"CVE-2026-73256-11eda537","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"197196291767139600441749744914094809170","length":1385},"id":"CVE-2026-73256-14f16fab","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"printdirentry"}},{"digest":{"function_hash":"78487270749648106634604725345797439449","length":4249},"id":"CVE-2026-73256-16ddf083","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_builtin.c","function":"mg_tls_init"},"deprecated":false},{"id":"CVE-2026-73256-1782825f","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/drivers/cyw.c"},"deprecated":false,"digest":{"line_hashes":["33386847719558698537727800308650150078","73016749896233373528860427606944990587","95113038063131343464802745742757593491","260253014940381019242356514965318486913"],"threshold":0.9}},{"deprecated":false,"digest":{"length":124,"function_hash":"288947917236156155490905987055432606671"},"id":"CVE-2026-73256-1ae0c3ae","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/l2_ppp.c","function":"mg_l2_ppp_init"}},{"id":"CVE-2026-73256-1b383e5e","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_tls_parse_cert_der"},"deprecated":false,"digest":{"function_hash":"203975432014465076341191972595335290773","length":4730}},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"tutorials/mqtt/mqtt-server/main.c"},"deprecated":false,"digest":{"line_hashes":["144287353989316942174917432103467706274","86345465872091345859928361637993396758","332483499486768402489767670898298009887","129703102680295537620519127194602614367","312542443499427273288122984437586581366","212180053471062612464638912731021188668","49572783198542565138427400835896609152","258181605499529108847897015353598100333"],"threshold":0.9},"id":"CVE-2026-73256-1c0ab715","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"find_opt"},"deprecated":false,"digest":{"function_hash":"338435928879605611046398857867264628027","length":382},"id":"CVE-2026-73256-1c70093e","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"78487270749648106634604725345797439449","length":4249},"id":"CVE-2026-73256-1e1d64ae","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_tls_init"},"deprecated":false},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/fs.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["230430873763238066469482013697192065017","224627688305521428575807905152272914446","310408317756248008075785314933596041003","87690224252503130711311032426523966420","115077142643673349757901192911319661264","268026456378666524531312189182996048302","102258537728051947322975896684432937595","269069890299507051023317814716822813978","295109766319707597293891709606188630851","119149522512066640484223909619193016085","177427404384975480371774329621742561779","124012712097989189377296174327090009662","201913907345666952727676808657515996295","191030403299871298014566886997312975349"]},"id":"CVE-2026-73256-1e72e5c0","signature_type":"Line","signature_version":"v1"},{"target":{"file":"src/http.c","function":"skip_chunk"},"deprecated":false,"digest":{"function_hash":"256451399111438138895174480287355639934","length":713},"id":"CVE-2026-73256-24f76cc6","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"deprecated":false,"digest":{"function_hash":"316624409977202983390184587231308637144","length":3035},"id":"CVE-2026-73256-288f0503","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/http.c","function":"listdir"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"function":"mg_der_find_oid","file":"src/tls_builtin.c"},"deprecated":false,"digest":{"function_hash":"183403931862235246509971980857171726939","length":435},"id":"CVE-2026-73256-321a6ff6"},{"id":"CVE-2026-73256-32f2cf5d","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"rx_ip"},"deprecated":false,"digest":{"function_hash":"60018149680491766373986046346055696805","length":3002}},{"digest":{"line_hashes":["196480247972839381791816979746574616765","19571469751945612133790407869324927414","135738648813901628968059912069456480808","15460033969417638971828292509880011651","200231667551056318621568619775785224323","33198753835631155674895965219918538826","147780645116516167870796938058621591162","220879119185117989693561401495440539596","316787075831798734384953909413843080907","2783115143475840227859844843821035493","163713228361641250898968470540051066349","112287400186701863962073463703547609574","246224180538254291469104668407583774803","69364965006474916416363729380470562763","189165530753507570940644856966377329192","92485289566479090987540088768870402169","38527071832268731725426950801845647146","89165040637268650732813974495735033753","189852552634466819005250730163380464968","157041747907666006208044891451190885906","15816353358796487354358396085376359099","28240404497880903972189619398287436840","88021926929185532458955840426579985467","164756482020469435388436325313877315462","2221777887795751017617688661864893591","305407463024304548130196606906410878762","60009996524188474217093682539147842829","227118336089805870812864826341105371868","21784341378700188027974319065888775563","203335200195116276984833050988434047487","206492324704945625654862249349976438507","144815525664916353913140625001006660039","79034505402800722861868156437850219145","321723477737740125454197823596542652706","313049198470387297537794644905491985654","44505765909491870592298937651470080687","173249299508180350782252823162533369663","139180089924521928383560901509702502751","70584283708665997819962806195533184925","214705088167228414953236740661648073536","189226502013782129419550274744100556885","176285187880089093561480489738000288018","305113864016631800646296723664919733415","339176960987294900202080000164739298196","249105431065302940479115253991436174933","95391750759930538679428868582085558538","290759218603385751554429593277677055881","297809011341383347336703406327010480625","61542593005966947055733028662414149458","10714498546213741401743468168633824269","258770002393716746640150119328410327173","31435421984330512662993246907942280128","272823635109084798438112164603587191888","255939596092783587984493327782854963919","185984173708500757653837962644550893333","212714826820092570153070731402317387706","312380295388490930042275647167876787590","127677395595787442576521572158330094602","155270041178741552002345129105328586692","268992290226833759395226851762309115823","111472750078548222216015413945263622375","267868390585593816517915983992887850017","136803458577079335620766807177727942285","184191480112958967387205082461126484008","320385786278485115696251022103476911193","45023453441225608848665406981917597392","44410860698388288439204454003800754978","3665073216006753514618862081777752249","10653606925425677975126701360033739048","27987974001485429266384084916625572562","326790896270386239037718290041699567012","339248409394338858364104821540364491004","210227221900903306717702479895397220242","181511796645686442639179598100905657826","336549907333876443539050669328785927507","287667717728167268361733128802414307356","161711644820091367793862800852356511072","176155408544253685655214622469624104212","333524572826694396681287479974129676957","134703114333521490549881677821607104315","36470572211285718732348029145255010120","180358384075521211883730399165940572684","135116063973474434553655234550213805537","263507037420949922950770560590017284010","297295444819886776360825326696600298970","237091077963936437947498310383627899804","83794079943830085462744832257669246335","132062244101569587596745813497247937483","169672006949913823979663260497495943820","5638527425915817927799472676386071671","16529865300211693623870178952980903025","280930834117853212902094316619686846844","2425361400536483050697752040274890085","197666525578706352099309819999654182909","145995069942282369056304534640208644827","1861194980013761239651449453405677138","164623427066540388397036661264812601005","68446135275369846144487391830739339539","148586744301685106588095027273899497414","148925615984659153759026475201527803607","275863428623025763261412570172699824520","36790375108998893732688547977499404378","94163129876526644181961621107837825680","173458148812154465894027571614359292397","258366589447180125150910512487336853510","105328809235888547998450664627098827353","325626069971103235195642729215934349876","190156542111070956014582074505834952066","90381076227464047808699584178186310469","66999194520399122903551864098802542073","229502949640248129603772470893921984433","149353026389045427958795460773600920857","105766952094404296810022732704911101474","236786974811405036836787363631893401902","229474298323209594761370949532420781648","278593657661054376277533400876072660851","108944754070022152407668540485191220649","173566431643807476763727849464544689133","279606985497198810375515453324598036147","197324619768808038779438852083397046123","138889878243091156284632651012974200476","87289462312804180252600322307577151836","108424785653033183106946992607965838466","113012497480877804534774384955236685022","71472467297603241073929397709260350263","2975354743608892629608989244975485664","278199329522120092411417415282829743247","90506609868245861838015579044343469090","296917873473010081886039270526276322527","336611567347049620732329420555644016311","121826454884805953535597634349078809183","99846133856492044547093843593490919452","215285410891476796156916613398866516606","327812755415604668472748789109743528175","317938451070749609689298893835456130460","293435598131634151551609676646860660674","56673162217852094411700792378178116698","51337264676664327826336571402041424948","292529381370465992307320862172413837633","164964469027713502571297813205030189035","201067898980678872724437180292939236379","282712885768977940211066990092485447517","41793161490796715102359109991495279459","264467030943599513130432271317758826371","107438321627802814811431583083867570154","169771800780111346940420437804080209639","210138463810262537321795091002868603566","336528393942168812515596928259927525885","185416056443798254176007086120694330185","287849806752779988392061023546911269209","203504624751826365860019485907826851413","164661308221380417377525832944874642277","36240222373818586103152093764597059602","89434136947122063517622444501038772398","90149692098701916256665802452602801418","55764996051404441321771434999679479806","25918007604254469958258029993456842122","104994446321625607360309755818921126143","305191474246975814514692871660333724306","154445442251196475412757146298364530683","227912314176454724057469772962829100499","251369218191359433076590312471197259330","232487347917717147897500862682534331198","10339574188637316680430524487429143872","207768197158860921235973806913297775938","164383082120940907404641112000968607709","232557516497615365632609089373382302121","279323618245719570534912993160880427400","202879780752321978350960258554829299175","305044321457604937421459291798851259765","92606193502678453847245471711234807251","72843265283818449893370594651375200443","156589332149265453555126431687180872823","136745404714325131069068433962413683921","101029245618331163826594823026111690104","252558451237531693731446203155695997434","24473394478528000454472038284135064473","42761725021697143898019224609692917708","226693977470646206675848302032299973965","90442131257686108749117474337121798987","185275514621728202234635766955889494710","256550698009348655608228695053974657271","168274967567645364791911248927988443016","250660384276971028873202409664886803117","40347156880750530389031764073694530716","177696559888269327619511654923480720554","258930192411258833291594823164625986881","329505966588041481371488711060843801039","139943472294742398921276591779247270454","168592425070540874042905855949882546241","61578227396275733176638093254854357367","75813122189328617333927080171974291583","235817542668208982769356653380238838599","66417746558487617050631024119894192809","210552768496793899294421456702942748451","316996834580047785750702890694286921015","212430159429083820243309157633391846730","72360967113924943574510957390216307717","99737620400996383635432463402739827623","269913924708743169513982202571577008595","286208907069549802375733087869714206710","55287624610757281583526062030251782024","88266645663993400860350164592737447891","322131690705043086041787336620827274422","28047059807207941205467521990333255561","332873612958469487832430754425114548796","265414682376929430097426663329266570659","321272112168689236930615395375495339472","129274256678257293675720118184715976765","80178392581499665406322011524160323024","62951553429190226830643579803814270370","173208216918400708884037861738995072189","87079156882433979316123167196031305539","206306016865255370452730752537998506033","133551016911218472965760610188417523364","131975897850635728264177387310640768042","45862309754147688631798141126528658122","107597438453966108348215802432884643267","118509456994131637134459941600340425724","173458821424414474824247785929123968337","175287094098081811371018374114406663817","110651857497355339805356935142677484874","70772380586533020466973497200275263035","101395733483462198400359838802933345389","140951541816416420572470619602414953194","140250281726493015431970617664862547532","319973293508850402716062119813510765366","219203567917632999307861927224224084141","85491697752081236902538082052496432116","91102997286436817678750243446278973911","196275597185789214171438869727574948983","235291102320504582823644442424969462400","299649805363586378403039698967225429025","237004861150485151617057579451541901153","261619104848898290722097106015465777833","181823215701531210724769735372087061194","89335556806806098763068853832349346682","314512077817306413862923729729032604938","119460052135499741291393709563372770313","158888373103203376139019592929909013096","194643407671496287263325918393946527016","120282882101935496517330086629933792505","42367173893458503344840187936423554206","335343665999778433349182061809560065403","39305793639437378887194397999434501761","259163489026268287716417919820442054877","21335670049025419835650000679624768241","249896841789403473423573177469648317167","208522707338628788301839404932835464434","323881422038789738544605443192708321296","147229137252370840057910616408872557438","54259086156891479119666638378842805938","244484094314809774477346397667501102584","108820518643769538796036170745725241295","225557564602503457456933902088826082079","38033422020052497739913395646036957809","51050825397733422681276123002806643641","163381679406020714038890273217095983184","44849066221541487728077792551739097692","263260079282872919442309967534272447206","118173759627633864110024234213216766356","170916413850618119192095436563031487794","307368324365372566250344915740159246085","195102097404035604975787826593287533179","214591970131814603268892158548808108754","267178536257195519793995616103759823151","135372539677710061889473210528066544359","186294499592872814951351212674123644968","91759035101790330176583656292471516551","269226888281473753726088352671187090281","131420796044741360772915897485345608936","288213638710982064842699495826434138108","162460804885925280164062161894847912294","256714078351573401618158333415702030581","14212449010339456941003039032935016868","59433016979304922066902774582419420730","315695039565149697763735313610956015758","79328659598168281632584406979330784960","159690255197568102416964861917327801818","115667512532816908060596729172305984196","124322224408734240417929251726918137967","230442999336908350325688289697638495499","165226016383468195979863081461160323611","104332165290859217302589428462122783360"],"threshold":0.9},"id":"CVE-2026-73256-386f6bc0","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_builtin.c"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"function":"mg_tls_parse_cert_der","file":"src/tls_builtin.c"},"deprecated":false,"digest":{"function_hash":"203975432014465076341191972595335290773","length":4730},"id":"CVE-2026-73256-39760f0c","signature_type":"Function"},{"digest":{"line_hashes":["144245873888813543256860948554916737517","156974303944384768142132592772629231510","335002089565198348023314874690191623195","26703405745066101628510946356396352378","303164798085481983517497933712755808857","266071836976923005203425243708469560390","319859289827501350751564690823644451616","45881186688112204685606100939119584351","144046411448518943733305602929672998098","225579440426105750816714004337458412271","112093721158145502249763640542786295096","207252406453496841320595240011609886517"],"threshold":0.9},"id":"CVE-2026-73256-39887bd1","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_openssl.c"},"deprecated":false},{"digest":{"function_hash":"204837281810421356040448144032297700600","length":522},"id":"CVE-2026-73256-41de1b02","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_builtin.c","function":"mg_der_parse"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"test/unit_test.c","function":"test_http_server"},"deprecated":false,"digest":{"function_hash":"255182389209152823269116943376632970743","length":10950},"id":"CVE-2026-73256-466d9e56","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["108053881415493548678616178740121635819","105970303446503634318863339705264358834","46493805877957033431410180852137793558","304528413051193093178670737973205436174","125515618518036769226182321833625464565","42398812645571065081727478806607162831","220109016561833368524810200016727232379","108587633537507210242609878158511307392"],"threshold":0.9},"id":"CVE-2026-73256-467a35b5","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/drivers/rw612.c"}},{"target":{"file":"src/drivers/cyw.c","function":"cyw_spi_tx"},"deprecated":false,"digest":{"function_hash":"64814422700544834845641903742945723180","length":175},"id":"CVE-2026-73256-48a2bd43","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"id":"CVE-2026-73256-49192cbe","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_builtin.c","function":"mg_tls_server_send_hello"},"deprecated":false,"digest":{"function_hash":"266027483394200838020725210988023120113","length":1354}},{"deprecated":false,"digest":{"line_hashes":["186778020665132596169903390885993368535","227716762516919383642389641604494451127","75642557129534238316573424586541680093","94838749372654004096325430835195751659","218142066842326008024417698923950256587","301486415977692652109238790770149737661","233029097846065087048546162461876347541","268125993961868321736911587253042118065","54092087246084178709668952642437427928","5677682559455175262493175153832722944","281032589446840747351605652032924091807","41048267615843948020856442143425376129","220884027888050459794073188008898298494","126481238330447032479807566805008708367","100051507356064322850300327951092118727"],"threshold":0.9},"id":"CVE-2026-73256-498dfbee","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/fs_fat.c"}},{"digest":{"function_hash":"33099097302519973937135944869964649618","length":628},"id":"CVE-2026-73256-4aa141b5","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"opendir"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"255045508415858940969396310421318667750","length":2711},"id":"CVE-2026-73256-4ac35f11","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_ssi"}},{"deprecated":false,"digest":{"function_hash":"189015025929389535477227129610619276644","length":946},"id":"CVE-2026-73256-4c90e3b5","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"sendnsreq"}},{"deprecated":false,"digest":{"function_hash":"144707852256391504506290498507820758943","length":1743},"id":"CVE-2026-73256-4c92cb08","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/l2_ppp.c","function":"ppp_handle_ipcp"}},{"deprecated":false,"digest":{"function_hash":"315757571796826943100881807577196416376","length":1048},"id":"CVE-2026-73256-4da9cd4e","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"function":"rx_ndp_na","file":"src/net_builtin.c"}},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_aes128.c"},"deprecated":false,"digest":{"line_hashes":["232926924712802004303793714499228063071","316939765349418211561898210592612985897","179652550948467297850393763174478308894"],"threshold":0.9},"id":"CVE-2026-73256-4fe74de7","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"ppp_rx"},"deprecated":false,"digest":{"function_hash":"219807646646475264545880255840701802076","length":1841},"id":"CVE-2026-73256-50a33d1f"},{"deprecated":false,"digest":{"function_hash":"142162602858885939250911926702291407342","length":2963},"id":"CVE-2026-73256-50d74b85","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_builtin.c","function":"mg_tls_recv_cert_verify"}},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_tcpip_driver_tms570_tx"},"deprecated":false,"digest":{"function_hash":"22655348550130318506917877452664758148","length":800},"id":"CVE-2026-73256-51d74a16","signature_type":"Function"},{"target":{"file":"test/unit_test.c","function":"test_multipart"},"deprecated":false,"digest":{"function_hash":"291115628738767968439301577568409707801","length":1051},"id":"CVE-2026-73256-5617308d","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"digest":{"function_hash":"183403931862235246509971980857171726939","length":435},"id":"CVE-2026-73256-5868b821","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_der_find_oid"},"deprecated":false},{"digest":{"function_hash":"268816195737953069037066117349243959276","length":651},"id":"CVE-2026-73256-5990253b","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/http.c","function":"mg_http_get_header_var"},"deprecated":false},{"id":"CVE-2026-73256-5c72f468","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"rx_ndp_ns"},"deprecated":false,"digest":{"function_hash":"39907512787864484157073233665895357876","length":632}},{"target":{"file":"mongoose.c","function":"mg_l2_eth_init"},"deprecated":false,"digest":{"function_hash":"283343547696634127647568708727816008983","length":526},"id":"CVE-2026-73256-63f2bb8c","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"deprecated":false,"digest":{"function_hash":"152849641657646075686452913327616229632","length":3312},"id":"CVE-2026-73256-66f2d7e8","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/http.c","function":"http_cb"}},{"deprecated":false,"digest":{"function_hash":"204011386459985006163637130409586660482","length":4057},"id":"CVE-2026-73256-6910b7d4","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_builtin.c","function":"mg_rsa_parse_key"}},{"deprecated":false,"digest":{"function_hash":"251264346192913908584645015822363229932","length":2417},"id":"CVE-2026-73256-6af655a0","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/fmt.c","function":"mg_dtoa"}},{"target":{"file":"src/tls_builtin.c","function":"mg_der_to_tlv"},"deprecated":false,"digest":{"function_hash":"11357603138552287084322613246366122547","length":505},"id":"CVE-2026-73256-6bb718f1","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/net_builtin.c","function":"trim_len"},"deprecated":false,"digest":{"function_hash":"265007262428071382475737538858570700360","length":708},"id":"CVE-2026-73256-6e228b44","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"listdir"},"deprecated":false,"digest":{"function_hash":"316624409977202983390184587231308637144","length":3035},"id":"CVE-2026-73256-6e33b8f7","signature_type":"Function"},{"deprecated":false,"digest":{"length":2785,"function_hash":"222663043280264277440285146591822436632"},"id":"CVE-2026-73256-6e58db61","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"rx_dhcp_client"}},{"digest":{"function_hash":"197196291767139600441749744914094809170","length":1385},"id":"CVE-2026-73256-6f5b9d18","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/http.c","function":"printdirentry"},"deprecated":false},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_l2_pppoe_init"},"deprecated":false,"digest":{"function_hash":"146752807320950357188200675449620747160","length":139},"id":"CVE-2026-73256-70a087ab","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_http_get_header_var"},"deprecated":false,"digest":{"function_hash":"268816195737953069037066117349243959276","length":651},"id":"CVE-2026-73256-729458f0","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-73256-72bbb5ec","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/fs_posix.c","function":"p_open"},"deprecated":false,"digest":{"function_hash":"286490505432086704529913239567738418855","length":526}},{"digest":{"line_hashes":["304276758035176213820008124128387380417","246381098992938506014427961290510053735","274450533055416817840035141949678278389","75302083506702360242546784120397149879","56318326073886482746093620067816599056","201759285918805679111781362907772595727"],"threshold":0.9},"id":"CVE-2026-73256-73eda081","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_mbed.c"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["326697922935978718052798301453278600361","182625943539435487100416887666253125269","268482827345399059428716783907251575725","280453099871745013888269062103775047372"],"threshold":0.9},"id":"CVE-2026-73256-749634fe","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/drivers/w5100.c"}},{"target":{"file":"tutorials/mqtt/mqtt-server/main.c","function":"fn"},"deprecated":false,"digest":{"function_hash":"321737930763856018544212443513626513369","length":2425},"id":"CVE-2026-73256-77b22367","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"digest":{"function_hash":"60018149680491766373986046346055696805","length":3002},"id":"CVE-2026-73256-797acc3c","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/net_builtin.c","function":"rx_ip"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_ssl_key_log"},"deprecated":false,"digest":{"function_hash":"178757615423858552878285911075762362845","length":620},"id":"CVE-2026-73256-7a4d55e0"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_der_parse"},"deprecated":false,"digest":{"function_hash":"204837281810421356040448144032297700600","length":522},"id":"CVE-2026-73256-7ba0a605"},{"digest":{"function_hash":"287628499716142521955651966755790710557","length":3711},"id":"CVE-2026-73256-7d52e1e7","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_tls_recv_cert"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"160748329794274715824655333124482214942","length":9496},"id":"CVE-2026-73256-7e97943e","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"test/unit_test.c","function":"test_http_parse"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_tls_verify_cert_signature"},"deprecated":false,"digest":{"function_hash":"14386722866325618864365220643133344707","length":2179},"id":"CVE-2026-73256-7f32a786"},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"p_open"},"deprecated":false,"digest":{"function_hash":"286490505432086704529913239567738418855","length":526},"id":"CVE-2026-73256-836a5001","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_openssl.c","function":"ssl_keylog_cb"},"deprecated":false,"digest":{"function_hash":"26042152181086916149296364037127903400","length":279},"id":"CVE-2026-73256-83711f3d"},{"target":{"file":"test/unit_test.c","function":"test_get_header_var"},"deprecated":false,"digest":{"function_hash":"267677229965731130675602404411685819855","length":808},"id":"CVE-2026-73256-8472a230","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"deprecated":false,"digest":{"line_hashes":["63234238436408128346569295680319629374","93657657415803076279618327217106205549"],"threshold":0.9},"id":"CVE-2026-73256-8644e19a","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_rsa.h"}},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_rsa_parse_key"},"deprecated":false,"digest":{"length":4057,"function_hash":"204011386459985006163637130409586660482"},"id":"CVE-2026-73256-875dc4ab","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-73256-877cd709","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_getlocaddr"},"deprecated":false,"digest":{"function_hash":"305064657750647659304825378023284657388","length":523}},{"target":{"file":"src/tls_builtin.c","function":"mg_tls_verify_cert_cn"},"deprecated":false,"digest":{"function_hash":"223520999800417555437934450563538821997","length":356},"id":"CVE-2026-73256-8897e3f3","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_builtin.c","function":"mg_tls_server_recv_hello"},"deprecated":false,"digest":{"function_hash":"189361870129030812527636788623212835959","length":1930},"id":"CVE-2026-73256-89701285","signature_type":"Function","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.h"},"deprecated":false,"digest":{"line_hashes":["186388939181727772123624172363572657432","7588578880416528792867536791396030827","336024404004259824295186760987943136963","162853106003109879288863775933944586457","21255891873267076408725805477426003370","144928626139825828132896966338559634803","297569722208579716499868644029805491298","332752220513131143677019910708639785883","63234238436408128346569295680319629374","93657657415803076279618327217106205549","90176081595663856307024062216103079738","270466688298648336580686587313220374403","255493820131430178780815624398974533783","32870992540978555694895556285995505804","71215188809416414206558730536130492433","247886055415482892323145708777549743381","42534444737071065431979111044662763921","307867030048059952677566901650498523629","117697165015020473974008027673078976239","194577605538956948465613093456367739805","264077251853344549832812150358357612135","161106519323044023166967671368733748317","330364093545651486818297357194276315872","137206143642184674755342978091433859051","23329378839753313082214110279705997965","32269175367645784998188078571109551976","212396902195735538925793597877839960026","232604775179228794155406850893242118857","296800923812276391123047925305607001903","139709318635672484487719147725739403038","17884536607169968715497648949250537551","109856146259773939211303860787621976593","102438386045945335441542179747158823817","316050142080738983965610281059742256046","335913038654316668398873647426691174541","310052236057784896047484551922310467021","102454241192805793547737264730913550287","94614230889720956992569806089669747111","33515487361449333373059033931112739570","286415054147141141621172783067746341409","209335420178028219619889441596791819778","308860174242911248561982787243390965775","161106519323044023166967671368733748317","330364093545651486818297357194276315872","222584082258608923296573209625991463753","405745595212064580480573659327403022","291596617966579849266566021428943112572","231000949121281362308035236617362329997","232604775179228794155406850893242118857","296800923812276391123047925305607001903","139709318635672484487719147725739403038","290901104530435194421940808622851650705","146758916195305740260189668157809327219","247309962125617896177295266492970040212","125691360815792156791741557337436007614","309218000106675724978885834096695170417","289173267345967380006025982313881193453","241967988240033406839745589512843618001","151276422976034789868230132511483621812","327727332437277942167923215812067897631","242290762747709630156428973878867709480"],"threshold":0.9},"id":"CVE-2026-73256-8979909f"},{"target":{"file":"tutorials/mqtt/mqtt-server/main.c","function":"mg_mqtt_next_topic"},"deprecated":false,"digest":{"function_hash":"321877531088533983418360194676476078731","length":529},"id":"CVE-2026-73256-89970c49","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"deprecated":false,"digest":{"function_hash":"251264346192913908584645015822363229932","length":2417},"id":"CVE-2026-73256-8c715b69","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_dtoa"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/ssi.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["327528153837616108180732984241306889745","82932389729463723964742144023821258569","334669115418950000905848780034535459327","153730503228608883928365182125895818042","242850211570246717362825680837133738379","16803070731296709529133462690510653581","123188025574472424347376842225839589598","183158794146043360856632466404811135792","26662672119941337583445625381608462640","302962388654527217165700382275878417486","42000623512612506194174183234772188851","183158794146043360856632466404811135792","19118461932106003208324415301218376559","273534204866643341722586609675306628785","261598961927031496233267961056413687158","91105777953908969442851698158819201372"]},"id":"CVE-2026-73256-8d3e10f7"},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_mbed_rng"},"deprecated":false,"digest":{"function_hash":"228454465559437109636165937966375079274","length":140},"id":"CVE-2026-73256-905b0aae","signature_type":"Function"},{"target":{"file":"src/net_builtin.c","function":"rx_dhcp_client"},"deprecated":false,"digest":{"function_hash":"222663043280264277440285146591822436632","length":2785},"id":"CVE-2026-73256-919a1b02","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"digest":{"line_hashes":["277840084619429309169820782105630046090","137618295355999849936789956524487315674","209788375983641876417413140524590629425","156618466997212993020609071404751603783","208182738204056530674459876987392218114","90835024582323586770954149120046096649","120815785270048307012053685355904814597","97077352404277084334586724304618225669","268006363877550828310742211798586495872","22887757470580693923616992596776336485","73338679105600809599524101029824951802","114577549168716584835864622254006742420","311391330171894091038264897153757426129","83407861238460236865874734759406659832","240035361279206561444735964044856754382","61773025525868218168212883378633838323","148213917324399502996234691476680256514","229732664523481451329421092543428939174","7176549575687091606362298138257133432","184562138998852139290102418610862582150"],"threshold":0.9},"id":"CVE-2026-73256-92780b55","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/fs_posix.c"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"39907512787864484157073233665895357876","length":632},"id":"CVE-2026-73256-940d6bc2","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/net_builtin.c","function":"rx_ndp_ns"}},{"deprecated":false,"digest":{"function_hash":"141533145239444814057831351035814298519","length":2246},"id":"CVE-2026-73256-94bd439e","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"test/unit_test.c","function":"main"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["164152625189726106530208833459003020025","135344969956571930553413290789615620400","107729403280546907405352762372015011301","250140706304601261024608711565251705050","211337324184314518447402242057455373358","55936661597008455902343324812484385257","140860969175154889556869353390704131812","174360756373574727504408614543585995268","80344897492932376770366796932190488090","164661446281829550464988689485354769566","104994448961684223116031165914865599599","157080406295080167176854399720734585070","207610488265503715233462925176853625803","56332457651194841685087308838558744654","337379681717253109351939629884420088918","164655058455177996932131446633685513942","126599125380177487566886487398276912258","145499557497877904078325984931340392095","265113080050938157938360508318388696066","275934322135983309655067815044667244409","46102823199172315987384267741637247878","338293920761715452192256971331028318479","271106954823914074341646999779106200205","89928454165133266222837315886223204074","208004112586870883516496852852161916271","303973979534405243003744623931607253220","176203913466200811276976879236069216916","288656179798127448257043877735441202219","56910248768135473312058461856263642218","196419544304439397137337166813976827981","10517598998454137368283183016139180017","192367631224742006502308206570206347615","75809067046916479555918617340535988050","196760180043561058996468499306564942354","54272490461782022043354543427559301457","290257302448613156865238469512744021720","68350381497032607604747545873039685452","213342719146166512649708120356124139612","164655058455177996932131446633685513942","24763303025435969971199646254746901608","36775082806449854742865769464880989804","278638053223021532522395625373446827072","170090515793554754494624314976444320179","124870339559104477302378965181716223623","159818437361778952013995189114716991625","164655058455177996932131446633685513942","24763303025435969971199646254746901608","36775082806449854742865769464880989804","115113231348161745269756978498754833557","165743058665161084120229256116842756499","83059283518474165133274382626218366937","126557378887292825272382071710570880418","200722786590879000163091011753797672041","293489245664493734830972135261788985142"]},"id":"CVE-2026-73256-9773eaf3","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/mqtt.c"}},{"target":{"file":"src/net_builtin.h"},"deprecated":false,"digest":{"line_hashes":["255493820131430178780815624398974533783","32870992540978555694895556285995505804","71215188809416414206558730536130492433","247886055415482892323145708777549743381"],"threshold":0.9},"id":"CVE-2026-73256-98ad2cba","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"ENET_IRQHandler"},"deprecated":false,"digest":{"function_hash":"228445232316529376904697781694588407450","length":627},"id":"CVE-2026-73256-9b361a28","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"33099097302519973937135944869964649618","length":628},"id":"CVE-2026-73256-9c10384f","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/fs_posix.c","function":"opendir"}},{"target":{"file":"src/mqtt.c","function":"mg_mqtt_next_prop"},"deprecated":false,"digest":{"function_hash":"297478003486870093209047169448117249664","length":2300},"id":"CVE-2026-73256-a126324a","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/l2_ppp.c","function":"find_opt"},"deprecated":false,"digest":{"length":382,"function_hash":"338435928879605611046398857867264628027"},"id":"CVE-2026-73256-a2c59b6f","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"219807646646475264545880255840701802076","length":1841},"id":"CVE-2026-73256-a370b010","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"function":"ppp_rx","file":"src/l2_ppp.c"}},{"digest":{"line_hashes":["323762034003313938239191035668036545734","278088108927226750224863652108869185913","258780519879097280652998131942610438013","210666658011398534004262757687681192459","249201271154140185139148218901907817223","327544047385751518830033137180857612239","207884397697624765387657846274719681390","235335861063375011275998644062205506303","175947087846104647541960985881667655427","149426187040948549804152790751678066638","292460998959887412033868254762586371858","317682071141090553951937090744153446979","215475986172447245248851167869066877373","325755990828620746284430538311609094083","268831670790193834588593758156729844395","230430873763238066469482013697192065017","224627688305521428575807905152272914446","310408317756248008075785314933596041003","87690224252503130711311032426523966420","115077142643673349757901192911319661264","268026456378666524531312189182996048302","102258537728051947322975896684432937595","269069890299507051023317814716822813978","295109766319707597293891709606188630851","119149522512066640484223909619193016085","177427404384975480371774329621742561779","124012712097989189377296174327090009662","201913907345666952727676808657515996295","191030403299871298014566886997312975349","331013872314983313838105789119412291420","247621528251539611755958952668483970955","327244287523192818206608892259741779576","227716762516919383642389641604494451127","75642557129534238316573424586541680093","94838749372654004096325430835195751659","218142066842326008024417698923950256587","301486415977692652109238790770149737661","233029097846065087048546162461876347541","268125993961868321736911587253042118065","54092087246084178709668952642437427928","5677682559455175262493175153832722944","281032589446840747351605652032924091807","41048267615843948020856442143425376129","220884027888050459794073188008898298494","126481238330447032479807566805008708367","100051507356064322850300327951092118727","277840084619429309169820782105630046090","137618295355999849936789956524487315674","209788375983641876417413140524590629425","156618466997212993020609071404751603783","208182738204056530674459876987392218114","90835024582323586770954149120046096649","120815785270048307012053685355904814597","97077352404277084334586724304618225669","268006363877550828310742211798586495872","22887757470580693923616992596776336485","73338679105600809599524101029824951802","114577549168716584835864622254006742420","311391330171894091038264897153757426129","83407861238460236865874734759406659832","240035361279206561444735964044856754382","61773025525868218168212883378633838323","148213917324399502996234691476680256514","229732664523481451329421092543428939174","7176549575687091606362298138257133432","184562138998852139290102418610862582150","99342585454143777211350405329767100061","248294475111140147738139081459710553955","83676957240267948432784433686949417896","309126626636784460366346434015915836102","53699379035316945307103614845636360962","322057797807023915417422099710759813235","12608644803414312341906168578498211188","218183266410598798868456208805174360949","198019577245798686762376498405309537769","4675447083554238506820061998440755501","46261138378107135129619199813354419958","142844824120641163646805929380945553510","59695784179284873399780135285505236857","198435265031343286959514138136958807048","130849680294096236336762133066034833544","330954618847211712111480644574668114517","291214677664358870679059348658916443555","41270427135968948595167591816308366365","2340485204048480290306362518943657906","67662686367943076569912702482612093162","160370732258197891332190861591633380867","98397136104908480003007361365872276568","32983516885811725247436427593559123394","18324813607879728527198333859018603185","136420616721741630092496883130158009944","180770559211514367430176512904444568873","7163089261868026582484244702442972568","131861569474381731981005820227864782136","50786082939306426641404448511908051481","122723938748502137683345004685485561282","157757955406629505963616556659381487928","141105778517667782293543287728468063285","183183204323554068904530174504477652067","242457721775811471694110189969814814586","186113893409086500723983940667536827098","240861874435480958264566001679519302302","251673027696174936086638688488483585291","137921944477973262619164937177676893702","104589755636448847603654897489936002544","335950390102436926516538388288075908611","221922356941496295474567706133186603625","185648501262827272406864547306822980135","132659740659252892467136899753093707496","321755651175231108483435821749255336998","6805998124725932905837966780304118366","44846076011534437306771832574705087165","210700036504541413205400206437034613116","301459480098871612290876373699931211139","144141124954863966953849682954257443095","90784301873837109792002765955779591973","51946077068503489399100396167028562692","128633798611727188053141037472620578102","115539991898476260809720732711039540316","61811326622362936380586426516825184444","168983563939743086617911439064109307044","162131536624210630258532783560063500221","16759876271196354007921171445775180199","105785922687588013154608486469754047603","208016186166475080528590036005348369234","164940676610025362342467540887581744055","28192222082713045277041552874166311137","272254147317233844332377775853185317066","158085801864188863102420045339659264557","178158639400985782115775742907731456460","131050402288987949107801998183233874922","262447246316188583341118875694751900722","244017845212642679696498021548749826337","108683598193899600660555118763465070635","71891034684932793068235081629274130068","131375036761111438886864767865604879158","164152625189726106530208833459003020025","135344969956571930553413290789615620400","107729403280546907405352762372015011301","250140706304601261024608711565251705050","211337324184314518447402242057455373358","55936661597008455902343324812484385257","140860969175154889556869353390704131812","174360756373574727504408614543585995268","80344897492932376770366796932190488090","164661446281829550464988689485354769566","104994448961684223116031165914865599599","157080406295080167176854399720734585070","207610488265503715233462925176853625803","56332457651194841685087308838558744654","337379681717253109351939629884420088918","164655058455177996932131446633685513942","126599125380177487566886487398276912258","145499557497877904078325984931340392095","265113080050938157938360508318388696066","275934322135983309655067815044667244409","46102823199172315987384267741637247878","338293920761715452192256971331028318479","271106954823914074341646999779106200205","89928454165133266222837315886223204074","208004112586870883516496852852161916271","303973979534405243003744623931607253220","176203913466200811276976879236069216916","288656179798127448257043877735441202219","56910248768135473312058461856263642218","196419544304439397137337166813976827981","10517598998454137368283183016139180017","192367631224742006502308206570206347615","75809067046916479555918617340535988050","196760180043561058996468499306564942354","54272490461782022043354543427559301457","290257302448613156865238469512744021720","68350381497032607604747545873039685452","213342719146166512649708120356124139612","164655058455177996932131446633685513942","24763303025435969971199646254746901608","36775082806449854742865769464880989804","278638053223021532522395625373446827072","170090515793554754494624314976444320179","124870339559104477302378965181716223623","159818437361778952013995189114716991625","164655058455177996932131446633685513942","24763303025435969971199646254746901608","36775082806449854742865769464880989804","115113231348161745269756978498754833557","165743058665161084120229256116842756499","83059283518474165133274382626218366937","126557378887292825272382071710570880418","200722786590879000163091011753797672041","293489245664493734830972135261788985142","184432424778194453059018903206026644561","282235524157122978153585543657787210615","216646750651816536911114701935262975483","287119835445471814445389455881001595409","130314766711685514011096218664625549193","237822115762625171603383701162367446692","202488195969873964876217071277452238738","190811227480654258291638931809259463792","178264818327908383334961348351242213736","76215744335747107617507907362556324338","90587880421354331521761431954423437804","47747648356680362348119950469752630728","156172259918799478006314260980639529739","269124710500515455743872095066323669222","326880572573452944591253231263775389485","316817826896686347215247062605828240411","36070518725078829966489300122360420139","269745929965416415228174564452729357999","147108511823987637571993318951458013118","4382986224362415186625413319097961028","21656321275391505530126683999980589857","257875401374004179006144009685134281450","100029556575483966476752703518687355788","177405781216379767274692124197153012958","237594354972979077030398112944727452502","313290495236046815397425881845542853092","336154257875272690244561082134040237865","164144033909790737967407993535556287881","42798591319872964568247927391007975096","153669078412203485835602902441573386370","66308293821060073237644812334641891240","91202448251551208665185870025599716697","114680997402409336602858419450351008484","335567741441417446276133532312190483298","139776651165931751068686448251485541441","94725456970392450360914527354740623153","40530174035939598687495592746178155093","288472377164095506888841647393716746488","192894977720568520892636506319275985781","35756972217714085615650214992402782846","277255541696409224061681444384179436970","121338202701410305634528430584838698557","316447823846077459543477364129603317000","296930948570872899955114042366230318335","139978312148555582503745120256139963024","130815970635484525073234367400302022789","195015217786586399187453492352865354396","297176489005931213337786934732657967969","81577053153122909042546715822655617140","67311793958554583898540578098970404043","20597623129458789897144680401795530013","151170898479967806222655302763817030565","327724105186068470522279125673135488445","85765985686705052392949527995590830321","303707808061177147175249958113713917956","243208985917049500563279444917677637381","132973287205512784248021348657098262871","295451581770204946106948885209905142356","177637950172119102168745254549403830863","101994261752483313003742970878844058204","183178143189683555223802975689529748811","244473083203781192852093704993699264061","152900695977294297335942826982566741714","322606825312978807302887718607191002521","187906069316725684559688214368528412436","268712315580571127581364724339119392443","73719901716753933121868963999237205483","296684912510358519066391606184948230058","110939240209911654080060127547089643561","289777904706763247788340619108633816442","291966197168409223704949406631125717535","43291826489038750844632873822638472904","54928167158501418632602351280044981634","187396542153033047996414536458357568503","280024611471221257923507653847778630308","302047516652666317695060690310475637630","44009480031989343998654856928188327817","186245772595768562650062587735262323314","34862346473193482249485683535591847307","58568978950911508742684046650643978346","327348628792272726296711482643046949107","93644618067799922999172572463777489938","128176080370779006295400197808244236966","104979456651458905719257196396953171670","277775541929149641258729622782142862201","171400025034907121977621179106503758316","330724192831282921696905374670001471868","252058672270680023476944722100595020338","330672664133434005978041588125549790591","96328744216819732119664968667975581590","218044234481944049274769377439198500501","334065503414832852216208585299473207394","62928705954191394528309093181399570505","13511440994285131347477959522422034084","109530073161530386969574576644669153764","251608098111928451190607790767850200013","279501471781386834900870746797592426252","126483486200578404300565863256245932426","223138251256192077380743607572112675520","7448060729459024805455864324543325704","23028912025187168159391651227729794985","231584736783486107252058785271623278631","161561776637919187122977552308790554114","45986199956497282724034036123369760439","156868599036857846508391632272359078114","122087875370274594362607117400103955732","114967994548758739149797209690206586407","61580236262991167744819248863923168848","124771529111820166000729131115917833547","281048752414390230849884220545459198721","277860102807421018883225372556154564370","166511851012791237943839164401345471195","153439228368868783570921420995430400317","227383345704904791547988876869330919746","41275846981726361958486682564811520890","72441244273748335540524890260682688935","88202030034714274973450552998734042877","327528153837616108180732984241306889745","82932389729463723964742144023821258569","334669115418950000905848780034535459327","153730503228608883928365182125895818042","242850211570246717362825680837133738379","16803070731296709529133462690510653581","123188025574472424347376842225839589598","183158794146043360856632466404811135792","26662672119941337583445625381608462640","302962388654527217165700382275878417486","42000623512612506194174183234772188851","183158794146043360856632466404811135792","19118461932106003208324415301218376559","273534204866643341722586609675306628785","261598961927031496233267961056413687158","91105777953908969442851698158819201372","232926924712802004303793714499228063071","316939765349418211561898210592612985897","179652550948467297850393763174478308894","84300448505094831772445551356283404359","184362486245977619651993058153425373221","135738648813901628968059912069456480808","15460033969417638971828292509880011651","200231667551056318621568619775785224323","33198753835631155674895965219918538826","147780645116516167870796938058621591162","220879119185117989693561401495440539596","316787075831798734384953909413843080907","2783115143475840227859844843821035493","163713228361641250898968470540051066349","112287400186701863962073463703547609574","246224180538254291469104668407583774803","69364965006474916416363729380470562763","189165530753507570940644856966377329192","92485289566479090987540088768870402169","38527071832268731725426950801845647146","89165040637268650732813974495735033753","189852552634466819005250730163380464968","157041747907666006208044891451190885906","15816353358796487354358396085376359099","28240404497880903972189619398287436840","88021926929185532458955840426579985467","164756482020469435388436325313877315462","2221777887795751017617688661864893591","305407463024304548130196606906410878762","60009996524188474217093682539147842829","227118336089805870812864826341105371868","21784341378700188027974319065888775563","203335200195116276984833050988434047487","206492324704945625654862249349976438507","144815525664916353913140625001006660039","79034505402800722861868156437850219145","321723477737740125454197823596542652706","313049198470387297537794644905491985654","44505765909491870592298937651470080687","173249299508180350782252823162533369663","139180089924521928383560901509702502751","70584283708665997819962806195533184925","214705088167228414953236740661648073536","189226502013782129419550274744100556885","176285187880089093561480489738000288018","305113864016631800646296723664919733415","339176960987294900202080000164739298196","249105431065302940479115253991436174933","95391750759930538679428868582085558538","290759218603385751554429593277677055881","297809011341383347336703406327010480625","61542593005966947055733028662414149458","10714498546213741401743468168633824269","258770002393716746640150119328410327173","31435421984330512662993246907942280128","272823635109084798438112164603587191888","255939596092783587984493327782854963919","185984173708500757653837962644550893333","212714826820092570153070731402317387706","312380295388490930042275647167876787590","127677395595787442576521572158330094602","155270041178741552002345129105328586692","268992290226833759395226851762309115823","111472750078548222216015413945263622375","267868390585593816517915983992887850017","136803458577079335620766807177727942285","184191480112958967387205082461126484008","320385786278485115696251022103476911193","45023453441225608848665406981917597392","44410860698388288439204454003800754978","3665073216006753514618862081777752249","10653606925425677975126701360033739048","27987974001485429266384084916625572562","326790896270386239037718290041699567012","339248409394338858364104821540364491004","210227221900903306717702479895397220242","181511796645686442639179598100905657826","336549907333876443539050669328785927507","287667717728167268361733128802414307356","161711644820091367793862800852356511072","176155408544253685655214622469624104212","333524572826694396681287479974129676957","134703114333521490549881677821607104315","36470572211285718732348029145255010120","180358384075521211883730399165940572684","135116063973474434553655234550213805537","263507037420949922950770560590017284010","297295444819886776360825326696600298970","237091077963936437947498310383627899804","83794079943830085462744832257669246335","132062244101569587596745813497247937483","169672006949913823979663260497495943820","5638527425915817927799472676386071671","16529865300211693623870178952980903025","280930834117853212902094316619686846844","2425361400536483050697752040274890085","197666525578706352099309819999654182909","145995069942282369056304534640208644827","1861194980013761239651449453405677138","164623427066540388397036661264812601005","68446135275369846144487391830739339539","148586744301685106588095027273899497414","148925615984659153759026475201527803607","275863428623025763261412570172699824520","36790375108998893732688547977499404378","94163129876526644181961621107837825680","173458148812154465894027571614359292397","258366589447180125150910512487336853510","105328809235888547998450664627098827353","325626069971103235195642729215934349876","190156542111070956014582074505834952066","90381076227464047808699584178186310469","66999194520399122903551864098802542073","229502949640248129603772470893921984433","149353026389045427958795460773600920857","105766952094404296810022732704911101474","236786974811405036836787363631893401902","229474298323209594761370949532420781648","278593657661054376277533400876072660851","108944754070022152407668540485191220649","173566431643807476763727849464544689133","279606985497198810375515453324598036147","197324619768808038779438852083397046123","138889878243091156284632651012974200476","87289462312804180252600322307577151836","108424785653033183106946992607965838466","113012497480877804534774384955236685022","71472467297603241073929397709260350263","2975354743608892629608989244975485664","278199329522120092411417415282829743247","90506609868245861838015579044343469090","296917873473010081886039270526276322527","336611567347049620732329420555644016311","121826454884805953535597634349078809183","99846133856492044547093843593490919452","215285410891476796156916613398866516606","327812755415604668472748789109743528175","317938451070749609689298893835456130460","293435598131634151551609676646860660674","56673162217852094411700792378178116698","51337264676664327826336571402041424948","292529381370465992307320862172413837633","164964469027713502571297813205030189035","201067898980678872724437180292939236379","282712885768977940211066990092485447517","41793161490796715102359109991495279459","264467030943599513130432271317758826371","107438321627802814811431583083867570154","169771800780111346940420437804080209639","210138463810262537321795091002868603566","336528393942168812515596928259927525885","185416056443798254176007086120694330185","287849806752779988392061023546911269209","203504624751826365860019485907826851413","164661308221380417377525832944874642277","36240222373818586103152093764597059602","89434136947122063517622444501038772398","90149692098701916256665802452602801418","55764996051404441321771434999679479806","25918007604254469958258029993456842122","104994446321625607360309755818921126143","305191474246975814514692871660333724306","154445442251196475412757146298364530683","227912314176454724057469772962829100499","251369218191359433076590312471197259330","232487347917717147897500862682534331198","10339574188637316680430524487429143872","207768197158860921235973806913297775938","164383082120940907404641112000968607709","232557516497615365632609089373382302121","279323618245719570534912993160880427400","202879780752321978350960258554829299175","305044321457604937421459291798851259765","92606193502678453847245471711234807251","72843265283818449893370594651375200443","156589332149265453555126431687180872823","136745404714325131069068433962413683921","101029245618331163826594823026111690104","252558451237531693731446203155695997434","24473394478528000454472038284135064473","42761725021697143898019224609692917708","226693977470646206675848302032299973965","90442131257686108749117474337121798987","185275514621728202234635766955889494710","256550698009348655608228695053974657271","168274967567645364791911248927988443016","250660384276971028873202409664886803117","40347156880750530389031764073694530716","177696559888269327619511654923480720554","258930192411258833291594823164625986881","329505966588041481371488711060843801039","139943472294742398921276591779247270454","168592425070540874042905855949882546241","61578227396275733176638093254854357367","75813122189328617333927080171974291583","235817542668208982769356653380238838599","66417746558487617050631024119894192809","210552768496793899294421456702942748451","316996834580047785750702890694286921015","212430159429083820243309157633391846730","72360967113924943574510957390216307717","99737620400996383635432463402739827623","269913924708743169513982202571577008595","286208907069549802375733087869714206710","55287624610757281583526062030251782024","88266645663993400860350164592737447891","322131690705043086041787336620827274422","28047059807207941205467521990333255561","332873612958469487832430754425114548796","265414682376929430097426663329266570659","321272112168689236930615395375495339472","129274256678257293675720118184715976765","80178392581499665406322011524160323024","62951553429190226830643579803814270370","173208216918400708884037861738995072189","87079156882433979316123167196031305539","206306016865255370452730752537998506033","133551016911218472965760610188417523364","131975897850635728264177387310640768042","45862309754147688631798141126528658122","107597438453966108348215802432884643267","118509456994131637134459941600340425724","173458821424414474824247785929123968337","175287094098081811371018374114406663817","110651857497355339805356935142677484874","70772380586533020466973497200275263035","101395733483462198400359838802933345389","140951541816416420572470619602414953194","140250281726493015431970617664862547532","319973293508850402716062119813510765366","219203567917632999307861927224224084141","85491697752081236902538082052496432116","91102997286436817678750243446278973911","196275597185789214171438869727574948983","235291102320504582823644442424969462400","299649805363586378403039698967225429025","237004861150485151617057579451541901153","261619104848898290722097106015465777833","181823215701531210724769735372087061194","89335556806806098763068853832349346682","314512077817306413862923729729032604938","119460052135499741291393709563372770313","158888373103203376139019592929909013096","194643407671496287263325918393946527016","120282882101935496517330086629933792505","42367173893458503344840187936423554206","335343665999778433349182061809560065403","39305793639437378887194397999434501761","259163489026268287716417919820442054877","21335670049025419835650000679624768241","249896841789403473423573177469648317167","208522707338628788301839404932835464434","323881422038789738544605443192708321296","147229137252370840057910616408872557438","54259086156891479119666638378842805938","244484094314809774477346397667501102584","108820518643769538796036170745725241295","225557564602503457456933902088826082079","38033422020052497739913395646036957809","51050825397733422681276123002806643641","163381679406020714038890273217095983184","44849066221541487728077792551739097692","263260079282872919442309967534272447206","118173759627633864110024234213216766356","170916413850618119192095436563031487794","307368324365372566250344915740159246085","195102097404035604975787826593287533179","214591970131814603268892158548808108754","267178536257195519793995616103759823151","135372539677710061889473210528066544359","186294499592872814951351212674123644968","91759035101790330176583656292471516551","269226888281473753726088352671187090281","131420796044741360772915897485345608936","288213638710982064842699495826434138108","162460804885925280164062161894847912294","256714078351573401618158333415702030581","14212449010339456941003039032935016868","59433016979304922066902774582419420730","315695039565149697763735313610956015758","79328659598168281632584406979330784960","159690255197568102416964861917327801818","115667512532816908060596729172305984196","124322224408734240417929251726918137967","230442999336908350325688289697638495499","165226016383468195979863081461160323611","104332165290859217302589428462122783360","304276758035176213820008124128387380417","246381098992938506014427961290510053735","274450533055416817840035141949678278389","75302083506702360242546784120397149879","56318326073886482746093620067816599056","201759285918805679111781362907772595727","144245873888813543256860948554916737517","156974303944384768142132592772629231510","335002089565198348023314874690191623195","26703405745066101628510946356396352378","303164798085481983517497933712755808857","266071836976923005203425243708469560390","319859289827501350751564690823644451616","45881186688112204685606100939119584351","144046411448518943733305602929672998098","225579440426105750816714004337458412271","112093721158145502249763640542786295096","207252406453496841320595240011609886517","224281570579283631990145631064852568076","288524197952898349566820152003353655337","261504735918859126970289768887839428466","140388943525191225273174121718188200172","137085653452806426806943619726568248448","181407166202211333137967937368179830740","33386847719558698537727800308650150078","73016749896233373528860427606944990587","95113038063131343464802745742757593491","260253014940381019242356514965318486913","108053881415493548678616178740121635819","105970303446503634318863339705264358834","46493805877957033431410180852137793558","304528413051193093178670737973205436174","125515618518036769226182321833625464565","42398812645571065081727478806607162831","220109016561833368524810200016727232379","108587633537507210242609878158511307392","196158985745106643789873259015293708850","43218586666397312768162075240560191716","60067933661434082163524031991825177158","174479788697771909725333430256989418634","326697922935978718052798301453278600361","182625943539435487100416887666253125269","268482827345399059428716783907251575725","280453099871745013888269062103775047372"],"threshold":0.9},"id":"CVE-2026-73256-a4beff61","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"cyw_spi_tx"},"deprecated":false,"digest":{"function_hash":"64814422700544834845641903742945723180","length":175},"id":"CVE-2026-73256-a57528fb"},{"deprecated":false,"digest":{"function_hash":"298081358792469959169311133782580481745","length":3965},"id":"CVE-2026-73256-ab0cdcd2","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"function":"test_rsa","file":"test/unit_test.c"}},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/dns.c","function":"sendnsreq"},"deprecated":false,"digest":{"function_hash":"189015025929389535477227129610619276644","length":946},"id":"CVE-2026-73256-ac3aae73","signature_type":"Function"},{"target":{"file":"mongoose.c","function":"ff_open"},"deprecated":false,"digest":{"length":386,"function_hash":"112474901257864317333447804941623234957"},"id":"CVE-2026-73256-afe142b6","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"deprecated":false,"digest":{"function_hash":"266027483394200838020725210988023120113","length":1354},"id":"CVE-2026-73256-b16063de","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"function":"mg_tls_server_send_hello","file":"mongoose.c"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"test/unit_test.c"},"deprecated":false,"digest":{"line_hashes":["203088667939215954161485995864642778259","64049810033834993044941254093306134335","330200492270902072909323982342844718857","271849532341823843378843998924765722591","44978649480566144339347950012277144608","248995105589150771970983931649881858303","188576461899602502334837753801222022206","39045151694598174399317071275959247811","213540125985640245825752995880221193389","249994579588359020746185790333468516762","152131468233456423860331928365938150716","202871142172933680088857847753154532687","28607883059759043906361607400801910850","183262114272824810737254633019667469133","232357153479824712763863675761035648656","23570866880859938727692245538877432142","141658309376716498871534426856366062693","214368588950638794714993150529070328110","334474167595830990764512825927411607023","267183589708971743474326254089894577810","47990732819857953684904514897162177227","289500420239221969193707791890363563881","254649644694318990511323281694191215591","140789423104957451168720512197555088164","194183021527650550497609986809711183516","108278366963778353544764643441075007924","32363446191376672015772807837625839461","220095790646395232185704389076316257509","49729989112001400997937050579551397080","323561909299427970073744374845822132983","319986074426650909878590047202362720212","226134247192297849165981698507304974729","65344937120058693586645601335574154359","300309010343137286373577590035922491532","10671941947548291029719762430718857505","228132362870941421540775323304931130911","227397320468778872167696920704297708420","20893310575903025925604153343127747057","92232054829537536825852677255615254790","124797036859108420395550277818963378064","18482106245306633530315885454359056322","298037660293708123760264799605298509388","339531731943190949909694923335573640369","148207177040429208487880225084602780268","128723375580045766936760300264015795477","302403709417369580172048814745371539357","72361143080829961386264533863794422463","55034318809264324127411384958221690494","222035740728169779158215774343825954478","85794897248532958583956703876845489900","155332834535220226861945369587127243595","96950484733985231123710795543507112654","254626604511075260899676039562385774068","283262921074884813096120194249102669949","32159651908878737258810740783408564412","201214201148614045419246832262677493891","264530118823671283470045845825670270968","200462089459768842622063449964453865834","324492343335627798160790331139785978811","270574959421470579809609181991958128057","114538216164310552973198792770099387051","62990654856658467923709572507037542932","21862832935800064224368607339824780877","152384734339707686844290371281666074837","23401527315533836288518206204119426275","229164026358290954141927164278730499298","308229169330899275286483524430649395582","291729167599614698996669059133567949620","119591122189107194888393257635800502670","95684898664415153475733749923237597806","155557626955991767093730782121734024669","29984832952141986999414368440327199482","74316144192997571060105056988943278413","167643571153893897524719847063484705198","156101690735719509053210679987489043932","201637995999118352631011857880354941969","66858787428956732897621581953586537595","268595024158755065092157075959521568781","240036730762521016192465735661582553034","51467160687085733831449941722452774430","314144745519951505262785302858913097905","38490975246722655305076617029102420595","176577712860492116649166281126850783461","219344889720258188319154431698006619296","182465785853450730839682083084179968553","184864342455011597841984753829511627808","143805785575490923972882232317320111630","285908570407501120509587428099095863117","82100199059793019681626811760157549318","199507012295383578372302791129493951717","49398161750089567567633705579851432778","93045314724486310706355053479975762141","212875954119775363737301678198382327373","304841423613453926430024343387236518755","83377390431999754533953870196706354296","145562214076115602425891902897467908857","145559065371394239267260144030406686077","5078173137927019965872769207859144299","83583796764241805218758164900119408907","309604667699080744033275955911607700801","85255608687633126891817577848276576408","315909914870678811231264311529892503919","312010127630131119237905675277149784783","166655387878325540061000502562098443709","300450182487288998870538120444829656527","329035242791954165894535223297554267234","301305732798565656785827476274194927995"],"threshold":0.9},"id":"CVE-2026-73256-b2a96d01"},{"digest":{"function_hash":"245598739821504207986080235075487799128","length":1218},"id":"CVE-2026-73256-b3dc4f5b","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_builtin.c","function":"mg_tls_verify_cert_san"},"deprecated":false},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"function":"ppp_handle_ipcp","file":"mongoose.c"},"deprecated":false,"digest":{"function_hash":"144707852256391504506290498507820758943","length":1743},"id":"CVE-2026-73256-b411d847","signature_type":"Function","signature_version":"v1"},{"target":{"file":"mongoose.c","function":"rx_ip6"},"deprecated":false,"digest":{"function_hash":"258564654321190262044139813162107372522","length":3235},"id":"CVE-2026-73256-b57f60b8","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"deprecated":false,"digest":{"function_hash":"4009710381564110241834241115342202308","length":666},"id":"CVE-2026-73256-b6dd896f","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"function":"gcm_finish","file":"src/tls_aes128.c"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_tcpip_init"},"deprecated":false,"digest":{"function_hash":"89774771786308012552390545955339982694","length":1135},"id":"CVE-2026-73256-b7cb36d2"},{"digest":{"function_hash":"254410957794899136390496323884346536232","length":992},"id":"CVE-2026-73256-b8b73e67","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"function":"rx_icmp","file":"src/net_builtin.c"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"119484312311729218313841294515703490182","length":876},"id":"CVE-2026-73256-b97558f1","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"function":"mg_der_debug_cert_name","file":"src/tls_builtin.c"}},{"digest":{"line_hashes":["166511851012791237943839164401345471195","153439228368868783570921420995430400317","227383345704904791547988876869330919746","41275846981726361958486682564811520890","72441244273748335540524890260682688935","88202030034714274973450552998734042877"],"threshold":0.9},"id":"CVE-2026-73256-bacba088","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/sock.c"},"deprecated":false},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/drivers/rw612.c","function":"ENET_IRQHandler"},"deprecated":false,"digest":{"function_hash":"228445232316529376904697781694588407450","length":627},"id":"CVE-2026-73256-bae69f7d","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_builtin.c","function":"mg_tls_client_recv_hello"},"deprecated":false,"digest":{"function_hash":"268390190517286533546049073814255390401","length":1614},"id":"CVE-2026-73256-bb0d985f","signature_type":"Function","signature_version":"v1"},{"target":{"file":"mongoose.c","function":"gcm_finish"},"deprecated":false,"digest":{"function_hash":"4009710381564110241834241115342202308","length":666},"id":"CVE-2026-73256-bcbb554e","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"id":"CVE-2026-73256-bccf59b1","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/l2_eth.c","function":"mg_l2_eth_init"},"deprecated":false,"digest":{"function_hash":"283343547696634127647568708727816008983","length":526}},{"digest":{"function_hash":"265007262428071382475737538858570700360","length":708},"id":"CVE-2026-73256-c1a14699","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"trim_len"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/fs.h"},"deprecated":false,"digest":{"line_hashes":["174675524000780235014015217530424708641","328795669061020985617358459115452005958","96205749721237622116566219941244823418","332752220513131143677019910708639785883"],"threshold":0.9},"id":"CVE-2026-73256-c26a3836","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"202979984029528356947514587850485642852","length":1158},"id":"CVE-2026-73256-c33d072b","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/net_builtin.c","function":"rx_icmp6"}},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"function":"mg_file_write","file":"src/fs.c"},"deprecated":false,"digest":{"function_hash":"210789633457643583043259984651009903760","length":486},"id":"CVE-2026-73256-c857b255","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":12619,"function_hash":"125763332447946179978782129910143621178"},"id":"CVE-2026-73256-cb837932","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"function":"test_str","file":"test/unit_test.c"}},{"id":"CVE-2026-73256-ccf2f4bf","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/l2_ppp.c"},"deprecated":false,"digest":{"line_hashes":["144141124954863966953849682954257443095","90784301873837109792002765955779591973","51946077068503489399100396167028562692","128633798611727188053141037472620578102","115539991898476260809720732711039540316","61811326622362936380586426516825184444","168983563939743086617911439064109307044","162131536624210630258532783560063500221","16759876271196354007921171445775180199","105785922687588013154608486469754047603","208016186166475080528590036005348369234","164940676610025362342467540887581744055","28192222082713045277041552874166311137","272254147317233844332377775853185317066","158085801864188863102420045339659264557","178158639400985782115775742907731456460","131050402288987949107801998183233874922","262447246316188583341118875694751900722","244017845212642679696498021548749826337","108683598193899600660555118763465070635","71891034684932793068235081629274130068","131375036761111438886864767865604879158"],"threshold":0.9}},{"id":"CVE-2026-73256-cd1429ab","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_builtin.c","function":"mg_tls_verify_cert_signature"},"deprecated":false,"digest":{"function_hash":"14386722866325618864365220643133344707","length":2179}},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/drivers/tms570.c"},"deprecated":false,"digest":{"line_hashes":["196158985745106643789873259015293708850","43218586666397312768162075240560191716","60067933661434082163524031991825177158","174479788697771909725333430256989418634"],"threshold":0.9},"id":"CVE-2026-73256-cdb381d6","signature_type":"Line"},{"target":{"file":"mongoose.c","function":"mg_mqtt_next_prop"},"deprecated":false,"digest":{"function_hash":"297478003486870093209047169448117249664","length":2300},"id":"CVE-2026-73256-ce03a646","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/l2_ppp.c","function":"mg_l2_pppoe_init"},"deprecated":false,"digest":{"function_hash":"146752807320950357188200675449620747160","length":139},"id":"CVE-2026-73256-d0782e23","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_der_to_tlv"},"deprecated":false,"digest":{"function_hash":"11357603138552287084322613246366122547","length":505},"id":"CVE-2026-73256-d0f0625a","signature_type":"Function"},{"id":"CVE-2026-73256-d127d197","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/net_builtin.c","function":"mg_tcpip_init"},"deprecated":false,"digest":{"function_hash":"89774771786308012552390545955339982694","length":1135}},{"id":"CVE-2026-73256-d13afd4f","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"function":"mg_tcpip_driver_tms570_tx","file":"src/drivers/tms570.c"},"deprecated":false,"digest":{"function_hash":"22655348550130318506917877452664758148","length":800}},{"id":"CVE-2026-73256-d23c9673","signature_type":"Line","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/fmt.c"},"deprecated":false,"digest":{"line_hashes":["249201271154140185139148218901907817223","327544047385751518830033137180857612239","207884397697624765387657846274719681390","235335861063375011275998644062205506303","175947087846104647541960985881667655427","149426187040948549804152790751678066638","292460998959887412033868254762586371858","317682071141090553951937090744153446979","215475986172447245248851167869066877373","325755990828620746284430538311609094083","268831670790193834588593758156729844395"],"threshold":0.9}},{"digest":{"function_hash":"254410957794899136390496323884346536232","length":992},"id":"CVE-2026-73256-d2a12c4b","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"rx_icmp"},"deprecated":false},{"digest":{"function_hash":"271772299627380034480793415644141608842","length":1332},"id":"CVE-2026-73256-d64e7430","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/http.c","function":"mg_http_next_multipart"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"function":"rx_icmp6","file":"mongoose.c"},"deprecated":false,"digest":{"function_hash":"202979984029528356947514587850485642852","length":1158},"id":"CVE-2026-73256-d6a1de88","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"19513665646702544690134086058193230386","length":2685},"id":"CVE-2026-73256-d80c135f","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_http_parse"}},{"id":"CVE-2026-73256-d8cb7d37","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/net_builtin.c","function":"rx_ip6"},"deprecated":false,"digest":{"function_hash":"258564654321190262044139813162107372522","length":3235}},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/net_builtin.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["184432424778194453059018903206026644561","282235524157122978153585543657787210615","216646750651816536911114701935262975483","287119835445471814445389455881001595409","130314766711685514011096218664625549193","237822115762625171603383701162367446692","202488195969873964876217071277452238738","190811227480654258291638931809259463792","178264818327908383334961348351242213736","76215744335747107617507907362556324338","90587880421354331521761431954423437804","47747648356680362348119950469752630728","156172259918799478006314260980639529739","269124710500515455743872095066323669222","326880572573452944591253231263775389485","316817826896686347215247062605828240411","36070518725078829966489300122360420139","269745929965416415228174564452729357999","147108511823987637571993318951458013118","4382986224362415186625413319097961028","21656321275391505530126683999980589857","257875401374004179006144009685134281450","100029556575483966476752703518687355788","177405781216379767274692124197153012958","237594354972979077030398112944727452502","313290495236046815397425881845542853092","336154257875272690244561082134040237865","164144033909790737967407993535556287881","42798591319872964568247927391007975096","153669078412203485835602902441573386370","66308293821060073237644812334641891240","91202448251551208665185870025599716697","114680997402409336602858419450351008484","335567741441417446276133532312190483298","139776651165931751068686448251485541441","94725456970392450360914527354740623153","40530174035939598687495592746178155093","288472377164095506888841647393716746488","192894977720568520892636506319275985781","35756972217714085615650214992402782846","277255541696409224061681444384179436970","121338202701410305634528430584838698557","316447823846077459543477364129603317000","296930948570872899955114042366230318335","139978312148555582503745120256139963024","130815970635484525073234367400302022789","195015217786586399187453492352865354396","297176489005931213337786934732657967969","81577053153122909042546715822655617140","67311793958554583898540578098970404043","20597623129458789897144680401795530013","151170898479967806222655302763817030565","327724105186068470522279125673135488445","85765985686705052392949527995590830321","303707808061177147175249958113713917956","243208985917049500563279444917677637381","132973287205512784248021348657098262871","295451581770204946106948885209905142356","177637950172119102168745254549403830863","101994261752483313003742970878844058204","183178143189683555223802975689529748811","244473083203781192852093704993699264061","152900695977294297335942826982566741714","322606825312978807302887718607191002521","187906069316725684559688214368528412436","268712315580571127581364724339119392443","73719901716753933121868963999237205483","296684912510358519066391606184948230058","110939240209911654080060127547089643561","289777904706763247788340619108633816442","291966197168409223704949406631125717535","43291826489038750844632873822638472904","54928167158501418632602351280044981634","187396542153033047996414536458357568503","280024611471221257923507653847778630308","302047516652666317695060690310475637630","44009480031989343998654856928188327817","186245772595768562650062587735262323314","34862346473193482249485683535591847307","58568978950911508742684046650643978346","327348628792272726296711482643046949107","93644618067799922999172572463777489938","128176080370779006295400197808244236966","104979456651458905719257196396953171670","277775541929149641258729622782142862201","171400025034907121977621179106503758316","330724192831282921696905374670001471868","252058672270680023476944722100595020338","330672664133434005978041588125549790591","96328744216819732119664968667975581590","218044234481944049274769377439198500501","334065503414832852216208585299473207394","62928705954191394528309093181399570505","13511440994285131347477959522422034084","109530073161530386969574576644669153764","251608098111928451190607790767850200013","279501471781386834900870746797592426252","126483486200578404300565863256245932426","223138251256192077380743607572112675520","7448060729459024805455864324543325704","23028912025187168159391651227729794985","231584736783486107252058785271623278631","161561776637919187122977552308790554114","45986199956497282724034036123369760439","156868599036857846508391632272359078114","122087875370274594362607117400103955732","114967994548758739149797209690206586407","61580236262991167744819248863923168848"]},"id":"CVE-2026-73256-e0ff564b","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"305064657750647659304825378023284657388","length":523},"id":"CVE-2026-73256-e71b72ba","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/sock.c","function":"mg_getlocaddr"}},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/http.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["99342585454143777211350405329767100061","248294475111140147738139081459710553955","83676957240267948432784433686949417896","309126626636784460366346434015915836102","53699379035316945307103614845636360962","322057797807023915417422099710759813235","12608644803414312341906168578498211188","218183266410598798868456208805174360949","198019577245798686762376498405309537769","4675447083554238506820061998440755501","46261138378107135129619199813354419958","142844824120641163646805929380945553510","59695784179284873399780135285505236857","198435265031343286959514138136958807048","130849680294096236336762133066034833544","330954618847211712111480644574668114517","291214677664358870679059348658916443555","41270427135968948595167591816308366365","2340485204048480290306362518943657906","67662686367943076569912702482612093162","160370732258197891332190861591633380867","98397136104908480003007361365872276568","32983516885811725247436427593559123394","18324813607879728527198333859018603185","136420616721741630092496883130158009944","180770559211514367430176512904444568873","7163089261868026582484244702442972568","131861569474381731981005820227864782136","50786082939306426641404448511908051481","122723938748502137683345004685485561282","157757955406629505963616556659381487928","141105778517667782293543287728468063285","183183204323554068904530174504477652067","242457721775811471694110189969814814586","186113893409086500723983940667536827098","240861874435480958264566001679519302302","251673027696174936086638688488483585291","137921944477973262619164937177676893702","104589755636448847603654897489936002544","335950390102436926516538388288075908611","221922356941496295474567706133186603625","185648501262827272406864547306822980135","132659740659252892467136899753093707496","321755651175231108483435821749255336998"]},"id":"CVE-2026-73256-e846d6e8","signature_type":"Line"},{"digest":{"length":1048,"function_hash":"315757571796826943100881807577196416376"},"id":"CVE-2026-73256-e95db621","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"rx_ndp_na"},"deprecated":false},{"target":{"file":"mongoose.c","function":"mg_tls_server_recv_hello"},"deprecated":false,"digest":{"function_hash":"189361870129030812527636788623212835959","length":1930},"id":"CVE-2026-73256-ea50417e","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"deprecated":false,"digest":{"function_hash":"228454465559437109636165937966375079274","length":140},"id":"CVE-2026-73256-eaebea6a","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/tls_mbed.c","function":"mg_mbed_rng"}},{"id":"CVE-2026-73256-eafd5374","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_l2_ppp_init"},"deprecated":false,"digest":{"function_hash":"288947917236156155490905987055432606671","length":124}},{"signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/l2_eth.c"},"deprecated":false,"digest":{"line_hashes":["6805998124725932905837966780304118366","44846076011534437306771832574705087165","210700036504541413205400206437034613116","301459480098871612290876373699931211139"],"threshold":0.9},"id":"CVE-2026-73256-ed8aaca6","signature_type":"Line"},{"deprecated":false,"digest":{"length":1379,"function_hash":"193800181989568197373335938661115432317"},"id":"CVE-2026-73256-f13b2655","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/net_builtin.c","function":"rx_dhcp_server"}},{"digest":{"function_hash":"19513665646702544690134086058193230386","length":2685},"id":"CVE-2026-73256-f1b1d51e","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/http.c","function":"mg_http_parse"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"193800181989568197373335938661115432317","length":1379},"id":"CVE-2026-73256-f2af6d67","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"rx_dhcp_server"}},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/printf.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["76083579440468480901239509075554413422","28950194437033175201291249227614063026","172302567102427464353298406364958189598","45334518779605187077990335715402006398","186388939181727772123624172363572657432","7588578880416528792867536791396030827","336024404004259824295186760987943136963","162853106003109879288863775933944586457"]},"id":"CVE-2026-73256-f2fa4d9f","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"255045508415858940969396310421318667750","length":2711},"id":"CVE-2026-73256-f543a32b","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"src/ssi.c","function":"mg_ssi"}},{"source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"rx_ndp_ra"},"deprecated":false,"digest":{"length":1949,"function_hash":"291002711997149435366708935068436443899"},"id":"CVE-2026-73256-f635d7d7","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"215209414384076488051122340466542534810","length":563},"id":"CVE-2026-73256-f6d95e32","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"test/unit_test.c","function":"uc"},"deprecated":false},{"target":{"file":"mongoose.c","function":"http_cb"},"deprecated":false,"digest":{"function_hash":"152849641657646075686452913327616229632","length":3312},"id":"CVE-2026-73256-f779d102","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71"},{"digest":{"length":1614,"function_hash":"268390190517286533546049073814255390401"},"id":"CVE-2026-73256-f8769730","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_tls_client_recv_hello"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"function":"ff_open","file":"src/fs_fat.c"},"deprecated":false,"digest":{"function_hash":"112474901257864317333447804941623234957","length":386},"id":"CVE-2026-73256-f9897f48"},{"deprecated":false,"digest":{"function_hash":"142162602858885939250911926702291407342","length":2963},"id":"CVE-2026-73256-f9be950a","signature_type":"Function","signature_version":"v1","source":"https://github.com/cesanta/mongoose/commit/a9df523f76f43a38bd53b4232b9cfd4c16869e71","target":{"file":"mongoose.c","function":"mg_tls_recv_cert_verify"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"}]}