← Back

Canna

canna

Vendor: Canna • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Canna
1Canna
Apr 16, 2026
Dec 18, 2002
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak.
1Canna
1Canna
Apr 16, 2026
Dec 18, 2002
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user.