Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mint — Vulnerabilities & Security Advisories 16

All 16 CVE vulnerabilities found in Mint, with AI-generated Chinese analysis, references, and POCs.

This page is a vulnerability aggregation resource for the Mint product, focusing on general security weaknesses and software defects. It collects data on various types of vulnerabilities affecting this specific software environment, covering reports and advisories issued over the past several years to provide a comprehensive historical view. Here, users can track vendor advisories related to Mint updates, understand the characteristics of specific weakness classes that impact the system, and look up the product’s vulnerability history to assess long-term security trends. The content is organized to help security professionals, developers, and system administrators identify recurring issues, evaluate risk exposure, and prioritize remediation efforts based on established patterns and known flaws. By centralizing this information, the page aims to streamline the process of monitoring security posture for deployments of Mint, ensuring that stakeholders have access to critical details without navigating multiple disparate sources. The scope includes both publicly disclosed incidents and internally tracked bugs that have reached a level of public relevance, offering a balanced perspective on the software’s security landscape. This approach supports informed decision-making regarding upgrades, patches, and configuration changes, ultimately contributing to a more resilient deployment strategy. All data presented is derived from verified sources and standardized classification systems to maintain consistency and accuracy across entries.

Vendor: LinuxMint

CVE ID Title CVSS Severity Published
CVE-2026-94194 Mint HTTP/1 client applies chunked framing when chunked is not the final transfer coding, enabling response smuggling through intermediaries CWE-444 6.3 Medium 2026-09-28
CVE-2026-92103 Mint HTTP/2 client buffers oversized frames up to 16 MiB before enforcing max_frame_size CWE-770 6.3 Medium 2026-09-28
CVE-2026-91043 HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memory CWE-770 8.2 High 2026-09-28
CVE-2026-82672 Unvalidated chunk-size line tail in Mint HTTP/1 client enables response smuggling against strict intermediaries on pooled connections CWE-444 6.3 Medium 2026-09-19
CVE-2026-82728 Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS CWE-770 8.2 High 2026-09-04
CVE-2026-82729 Quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoS CWE-407 6.3 Medium 2026-09-04
CVE-2026-59249 Sign-tolerant HTTP/1 chunk-size parser in Mint enables response smuggling against strict intermediaries on pooled connections CWE-444 - - 2026-07-16
CVE-2026-59246 Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memory CWE-770 - - 2026-07-14
CVE-2026-58229 Unbounded HTTP/1 response-header and chunked-trailer accumulation in Mint causes memory-exhaustion DoS CWE-770 - - 2026-07-14
CVE-2026-56810 mint buffers an entire chunked response chunk in memory in Mint.HTTP1.decode_body/5 CWE-770 - - 2026-07-06
CVE-2026-49753 HTTP response smuggling in Mint HTTP/1 client via lenient Content-Length parsing CWE-444 - - 2026-06-02
CVE-2026-49754 HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulation CWE-770 - - 2026-06-02
CVE-2026-48862 Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMISE concurrency CWE-770 - - 2026-06-02
CVE-2026-48861 CRLF injection in HTTP/1 request line via unvalidated method in Mint CWE-93 - - 2026-06-02
CVE-2012-1567 Linux Mint 安全漏洞 7.5 - 2020-02-07
CVE-2012-1566 Linux Mint多个安全漏洞 7.5 - 2020-02-07

All 16 known CVE vulnerabilities affecting Mint with full Chinese analysis, references, and POCs where available.