Approved changes feed: RSS · Atom

cpe:2.3:a:aardappel:lobster:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAardappel (6c460e35-4023-5636-991e-362ddd2c1364)
ProductLobster (b613db1d-f1ae-5970-a9cd-353697d34aac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2887 vulnerable 2026-06-03 15:19:25.313712 aardappel lobster idents.h TypeName recursion
LOW (3.3)
A security vulnerability has been detected in aardappel lobster up to 2025.4. This impacts the function lobster::TypeName in the library dev/src/lobster/idents.h. Such manipulation leads to uncontrolled recursion. The attack can only be performed from a local environment. The exploit has been disclosed publicly and may be used. Upgrading to version 2026.1 will fix this issue. The name of the patch is 8ba49f98ccfc9734ef352146806433a41d9f9aa6. It is advisable to upgrade the affected component.
Published: 2026-02-21T21:02:16.010Z
Updated: 2026-02-23T19:30:34.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2259 vulnerable 2026-06-03 15:19:23.859838 aardappel lobster Parsing parser.h ParseStatements memory corruption
LOW (3.3)
A vulnerability has been found in aardappel lobster up to 2025.4. Affected by this issue is the function lobster::Parser::ParseStatements in the library dev/src/lobster/parser.h of the component Parsing. The manipulation leads to memory corruption. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The identifier of the patch is 2f45fe860d00990e79e13250251c1dde633f1f89. Applying a patch is the recommended action to fix this issue.
Published: 2026-02-10T02:32:08.234Z
Updated: 2026-02-23T10:01:39.324Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2258 vulnerable 2026-06-03 15:19:23.858082 aardappel lobster wfc.h WaveFunctionCollapse memory corruption
LOW (3.3)
A flaw has been found in aardappel lobster up to 2025.4. Affected by this vulnerability is the function WaveFunctionCollapse in the library dev/src/lobster/wfc.h. Executing a manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been published and may be used. This patch is called c2047a33e1ac2c42ab7e8704b33f7ea518a11ffd. It is advisable to implement a patch to correct this issue.
Published: 2026-02-10T00:02:09.801Z
Updated: 2026-02-23T10:01:24.187Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.