Approved changes feed: RSS · Atom

cpe:2.3:a:boost:serialization:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBoost (1ddc64a1-4cc1-5578-a907-553d23621557)
ProductSerialization (60be974a-95fe-5e32-9d08-676178a89f29)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11460 vulnerable 2026-06-08 07:47:14.185791 Boost Serialization improper validation of specified type of input
HIGH (7.3)
A flaw has been found in Boost Serialization up to 1.91. The impacted element is an unknown function. This manipulation causes improper validation of specified type of input. It is possible to initiate the attack remotely. The exploit has been published and may be used. The maintainer was notified on Aug 2025 and a disclosure deadline was set for 90 days. The maintainer acknowledged but postponed indefinitely citing time concerns. No patch is currently available and the disclosure deadline has expired.
Published: 2026-06-07T19:30:10.324Z
Updated: 2026-06-08T13:45:44.206Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.