{
  "cveId": "CVE-2026-72813",
  "url": "https://patchblox.com/security/cve/CVE-2026-72813",
  "summary": "CVE-2026-72813 is fixed in gstreamer-devtools on 1 platform, first by SUSE-SU-2026:23572-1, released August 30, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "gstreamer-devtools: This update for gstreamer-devtools fixes the following issues:\n\n- CVE-2025-4574: crossbeam-channel: internal \u0060Channel...",
  "description": "This update for gstreamer-devtools fixes the following issues:\n\n- CVE-2025-4574: crossbeam-channel: internal \u0060Channel\u0060 type\u0027s \u0060Drop\u0060 method has a race condition that can lead to a\n  double-free and memory corruption (bsc#1243178).\n- CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI escape sequences can be injected into\n  terminal output when logged and lead to terminal manipulation (bsc#1249015).\n- CVE-2026-25541: bytes: integer overflow in \u0060BytesMut:reserve\u0060 can lead to undefined behavior and crashes\n  (bsc#1274306).\n- CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion\n  (bsc#1257914).\n- CVE-2026-72813: actix-files: empty \u0060Range\u0060 header in GET requests for static files can lead to a process crash\n  (bsc#1275210).\n- CVE-2026-72814: actix-files: non-existing folders passed as an argument to the \u0060actix_files::Files::new()\u0060 method can\n  lead to information disclosure (bsc#1275209).",
  "published": "2026-08-30T14:39:08Z",
  "severity": "",
  "epss": 0.00565,
  "epssPercentile": 0.47211,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "gstreamer-devtools",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "1.26.7-160000.2.1",
      "fix": "OPENSUSE-SU-2026:21689-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21689-1",
      "released": "2026-08-30T14:39:29Z"
    },
    {
      "platform": "linux",
      "product": "gstreamer-devtools",
      "release": "sles 16.0",
      "fixedVersion": "1.26.7-160000.2.1",
      "fix": "SUSE-SU-2026:23572-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23572-1",
      "released": "2026-08-30T14:39:08Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}