Monkey-Project
Vulnerability activity for Monkey-Project: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 9
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 7.5HighJan 29, 2026Monkey-Project monkey Memory corruptionCVE-2025-63658A stack overflow in the mk_http_index_lookup function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.1.3% likely
- 7.5HighJan 29, 2026Monkey-Project monkey Memory corruptionCVE-2025-63657An out-of-bounds read in the mk_mimetype_find function (mk_server/mk_mimetype.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.1.2% likely
- 7.5HighJan 29, 2026Monkey-Project monkey Memory corruptionCVE-2025-63656An out-of-bounds read in the header_cmp function (mk_server/mk_http_parser.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.1.2% likely
- 7.5HighJan 29, 2026Monkey-Project monkey Memory corruptionCVE-2025-63655A NULL pointer dereference in the mk_http_range_parse function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.8.6% likely
- 7.5HighJan 29, 2026Monkey-Project monkey Memory corruptionCVE-2025-63653An out-of-bounds read in the mk_vhost_fdt_close function (mk_server/mk_vhost.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.1.2% likely
- 7.5HighJan 29, 2026Monkey-Project monkey Memory corruptionCVE-2025-63652A use-after-free in the mk_http_request_end function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.1.2% likely
- 7.5HighJan 29, 2026Monkey-Project monkey Memory corruptionCVE-2025-63651A use-after-free in the mk_string_char_search function (mk_core/mk_string.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.1.1% likely
- 7.5HighJan 29, 2026Monkey-Project monkey Memory corruptionCVE-2025-63650An out-of-bounds read in the mk_ptr_to_buf in mk_core function (mk_memory.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.1.2% likely
- 7.5HighJan 29, 2026Monkey-Project monkey Memory corruptionCVE-2025-63649An out-of-bounds read in the http_parser_transfer_encoding_chunked function (mk_server/mk_http_parser.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted POST request to the server.1% likely
Top products
- monkey9 CVEs in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.