Low
CVE-2025-6536
A vulnerability has been found in Tarantool up to 3.3.1 and classified as problematic. Affected by this vulnerability is the function tm_to_datetime in the library src/lib/core/datetime.c. The manipu…
Tag: Tarantool
All CVEs associated with "Tarantool". Page 1/1 • 3 CVEs.
About “Tarantool”
A curated feed of “Tarantool”-related CVEs appears below. We currently track 3 CVEs for this tag (all time). In the last 365 days, 1 were published. Average CVSS is 6.1 (all time; 3.3 over 365d), and 67% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-617 - Reachable Assertion.
In our taxonomy this topic maps to a LOW impact class. Databases, proxies, and web servers often need coordinated restarts and config checks. Patch only modules you deploy, verify TLS and authentication, and tune limits. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.
Support & lifecycle: tarantool
This table shows recent release cycles and their projected end-of-life. Data source: endoflife.date.
| Cycle | Release | Latest | EOL | LTS |
|---|---|---|---|---|
| 3.7 | 3.7.0 | - | ||
| 3.6 | 3.6.3 | - | ||
| 3.5 | 3.5.2 | - | ||
| 3.4 | 3.4.2 | |||
| 3.3 | 3.3.5 | Soon | ||
| 3.2 | 3.2.4 | Soon | ||
| 3.1 | 3.1.2 | Expired | ||
| 3.0 | 3.0.2 | Expired | ||
| 2.11 | 2.11.9 | LTS | ||
| 2.10 | 2.10.8 | Expired | ||
| 2.8 | 2.8.4 | Expired | ||
| 2.7 | 2.7.3 | Expired | ||
| 2.6 | 2.6.3 | Expired | ||
| 2.5 | 2.5.3 | Expired | ||
| 2.4 | 2.4.3 | Expired | ||
| 2.3 | 2.3.3 | Expired | ||
| 2.2 | 2.2.3 | Expired | ||
| 1.10 | 1.10.15 | Expired | LTS |
Maintained Soon (≤ 180 days) Expired
Subscribe lifecycle: RSS · RSS (expired) · ICS
Subscribe CVEs: RSS for “Tarantool” · RSS (High+Critical only)
CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).
CVSS ≥ 0.0
2025-06-24
2016-12-23
High
CVE-2016-9037
An exploitable out-of-bounds array access vulnerability exists in the xrow_header_decode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element…
High
CVE-2016-9036
An exploitable incorrect return value vulnerability exists in the mp_check function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the mp_check function to incorrectly ret…