Send an e-mail to security@signalwire.com to report a vulnerability. If accepted, we'll create a security advisory and add you and your team as collaborators. Please allow our team sufficient time to resolve the vulnerability before disclosing it; we'll remain in contact about the fix and may ask for your assistance to verify it is resolved.
Repository navigation
Security: signalwire/freeswitch
Security
SECURITY.md
-
Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commandsGHSA-mg63-h38w-8p9p published
Oct 28, 2026 by andywolkCritical -
Channel-variable injection via SIP REFER leads to command execution in mod_sofiaGHSA-xjxm-9qx6-w3fj published
Oct 28, 2026 by andywolkHigh -
mod_spandsp: out-of-bounds write parsing UDPTL error-recovery dataGHSA-mjp3-3cq2-hxj4 published
Oct 28, 2026 by andywolkHigh -
Pre-authentication invalid pointer dereference in mod_rtmp connect command handlingGHSA-v7mq-h638-6fxp published
Oct 28, 2026 by andywolkHigh -
Off-by-one heap write in core XML serialization of four-byte UTF-8 sequencesGHSA-r6vh-qmwm-h3cc published
Oct 26, 2026 by andywolkModerate -
Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authenticationGHSA-294g-hq4w-c275 published
Oct 26, 2026 by andywolkHigh -
mod_sofia: stack buffer overflow from an over-long SIP To-header userGHSA-6368-jw63-r8g2 published
Oct 26, 2026 by andywolkModerate -
mod_sofia: stack buffer overflow from an over-long SIP Contact display-nameGHSA-xrp9-7wv5-xr8c published
Oct 26, 2026 by andywolkModerate -
Pre-authentication out-of-bounds write in MSRP message body parsingGHSA-m8xv-crhj-3rf7 published
Oct 26, 2026 by andywolkHigh -
Stack buffer overflow in mod_rtmp AVC sequence-header constructionGHSA-qmh2-f6cv-79mf published
Oct 26, 2026 by andywolkModerate
Learn more about advisories related to signalwire/freeswitch in the GitHub Advisory Database