Tmds.DBus.Protocol
Modern, low-level, high-performance D-Bus library for .NET that is NativeAOT compatible.
Activity
- Latest release
- 1w ago
- Total releases
- 28
- Cadence
- ~22 days
- Last 12 months
- 16
Details
- License
- MIT
- First release
- Feb 15, 2023
| Version | Released | |
|---|---|---|
0.95.1
patch
|
0.95.1
patch
Dependencies (3)
|
|
0.95.0
minor
|
0.95.0
minor
Dependencies (3)
|
|
0.94.2
patch
|
0.94.2
patch
Dependencies (3)
|
|
0.94.1
patch
|
0.94.1
patch
Dependencies (3)
|
|
0.94.0
minor
|
0.94.0
minor
Dependencies (3)
|
|
0.93.0
minor
|
0.93.0
minor
Dependencies (3)
|
|
0.92.0
minor
|
0.92.0
minor
Dependencies (3)
|
|
0.21.3
patch
|
0.21.3
patch
Dependencies (3)
|
|
0.91.1
patch
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.91.1
patch
Dependencies (3)
|
|
0.91.0
minor
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.91.0
minor
Dependencies (3)
|
|
0.90.3
patch
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.90.3
patch
Dependencies (3)
|
|
0.90.2
patch
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.90.2
patch
Dependencies (3)
|
|
0.90.1
patch
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.90.1
patch
Dependencies (3)
|
|
0.90.0
minor
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.90.0
minor
Dependencies (3)
|
|
0.23.0
minor
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.23.0
minor
Dependencies (3)
|
|
0.22.0
minor
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.22.0
minor
Dependencies (3)
|
|
0.21.2
patch
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.21.2
patch
Dependencies (3)
|
|
0.21.1
patch
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.21.1
patch
Dependencies (3)
|
|
0.21.0
minor
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.21.0
minor
Dependencies (3)
|
|
0.20.0
minor
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.20.0
minor
Dependencies (3)
|
|
0.19.0
minor
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.19.0
minor
Dependencies (3)
|
|
0.18.0
minor
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.18.0
minor
Dependencies (3)
|
|
0.17.0
minor
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.17.0
minor
Dependencies (3)
|
|
0.16.0
minor
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.16.0
minor
Dependencies (3)
|
|
0.15.0
minor
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.15.0
minor
Dependencies (3)
|
|
0.14.0
minor
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.14.0
minor
Dependencies (3)
|
|
0.13.0
minor
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.13.0
minor
Dependencies (3)
|
|
0.12.0
initial
1 CVE
CVE-2026-39959
GHSA-xrw6-gwf8-vvr9
Apr 08, 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
7.1
/ 10
High
Local
Low
Low
None
Unchanged
None
High
High
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. PatchesThe vulnerabilities are fixed in version 0.92.0. For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3. WorkaroundsThere are no known workarounds. Users should upgrade to a patched version. Affected versions
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.20.0
0.21.0
0.21.1
0.21.2
+ 8 more Show less
0.22.0
0.23.0
0.90.0
0.90.1
0.90.2
0.90.3
0.91.0
0.91.1
Fixed in
0.21.3
0.92.0
References Updated Apr 09, 2026 · Source: OSV.dev |
0.12.0
initial
Dependencies (3)
|