timeplus-io vulnerabilities

Products

• proton 1

Latest timeplus-io CVEs

Newest publication first

1. CVE-2026-4746 Heap Buffer Over-Write Vulenrabilty in timeplus-io/proton

   Published 2026-03-24

   Critical·CVSS 10.0 EPSS 0.27%

   Out-of-bounds Write vulnerability in timeplus-io proton (base/poco/Foundation/src‎ modules). This vulnerability is associated with program files inflate.C. This issue affects proton: before 1.6.16.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.