EUVD-2026-66752

In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...

CVE-2026-26449

Stomper at commit 5e2741e is vulnerable to a null pointer dereference (invalid memory access) when a client sends a SEND frame missing the destination header field , causing the server process to crash. The root cause is insufficient validation of the destination header before frame processing, r...