The CVE number for this vulnerability is CVE-2026-72753.

== Summary
Routinator incorrectly handles delta updates

== Affected products
Routinator up to and including 0.15.2.

== Description
When Routinator encounters an RRDP notification file with gaps in the delta
entries, it is still accepted and parsed, potentially leading to missing
data. If it encounters too many delta entries it may run out of memory.

== Solution
Install Routinator 0.15.3 or later.

== Acknowledgments
We would like to thank Qifan Zhang, Palo Alto Networks & Xin Wang and Jiajia
Liu, Northwestern Polytechnical University for finding the vulnerability.