Skip to content
Noroxi

bjohansebas

12 credited records · 12 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers
  • CVE-2026-88932
    21Monitor

    multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads

    MediumCVSS 5.3No exploitEPSS 1%

    multer · multerSep 14, 2026

  • CVE-2026-87776
    30Monitor

    compression vulnerable to Denial of Service via memory leak on premature response close

    HighCVSS 7.5No exploitEPSS 1%

    compression · compressionSep 11, 2026

  • CVE-2026-87123
    23Monitor

    hbs vulnerable to Denial of Service via unhandled exception in async helper output escaping

    MediumCVSS 5.9No exploitEPSS 0%

    hbs · hbsSep 11, 2026

  • CVE-2026-77063
    14Monitor

    multer vulnerable to file size limit bypass via async fileFilter race condition

    LowCVSS 3.7No exploitEPSS 0%

    expressjs · multerAug 28, 2026

  • CVE-2026-77037
    30Monitor

    multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

    HighCVSS 7.5No exploitEPSS 0%

    expressjs · multerAug 28, 2026

  • CVE-2026-15603
    21Monitor

    morgan vulnerable to Log Forging via unescaped Unicode line separators

    MediumCVSS 5.3No exploitEPSS 0%

    morgan project · morganAug 28, 2026

  • CVE-2026-16231
    32Monitor

    hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass

    HighCVSS 8.1No exploitEPSS 0%

    hbs project · hbsAug 25, 2026

  • CVE-2026-12590
    23Monitor

    body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement

    MediumCVSS 5.9No exploitEPSS 0%

    openjsf · body-parserJul 9, 2026

  • CVE-2026-14631
    21Monitor

    webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header

    MediumCVSS 5.3No exploitEPSS 1%

    webpack.js · webpack-dev-serverJul 3, 2026

  • CVE-2026-14620
    18Monitor

    webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints

    MediumCVSS 4.7Proof of conceptEPSS 1%

    webpack.js · webpack-dev-serverJul 3, 2026

  • CVE-2026-9595
    17Monitor

    webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

    MediumCVSS 4.3No exploitEPSS 0%

    webpack.js · webpack-dev-serverJun 15, 2026

  • CVE-2026-5038
    30Monitor

    multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads

    HighCVSS 7.5No exploitEPSS 0%

    expressjs · multerJun 15, 2026