Skip to content
Noroxi

bjohansebas

16 credited records · 16 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for bjohansebas

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-113872
    30Monitor

    multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown

    HighCVSS 7.5Proof of conceptEPSS 0%

    multer · multer1 day ago

  • CVE-2026-111181
    30Monitor

    body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

    HighCVSS 7.5No exploitEPSS 0%

    body-parser · body-parser1 day ago

  • CVE-2026-114348
    21Monitor

    webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint

    MediumCVSS 5.3No exploitEPSS 0%

    webpack-dev-server · webpack-dev-server2 days ago

  • CVE-2026-112085
    32Monitor

    webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades

    HighCVSS 8.2No exploitEPSS 0%

    webpack-dev-server · webpack-dev-server2 days ago

  • CVE-2026-88932
    21Monitor

    multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads

    MediumCVSS 5.3No exploitEPSS 0%

    multer · multerSep 14, 2026

  • CVE-2026-87776
    30Monitor

    compression vulnerable to Denial of Service via memory leak on premature response close

    HighCVSS 7.5No exploitEPSS 0%

    compression · compressionSep 11, 2026

  • CVE-2026-87123
    23Monitor

    hbs vulnerable to Denial of Service via unhandled exception in async helper output escaping

    MediumCVSS 5.9No exploitEPSS 0%

    hbs · hbsSep 11, 2026

  • CVE-2026-77063
    14Monitor

    multer vulnerable to file size limit bypass via async fileFilter race condition

    LowCVSS 3.7No exploitEPSS 0%

    expressjs · multerAug 28, 2026

  • CVE-2026-77037
    30Monitor

    multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

    HighCVSS 7.5No exploitEPSS 0%

    expressjs · multerAug 28, 2026

  • CVE-2026-15603
    21Monitor

    morgan vulnerable to Log Forging via unescaped Unicode line separators

    MediumCVSS 5.3No exploitEPSS 0%

    morgan project · morganAug 28, 2026

  • CVE-2026-16231
    32Monitor

    hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass

    HighCVSS 8.1No exploitEPSS 0%

    hbs project · hbsAug 25, 2026

  • CVE-2026-12590
    23Monitor

    body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement

    MediumCVSS 5.9No exploitEPSS 0%

    openjsf · body-parserJul 9, 2026

  • CVE-2026-14631
    21Monitor

    webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header

    MediumCVSS 5.3No exploitEPSS 0%

    webpack.js · webpack-dev-serverJul 3, 2026

  • CVE-2026-14620
    18Monitor

    webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints

    MediumCVSS 4.7Proof of conceptEPSS 0%

    webpack.js · webpack-dev-serverJul 3, 2026

  • CVE-2026-9595
    17Monitor

    webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

    MediumCVSS 4.3No exploitEPSS 0%

    webpack.js · webpack-dev-serverJun 15, 2026

  • CVE-2026-5038
    30Monitor

    multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads

    HighCVSS 7.5No exploitEPSS 0%

    expressjs · multerJun 15, 2026