bjohansebas
12 kredili kayıt · son 12 ayda 12 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
21İzleyin | CVE-2026-88932İstismar yok | multer vulnerable to Denial of Service via orphaned disk writes on aborted uploadsmulter · multer · CWE-400 | Orta5,3 | — | %0,5 | 14 Eyl 2026 |
30İzleyin | CVE-2026-87776İstismar yok | compression vulnerable to Denial of Service via memory leak on premature response closecompression · compression · CWE-401 | Yüksek7,5 | — | %0,6 | 11 Eyl 2026 |
23İzleyin | CVE-2026-87123İstismar yok | hbs vulnerable to Denial of Service via unhandled exception in async helper output escapinghbs · hbs · CWE-248 | Orta5,9 | — | %0,4 | 11 Eyl 2026 |
14İzleyin | CVE-2026-77063İstismar yok | multer vulnerable to file size limit bypass via async fileFilter race conditionexpressjs · multer · CWE-362 | Düşük3,7 | — | %0,2 | 28 Ağu 2026 |
30İzleyin | CVE-2026-77037İstismar yok | multer vulnerable to Denial of Service via file descriptor leak on aborted uploadsexpressjs · multer · CWE-400 | Yüksek7,5 | — | %0,3 | 28 Ağu 2026 |
21İzleyin | CVE-2026-15603İstismar yok | morgan vulnerable to Log Forging via unescaped Unicode line separatorsmorgan project · morgan · CWE-117 | Orta5,3 | — | %0,3 | 28 Ağu 2026 |
32İzleyin | CVE-2026-16231İstismar yok | hbs vulnerable to XSS via registerAsyncHelper output-escaping bypasshbs project · hbs · CWE-79 | Yüksek8,1 | — | %0,2 | 25 Ağu 2026 |
23İzleyin | CVE-2026-12590İstismar yok | body-parser vulnerable to denial of service when invalid limit value silently disables size enforcementopenjsf · body-parser · CWE-770 | Orta5,9 | — | %0,4 | 9 Tem 2026 |
21İzleyin | CVE-2026-14631İstismar yok | webpack-dev-server vulnerable to denial of service via a malformed Host or Origin headerwebpack.js · webpack-dev-server · CWE-20 | Orta5,3 | — | %0,5 | 3 Tem 2026 |
18İzleyin | CVE-2026-14620Kavram kanıtı | webpack-dev-server vulnerable to cross-site request forgery via internal developer endpointswebpack.js · webpack-dev-server · CWE-352 | Orta4,7 | — | %0,5 | 3 Tem 2026 |
17İzleyin | CVE-2026-9595İstismar yok | webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxieswebpack.js · webpack-dev-server · CWE-346 | Orta4,3 | — | %0,2 | 15 Haz 2026 |
30İzleyin | CVE-2026-5038İstismar yok | multer vulnerable to Denial of Service via incomplete cleanup of aborted uploadsexpressjs · multer · CWE-459 | Yüksek7,5 | — | %0,5 | 15 Haz 2026 |
- CVE-2026-8893221İzleyin
multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads
OrtaCVSS 5,3İstismar yokEPSS %1multer · multer14 Eyl 2026
- CVE-2026-8777630İzleyin
compression vulnerable to Denial of Service via memory leak on premature response close
YüksekCVSS 7,5İstismar yokEPSS %1compression · compression11 Eyl 2026
- CVE-2026-8712323İzleyin
hbs vulnerable to Denial of Service via unhandled exception in async helper output escaping
OrtaCVSS 5,9İstismar yokEPSS %0hbs · hbs11 Eyl 2026
- CVE-2026-7706314İzleyin
multer vulnerable to file size limit bypass via async fileFilter race condition
DüşükCVSS 3,7İstismar yokEPSS %0expressjs · multer28 Ağu 2026
- CVE-2026-7703730İzleyin
multer vulnerable to Denial of Service via file descriptor leak on aborted uploads
YüksekCVSS 7,5İstismar yokEPSS %0expressjs · multer28 Ağu 2026
- CVE-2026-1560321İzleyin
morgan vulnerable to Log Forging via unescaped Unicode line separators
OrtaCVSS 5,3İstismar yokEPSS %0morgan project · morgan28 Ağu 2026
- CVE-2026-1623132İzleyin
hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass
YüksekCVSS 8,1İstismar yokEPSS %0hbs project · hbs25 Ağu 2026
- CVE-2026-1259023İzleyin
body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement
OrtaCVSS 5,9İstismar yokEPSS %0openjsf · body-parser9 Tem 2026
- CVE-2026-1463121İzleyin
webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header
OrtaCVSS 5,3İstismar yokEPSS %1webpack.js · webpack-dev-server3 Tem 2026
- CVE-2026-1462018İzleyin
webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints
OrtaCVSS 4,7Kavram kanıtıEPSS %1webpack.js · webpack-dev-server3 Tem 2026
- CVE-2026-959517İzleyin
webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies
OrtaCVSS 4,3İstismar yokEPSS %0webpack.js · webpack-dev-server15 Haz 2026
- CVE-2026-503830İzleyin
multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads
YüksekCVSS 7,5İstismar yokEPSS %0expressjs · multer15 Haz 2026