UlisesGascon
146 kredili kayıt · son 12 ayda 146 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2026-126051İstismar yok | Node.js is vulnerable to a remotely triggerable uncaught exception in TLS servers via deferred handshake callbacksnodejs · node · CWE-476 | Yüksek7,5 | — | — | 1 gün önce |
30İzleyin | CVE-2026-123874İstismar yok | Node.js is vulnerable to an HTTP/2 use-after-free via respondWithFile() stream reset during a pending writenodejs · node · CWE-416 | Yüksek7,5 | — | — | 1 gün önce |
24İzleyin | CVE-2026-123871İstismar yok | Node.js is vulnerable to proxy credential disclosure via ERR_PROXY_INVALID_CONFIG error messagesnodejs · node · CWE-209 | Orta6,2 | — | — | 1 gün önce |
16İzleyin | CVE-2026-123867İstismar yok | Node.js is vulnerable to a per-host mTLS authorization bypass via a CA-only SNI context failing open to the default CAnodejs · node · CWE-295 | Orta4,2 | — | — | 1 gün önce |
32İzleyin | CVE-2026-123863İstismar yok | Node.js is vulnerable to a remote HTTP/2 denial of service via a reachable assertion in Http2Session teardownnodejs · node · CWE-617 | Yüksek8,2 | — | — | 1 gün önce |
11İzleyin | CVE-2026-123862İstismar yok | Node.js is vulnerable to a zlib denial of service via a stream destroy during a pending params() callnodejs · node · CWE-248 | Düşük2,9 | — | — | 1 gün önce |
10İzleyin | CVE-2026-123829İstismar yok | Node.js is vulnerable to Permission Model file-name disclosure via recursive fs.watchnodejs · node · CWE-200 | Düşük2,5 | — | — | 1 gün önce |
23İzleyin | CVE-2026-123828İstismar yok | Node.js is vulnerable to a heap buffer overflow in HTTP/2 session.altsvc() via a long originnodejs · node · CWE-122 | Orta5,9 | — | — | 1 gün önce |
23İzleyin | CVE-2026-116630İstismar yok | undici vulnerable to cross-user information disclosure via cross-origin redirect revalidationundici · undici · CWE-346 | Orta5,9 | — | %0,1 | 6 gün önce |
26İzleyin | CVE-2026-120474İstismar yok | undici vulnerable to cross-user cache disclosure via same-origin redirectundici · undici · CWE-524 | Orta6,5 | — | %0,2 | 6 gün önce |
23İzleyin | CVE-2026-120423İstismar yok | undici vulnerable to Subresource Integrity bypass via whitespace in integrity metadataundici · undici · CWE-354 | Orta5,9 | — | %0,1 | 6 gün önce |
23İzleyin | CVE-2026-120415İstismar yok | undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect strippingundici · undici · CWE-200 | Orta5,9 | — | %0,3 | 6 gün önce |
23İzleyin | CVE-2026-120222İstismar yok | undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replayundici · undici · CWE-248 | Orta5,9 | — | %0,3 | 6 gün önce |
29İzleyin | CVE-2026-116592İstismar yok | undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hopsundici · undici · CWE-346 | Yüksek7,4 | — | %0,1 | 6 gün önce |
23İzleyin | CVE-2026-120216İstismar yok | fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responsesfastify · fastify · CWE-248 | Orta5,9 | — | %0,3 | 2 Kas 2026 |
14İzleyin | CVE-2026-120215İstismar yok | @fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook@fastify/cors · @fastify/cors · CWE-248 | Düşük3,7 | — | %0,2 | 2 Kas 2026 |
23İzleyin | CVE-2026-120214İstismar yok | @fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments@fastify/http-proxy · @fastify/http-proxy · CWE-22 | Orta5,9 | — | %0,4 | 2 Kas 2026 |
36İzleyin | CVE-2026-120213İstismar yok | @fastify/http-proxy vulnerable to prefix escape via decoded route parameters@fastify/http-proxy · @fastify/http-proxy · CWE-22 | Kritik9,1 | — | %0,6 | 2 Kas 2026 |
16İzleyin | CVE-2026-117549İstismar yok | @fastify/secure-session vulnerable to signature verification bypass via cookie signature removal@fastify/secure-session · @fastify/secure-session · CWE-347 | Orta4,2 | — | %0,0 | 2 Kas 2026 |
23İzleyin | CVE-2026-117531İstismar yok | @fastify/multipart vulnerable to Denial of Service via a malformed upload hanging delayed file consumers@fastify/multipart · @fastify/multipart · CWE-400 | Orta5,9 | — | %0,3 | 2 Kas 2026 |
32İzleyin | CVE-2026-117518İstismar yok | @fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape@fastify/reply-from · @fastify/reply-from · CWE-22 | Yüksek8,2 | — | %0,4 | 2 Kas 2026 |
14İzleyin | CVE-2026-117499İstismar yok | @fastify/session vulnerable to session revocation bypass via a logout race condition@fastify/session · @fastify/session · CWE-362 | Düşük3,7 | — | %0,0 | 27 Eki 2026 |
36İzleyin | CVE-2026-112362İstismar yok | @fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets@fastify/express · @fastify/express · CWE-436 | Kritik9,1 | — | %0,3 | 27 Eki 2026 |
30İzleyin | CVE-2026-113872Kavram kanıtı | multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardownmulter · multer · CWE-248 | Yüksek7,5 | — | %0,4 | 22 Eki 2026 |
30İzleyin | CVE-2026-111181İstismar yok | body-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodybody-parser · body-parser · CWE-248 | Yüksek7,5 | — | %0,3 | 22 Eki 2026 |
- CVE-2026-12605130İzleyin
Node.js is vulnerable to a remotely triggerable uncaught exception in TLS servers via deferred handshake callbacks
YüksekCVSS 7,5İstismar yoknodejs · node1 gün önce
- CVE-2026-12387430İzleyin
Node.js is vulnerable to an HTTP/2 use-after-free via respondWithFile() stream reset during a pending write
YüksekCVSS 7,5İstismar yoknodejs · node1 gün önce
- CVE-2026-12387124İzleyin
Node.js is vulnerable to proxy credential disclosure via ERR_PROXY_INVALID_CONFIG error messages
OrtaCVSS 6,2İstismar yoknodejs · node1 gün önce
- CVE-2026-12386716İzleyin
Node.js is vulnerable to a per-host mTLS authorization bypass via a CA-only SNI context failing open to the default CA
OrtaCVSS 4,2İstismar yoknodejs · node1 gün önce
- CVE-2026-12386332İzleyin
Node.js is vulnerable to a remote HTTP/2 denial of service via a reachable assertion in Http2Session teardown
YüksekCVSS 8,2İstismar yoknodejs · node1 gün önce
- CVE-2026-12386211İzleyin
Node.js is vulnerable to a zlib denial of service via a stream destroy during a pending params() call
DüşükCVSS 2,9İstismar yoknodejs · node1 gün önce
- CVE-2026-12382910İzleyin
Node.js is vulnerable to Permission Model file-name disclosure via recursive fs.watch
DüşükCVSS 2,5İstismar yoknodejs · node1 gün önce
- CVE-2026-12382823İzleyin
Node.js is vulnerable to a heap buffer overflow in HTTP/2 session.altsvc() via a long origin
OrtaCVSS 5,9İstismar yoknodejs · node1 gün önce
- CVE-2026-11663023İzleyin
undici vulnerable to cross-user information disclosure via cross-origin redirect revalidation
OrtaCVSS 5,9İstismar yokEPSS %0undici · undici6 gün önce
- CVE-2026-12047426İzleyin
undici vulnerable to cross-user cache disclosure via same-origin redirect
OrtaCVSS 6,5İstismar yokEPSS %0undici · undici6 gün önce
- CVE-2026-12042323İzleyin
undici vulnerable to Subresource Integrity bypass via whitespace in integrity metadata
OrtaCVSS 5,9İstismar yokEPSS %0undici · undici6 gün önce
- CVE-2026-12041523İzleyin
undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect stripping
OrtaCVSS 5,9İstismar yokEPSS %0undici · undici6 gün önce
- CVE-2026-12022223İzleyin
undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay
OrtaCVSS 5,9İstismar yokEPSS %0undici · undici6 gün önce
- CVE-2026-11659229İzleyin
undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hops
YüksekCVSS 7,4İstismar yokEPSS %0undici · undici6 gün önce
- CVE-2026-12021623İzleyin
fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses
OrtaCVSS 5,9İstismar yokEPSS %0fastify · fastify2 Kas 2026
- CVE-2026-12021514İzleyin
@fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook
DüşükCVSS 3,7İstismar yokEPSS %0@fastify/cors · @fastify/cors2 Kas 2026
- CVE-2026-12021423İzleyin
@fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments
OrtaCVSS 5,9İstismar yokEPSS %0@fastify/http-proxy · @fastify/http-proxy2 Kas 2026
- CVE-2026-12021336İzleyin
@fastify/http-proxy vulnerable to prefix escape via decoded route parameters
KritikCVSS 9,1İstismar yokEPSS %0@fastify/http-proxy · @fastify/http-proxy2 Kas 2026
- CVE-2026-11754916İzleyin
@fastify/secure-session vulnerable to signature verification bypass via cookie signature removal
OrtaCVSS 4,2İstismar yokEPSS %0@fastify/secure-session · @fastify/secure-session2 Kas 2026
- CVE-2026-11753123İzleyin
@fastify/multipart vulnerable to Denial of Service via a malformed upload hanging delayed file consumers
OrtaCVSS 5,9İstismar yokEPSS %0@fastify/multipart · @fastify/multipart2 Kas 2026
- CVE-2026-11751832İzleyin
@fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape
YüksekCVSS 8,2İstismar yokEPSS %0@fastify/reply-from · @fastify/reply-from2 Kas 2026
- CVE-2026-11749914İzleyin
@fastify/session vulnerable to session revocation bypass via a logout race condition
DüşükCVSS 3,7İstismar yokEPSS %0@fastify/session · @fastify/session27 Eki 2026
- CVE-2026-11236236İzleyin
@fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets
KritikCVSS 9,1İstismar yokEPSS %0@fastify/express · @fastify/express27 Eki 2026
- CVE-2026-11387230İzleyin
multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown
YüksekCVSS 7,5Kavram kanıtıEPSS %0multer · multer22 Eki 2026
- CVE-2026-11118130İzleyin
body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body
YüksekCVSS 7,5İstismar yokEPSS %0body-parser · body-parser22 Eki 2026