h3 kayıtları
h3 üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-706 Use of Incorrectly-Resolved Name or Reference2
- CWE-208 Observable Timing Discrepancy1
- CWE-290 Authentication Bypass by Spoofing1
- CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1
- CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2026-33128İstismar yok | h3 has a Server-Sent Events Injection via Unsanitized Newlines in Event Stream Fieldsh3 · h3 · CWE-93 | Kritik10,0 | — | %0,7 | 20 Mar 2026 |
39İzleyin | CVE-2026-23527İstismar yok | h3 v1 has Request Smuggling (TE.TE) issueh3 · h3 · CWE-444 | Kritik9,8 | — | %0,6 | 15 Oca 2026 |
36İzleyin | CVE-2026-33131İstismar yok | h3 has a middleware bypass with one gadgeth3 · h3 · CWE-290 | Kritik9,1 | — | %0,4 | 20 Mar 2026 |
26İzleyin | CVE-2026-33732İstismar yok | srvx is vulnerable to middleware bypass via absolute URI in request lineh3 · srvx · CWE-706 | Orta6,5 | — | %0,4 | 26 Mar 2026 |
23İzleyin | CVE-2026-33129İstismar yok | h3 has an observable timing discrepancy in basic auth utilsh3 · h3 · CWE-208 | Orta5,9 | — | %0,4 | 20 Mar 2026 |
21İzleyin | CVE-2026-33490İstismar yok | h3: Missing Path Segment Boundary Check in `mount()` Causes Middleware Execution on Unrelated Prefix-Matching Routesh3 · h3 · CWE-706 | Orta5,3 | — | %0,3 | 26 Mar 2026 |
- CVE-2026-3312840Planlayın
h3 has a Server-Sent Events Injection via Unsanitized Newlines in Event Stream Fields
KritikCVSS 10,0İstismar yokEPSS %1h3 · h320 Mar 2026
- CVE-2026-2352739İzleyin
h3 v1 has Request Smuggling (TE.TE) issue
KritikCVSS 9,8İstismar yokEPSS %1h3 · h315 Oca 2026
- CVE-2026-3313136İzleyin
h3 has a middleware bypass with one gadget
KritikCVSS 9,1İstismar yokEPSS %0h3 · h320 Mar 2026
- CVE-2026-3373226İzleyin
srvx is vulnerable to middleware bypass via absolute URI in request line
OrtaCVSS 6,5İstismar yokEPSS %0h3 · srvx26 Mar 2026
- CVE-2026-3312923İzleyin
h3 has an observable timing discrepancy in basic auth utils
OrtaCVSS 5,9İstismar yokEPSS %0h3 · h320 Mar 2026
- CVE-2026-3349021İzleyin
h3: Missing Path Segment Boundary Check in `mount()` Causes Middleware Execution on Unrelated Prefix-Matching Routes
OrtaCVSS 5,3İstismar yokEPSS %0h3 · h326 Mar 2026