CVE-2026-5683

creationtimestamp| type| source ---|---|--- 2026-04-06 22:56:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuedmgehs2i...

CVE-2026-5685

creationtimestamp| type| source ---|---|--- 2026-04-06 22:08:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miubnrikwb2g 2026-04-06 23:22:19+00:00| seen| Telegram/F-tbnQCu7KGoJ0u4OEM4TknejxA1jNnRqA-1uSHs9aPRtPw 2026-04-30 01:37:07+00:00| seen|...

CVE-2026-39363

creationtimestamp| type| source ---|---|--- 2026-04-06 12:11:59+00:00| published-proof-of-concept| https://github.com/vitejs/vite/security/advisories/GHSA-p9ff-h696-f583 2026-04-07 21:22:19+00:00| seen| Telegram/ORzlugWNJSN1mBT3L8tDKZ1H7oYKkiEmKL9E7e5xnpgHaiU 2026-04-07 22:49:01+00:00| seen|...

CVE-2026-23139

creationtimestamp| type| source ---|---|--- 2026-04-03 15:22:19+00:00| seen| Telegram/GirSXfYk6qmo0VkezaSMDEKvqn4iGVO7FR9G1cahi8frg 2026-05-07 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260508 2026-06-01 18:00:00+00:00| seen|...

CVE-2025-43405

creationtimestamp| type| source ---|---|--- 2026-04-02 22:20:32+00:00| seen| Telegram/wWHvFepuomphlvUrhwS7vzUP2t5qXRFryLArMmzBGR2vgG4...

CVE-2025-43413

creationtimestamp| type| source ---|---|--- 2026-04-02 22:20:32+00:00| seen| Telegram/wWHvFepuomphlvUrhwS7vzUP2t5qXRFryLArMmzBGR2vgG4...

CVE-2025-43361

creationtimestamp| type| source ---|---|--- 2026-04-02 22:20:13+00:00| seen| Telegram/UFEpGV2QWu8Wd6S6IqU1LkqCMTnXzKbx5ZEOiNlH4x5jKhQ...

CVE-2025-43316

creationtimestamp| type| source ---|---|--- 2026-04-02 22:19:32+00:00| seen| Telegram/twQJKlobqCRh9RL5tSZmpMuaBSUEPIk0d1syiBwJwFL7d0...

CVE-2025-24241

creationtimestamp| type| source ---|---|--- 2026-04-02 22:15:08+00:00| seen| Telegram/A1zSU9KcM20ZRLemoMFRz3NG5DsD-KNcnO6EGaNoIwAY1a4...

CVE-2025-24246

creationtimestamp| type| source ---|---|--- 2026-04-02 22:15:08+00:00| seen| Telegram/A1zSU9KcM20ZRLemoMFRz3NG5DsD-KNcnO6EGaNoIwAY1a4...

CVE-2026-34568

creationtimestamp| type| source ---|---|--- 2026-04-01 22:07:13+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-x7wh-g25g-53vg 2026-04-01 22:27:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihqezueu32j 2026-04-01 23:27:52+00:00| seen|...

EUVD-2026-17174

A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...

ALPINE-CVE-2026-21713

A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...

UBUNTU-CVE-2026-21713

A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...

CVE-2026-21713

A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...

CVE-2026-32287 affecting package telegraf for versions less than 1.29.4-22

CVE-2026-32287 affecting package telegraf for versions less than 1.29.4-22. A patched version of the package is available...

CVE-2026-33542 affecting package telegraf for versions less than 1.29.4-22

CVE-2026-33542 affecting package telegraf for versions less than 1.29.4-22. An upgraded version of the package is available that resolves this issue...

CVE-2026-4645 affecting package telegraf for versions less than 1.29.4-22

CVE-2026-4645 affecting package telegraf for versions less than 1.29.4-22. A patched version of the package is available...

GHSA-F27W-VCWJ-C954

creationtimestamp| type| source ---|---|--- 2026-03-30 15:22:38+00:00| seen| Telegram/rgowYjXIbIqHAY83QR77NdcMiEs7Q8IlbaGHk6-omsHWj8...

Node.js 安全漏洞

Node.js is an open-source, cross-platform JavaScript runtime environment developed by the Node.js community. Versions 20.x, 22.x, 24.x, and 25.x of Node.js have security vulnerabilities. These vulnerabilities stem from HMAC verification using a comparison that does not maintain constant time, whi...