CVE-2026-21713: Observable Timing Discrepancy

A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...

CVE-2026-21715: Incorrect Permission Assignment for Critical Resource

A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync.native without the required read permission checks, while all comparable filesystem functions correctly enforce them. As a result, code running under --permission with restricted --allow-fs-read can still use...

Node.js 安全漏洞

Node.js is an open-source, cross-platform JavaScript runtime environment developed by the Node.js community. Versions 20.x, 22.x, 24.x, and 25.x of Node.js have security vulnerabilities. These vulnerabilities stem from HMAC verification using a comparison that does not maintain constant time, whi...

CVE-2026-32538 WordPress SMTP Mailer plugin <= 1.1.24 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Noor Alam SMTP Mailer smtp-mailer allows Retrieve Embedded Sensitive Data.This issue affects SMTP Mailer: from n/a through = 1.1.24...

CVE-2026-27651

creationtimestamp| type| source ---|---|--- 2026-03-24 23:02:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtoniqce52x 2026-03-25 03:00:09+00:00| seen| https://my.f5.com/manage/s/article/K000160366 2026-03-25 14:35:13+00:00| seen|...

CVE-2026-3912

creationtimestamp| type| source ---|---|--- 2026-03-24 22:44:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtnm24gdn2g...

CVE-2026-4433

creationtimestamp| type| source ---|---|--- 2026-03-24 22:24:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtmjja5tt2i 2026-03-25 14:35:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhvcqq6ubg2b...

CVE-2026-29839

creationtimestamp| type| source ---|---|--- 2026-03-24 22:20:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtmauqcoz27...

CVE-2026-33215

creationtimestamp| type| source ---|---|--- 2026-03-24 22:14:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtlxhblnx2o...

CVE-2026-24152

creationtimestamp| type| source ---|---|--- 2026-03-24 22:01:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl7zq66w2p 2026-03-24 22:21:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtmcsde5e2n 2026-03-26 02:00:13+00:00| seen|...

CVE-2026-24151

creationtimestamp| type| source ---|---|--- 2026-03-24 22:01:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl7t433a2r 2026-03-24 22:07:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtljvmjbp2s 2026-03-26 00:00:14+00:00| seen|...

CVE-2026-24150

creationtimestamp| type| source ---|---|--- 2026-03-24 22:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl5zpwak2m 2026-03-24 22:39:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtnd3pcxn2n 2026-03-25 23:40:08+00:00| seen|...

CVE-2026-24141

creationtimestamp| type| source ---|---|--- 2026-03-24 22:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl5swrys2m 2026-03-24 22:12:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtlsjgc2l2o...

CVE-2026-24159

creationtimestamp| type| source ---|---|--- 2026-03-24 22:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl5merbx2t 2026-03-24 22:34:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtn25ai5f2d 2026-03-31 09:40:09+00:00| seen|...

CVE-2026-3889

creationtimestamp| type| source ---|---|--- 2026-03-24 21:54:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtktfglie24 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325...

CVE-2026-33511

creationtimestamp| type| source ---|---|--- 2026-03-24 19:16:30+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33511...

CVE-2026-33345

creationtimestamp| type| source ---|---|--- 2026-03-24 19:16:29+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33345...

CVE-2026-33419

creationtimestamp| type| source ---|---|--- 2026-03-24 19:16:29+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33419 2026-03-29 01:47:50+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mi5zpyln2s2g...

CVE-2026-33635

creationtimestamp| type| source ---|---|--- 2026-03-24 19:13:41+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-pv9c-9mfh-hvxq...

CVE-2026-33872

creationtimestamp| type| source ---|---|--- 2026-03-24 16:25:35+00:00| seen| https://bsky.app/profile/tylerayoung.com/post/3mhsygvr4ds2l 2026-03-25 02:28:39+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mhu25cufb626 2026-03-27 21:23:14+00:00| published-proof-of-concept|...