29274 matches found
CVE-2026-56848
CVE-2026-56848 affects Node.js 22.x/24.x/26.x. The vulnerability arises from a heap-use-after-free caused by re-entrant nghttp2_session_mem_send() during nghttp2_session_mem_recv(). OSV/OpenSUSE entries show fixes: nodejs26-26.5.1-1.1 and corepack24-24.18.1-1.1 in GA media, with additional OSV De...
CVE-2026-56848
A flaw in Node.js HTTP/2 handling allows "nghttp2sessionmemsend" to be called re-entrantly while "nghttp2sessionmemrecv" is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...
curl: CVE-2026-18924: HTTP/2 server push UAF
A vulnerability was discovered in libcurl versions 8.21.0 and later, where a use-after-free issue could occur in the HTTP/2 server push functionality. The vulnerability was caused by the fact that when a pushed transfer ends, the connection's pool is not properly handled, leading to the freed...
CLSA-2026-1785380881 TuxCare security update for ws (2 CVEs)
TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.16.0-tuxcare.2...
CLSA-2026-1785380875 TuxCare security update for ws (1 CVE)
TuxCare rebuilt ws to address 1 CVE. Fixed in 6.2.1-tuxcare.2...
CLSA-2026-1785204576 TuxCare security update for postcss (1 CVE)
TuxCare rebuilt postcss to address 1 CVE. Fixed in 8.4.5-tuxcare.2...
CLSA-2026-1785117455 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 1.0.1-tuxcare.2...
CLSA-2026-1784943410 TuxCare security update for axios (2 CVEs)
TuxCare rebuilt axios to address 2 CVEs. Fixed in 0.26.1-tuxcare.2...
CLSA-2026-1784943201 TuxCare security update for postcss (1 CVE)
TuxCare rebuilt postcss to address 1 CVE. Fixed in 8.4.31-tuxcare.2...
CLSA-2026-1785204337 TuxCare security update for tmp (1 CVE)
TuxCare rebuilt tmp to address 1 CVE. Fixed in 0.0.31-tuxcare.2...
CLSA-2026-1784943211 TuxCare security update for axios (8 CVEs)
TuxCare rebuilt axios to address 8 CVEs. Fixed in 1.6.8-tuxcare.2...
CLSA-2026-1785204339 TuxCare security update for tmp (1 CVE)
TuxCare rebuilt tmp to address 1 CVE. Fixed in 0.2.3-tuxcare.2...
CLSA-2026-1785117393 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 0.2.0-tuxcare.2...
CLSA-2026-1785117388 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 0.1.4-tuxcare.2...
CLSA-2026-1785117466 TuxCare security update for immutable (2 CVEs)
TuxCare rebuilt immutable to address 2 CVEs. Fixed in 3.8.1-tuxcare.2...
CLSA-2026-1785117458 TuxCare security update for axios (1 CVE)
TuxCare rebuilt axios to address 1 CVE. Fixed in 0.24.0-tuxcare.2...
CLSA-2026-1784769600 TuxCare security update for webpack-dev-server (1 CVE)
TuxCare rebuilt webpack-dev-server to address 1 CVE. Fixed in 3.11.2-tuxcare.2...
CLSA-2026-1784769620 TuxCare security update for svelte (1 CVE)
TuxCare rebuilt svelte to address 1 CVE. Fixed in 0.3.0-tuxcare.2...