CVE-2026-32887 vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

CVE-2026-32887 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse, langfuse-fips...

CVE-2026-32887

The Connected document details a concurrency vulnerability in the Effect ecosystem where AsyncLocalStorage (ALS) context is not properly propagated across fibers in a web handler under concurrent load. Root cause: a scheduler drains multiple fiber continuations in a single drain cycle, causing AL...

@2digits/tlo-mcp (>=0.1.0 <=0.1.10), @6qat/tcp-connection (>=0.2.6 <=0.2.9) +632 more potentially affected by CVE-2026-32887 via effect (>=3.0.0 <=3.1.6)

effect NPM version =3.0.0, =0.1.0, =0.2.6, =1.0.0, =0.1.0-alpha.1, =0.0.1, =0.1.0-alpha.1, =0.0.1, =0.0.5, =0.0.1, =0.2.1, =0.5.0, =0.7.0 and more Source cves: CVE-2026-32887 Source advisory: SNYK:JS-EFFECT-15746380...

@2digits/tlo-mcp (>=0.1.0 <=0.1.10), @6qat/tcp-connection (>=0.2.6 <=0.2.9) +849 more potentially affected by CVE-2026-32887 via effect (>=2.0.0-next.10 <=3.1.6)

effect NPM version =2.0.0-next.10, =0.1.0, =0.2.6, =1.0.0, =0.1.0-alpha.1, =0.0.1, =0.1.0-alpha.1, =0.0.1, =0.0.5, =0.0.1, =0.1.0, =0.2.1, =0.4.2 - @arvkonstantin/framework-provider-local-pg =3.4.3 - @awstin/effect-zero-v3 =0.1.0 and more Source cves: CVE-2026-32887 Source advisory:...

CVE-2026-32887

creationtimestamp| type| source ---|---|--- 2026-03-20 18:23:05+00:00| published-proof-of-concept| https://github.com/Effect-TS/effect/security/advisories/GHSA-38f7-945m-qr2g 2026-03-21 01:24:25+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhjuoruyag2h 2026-03-21...

EUVD-2022-32887

Malicious code in bioql PyPI...

CVE-2023-32887

In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161837; Issue ID: MOLY01161837 MSV-892...

CVE-2022-32887

The issue was addressed with improved memory handling. This issue is fixed in iOS 16. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32887

creationtimestamp| type| source ---|---|--- 2025-05-06 19:21:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15204...

CVE-2025-32887

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. A command channel includes the next hop. which can be intercepted and used to break frequency hopping...

CVE-2025-32887

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. A command channel includes the next hop. which can be intercepted and used to break frequency hopping...

CVE-2024-32887

A reflected Cross-site scripting XSS vulnerability was found in Rubygem Sidekiq. The value of the substr parameter is reflected in the response without any encoding, allowing an attacker to inject Javascript code into the response of the application. An attacker could exploit this to target the...

CVE-2024-32887 Reflected XSS in sidekiq

Sidekiq is simple, efficient background processing for Ruby. Sidekiq is reflected XSS vulnerability. The value of substr parameter is reflected in the response without any encoding, allowing an attacker to inject Javascript code into the response of the application. An attacker could exploit it t...

CVE-2023-32887

creationtimestamp| type| source ---|---|--- 2024-01-03 01:32:02+00:00| seen| https://t.me/cibsecurity/74137 2024-01-22 14:42:03+00:00| seen| https://t.me/ctinow/171183 2025-06-16 20:37:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18537...

CVE-2023-32887

In Modem IMS Stack, a missing bounds check can cause a system crash leading to remote denial of service with no authentication or user interaction required. Affected: Modem IMS Stack (vendor/product not explicitly named in the document set). Root cause: out-of-bounds condition in the modular stac...

CVE-2023-32887

In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161837; Issue ID: MOLY01161837 MSV-892...

CVE-2022-32887

The issue was addressed with improved memory handling. This issue is fixed in iOS 16. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32887

The issue was addressed with improved memory handling. This issue is fixed in iOS 16. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32887

CVE-2022-32887 is an Apple iOS kernel-privilege escalation exposed by a memory handling issue. Multiple sources describe it as a local vulnerability that could allow an app to execute arbitrary code with kernel privileges, with a CVSS v3.1 base score of 7.8 (high) and requiring user interaction. ...