CVE-2026-97705

The Moleculer microservices framework for Node.js is vulnerable to an unauthenticated Denial of Service (DoS) in versions prior to 0.14.36 and 0.15.2 . The root cause is located in the Parser._write function within src/transporters/tcp/parser.js, where Buffer.prototype.readInt32BE is used to read...

PT-2026-137109

Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36 and 0.15.2, Parser. write in src/transporters/tcp/parser.js used Buffer.prototype.readInt32BE to read a signed packet length, so a remote unauthenticated peer could supply a negative value that caused...

Moleculer Microservices Project Detection

Moleculer microservice was able to be accessed with no required authentication in place. !/usr/bin/env python3 -- coding: utf-8 -- """Moleculer microservice was able to be accessed with no required authentication in place.""" from kittysploit import from lib.protocols.http.httpclient import...

amts-prelude (>=0.2.2, <=0.2.4), async-nats (>=0.9.0, <=0.10.1) +8 more potentially affected by unknown CVE via nats (>=0.9.18, <=0.17.0)

nats CARGO version =0.9.18, =0.2.2, =0.9.0, =0.3.0, =0.1.0, =0.17.0, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.10.4 - wasmcloud-nats-kvcache 0.5.1 Source cves: unknown CVE Source advisory: GHSA-WVC4-J7G5-4F79...

amts-prelude (>=0.2.2, <=0.2.4), async-nats (>=0.9.0, <=0.10.1) +8 more potentially affected by unknown CVE via nats (>=0.9.18, <=0.17.0)

nats CARGO version =0.9.18, =0.2.2, =0.9.0, =0.3.0, =0.1.0, =0.17.0, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.10.4 - wasmcloud-nats-kvcache 0.5.1 Source cves: unknown CVE Source advisory: OSV:GHSA-WVC4-J7G5-4F79...

moleculer (>=0.3.0, <=0.3.5), nestjs-nats-connector (>=0.1.0, <=0.3.0) potentially affected by unknown CVE via async-nats (>=0.9.18, <=0.10.1)

async-nats CARGO version =0.9.18, =0.3.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: GHSA-F5V5-CCQC-6W36...

moleculer (>=0.3.0, <=0.3.5), nestjs-nats-connector (>=0.1.0, <=0.3.0) potentially affected by unknown CVE via async-nats (>=0.9.18, <=0.10.1)

async-nats CARGO version =0.9.18, =0.3.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-F5V5-CCQC-6W36...

moleculer (>=0.3.0, <=0.3.5), nestjs-nats-connector (>=0.1.0, <=0.3.0) potentially affected by unknown CVE via async-nats (>=0.9.18, <=0.10.1)

async-nats CARGO version =0.9.18, =0.3.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0027...

amts-prelude (>=0.2.2, <=0.2.4), async-nats (>=0.9.0, <=0.10.1) +8 more potentially affected by unknown CVE via nats (>=0.9.18, <=0.17.0)

nats CARGO version =0.9.18, =0.2.2, =0.9.0, =0.3.0, =0.1.0, =0.17.0, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.10.4 - wasmcloud-nats-kvcache 0.5.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0029...

moleculer-rabbitmq-extend-delay (1.1.12) potentially affected by CVE-2022-21231 via deep-get-set (1.1.1)

deep-get-set NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on deep-get-set and may be impacted: - moleculer-rabbitmq-extend-delay 1.1.12 Source cves: CVE-2022-21231 Source advisory: OSV:GHSA-MJJJ-6P43-VHHV...

moleculer-rabbitmq-extend-delay (1.1.12) potentially affected by CVE-2022-21231 via deep-get-set (1.1.1)

deep-get-set NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on deep-get-set and may be impacted: - moleculer-rabbitmq-extend-delay 1.1.12 Source cves: CVE-2022-21231 Source advisory: GHSA-MJJJ-6P43-VHHV...

moleculer-rabbitmq-extend-delay (1.1.12) potentially affected by CVE-2020-7715 +1 more via deep-get-set (1.1.1)

deep-get-set NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on deep-get-set and may be impacted: - moleculer-rabbitmq-extend-delay 1.1.12 Source cves: CVE-2020-7715, CVE-2022-21231 Source advisory: SNYK:JS-DEEPGETSET-2342655...

learning_locker (2.0.7), moleculer-antivirus (0.1.0) potentially affected by CVE-2020-7613 via clamscan (0.8.5)

clamscan NPM version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on clamscan and may be impacted: - learninglocker 2.0.7 - moleculer-antivirus 0.1.0 Source cves: CVE-2020-7613 Source advisory: MEND:CVE-2020-7613...