Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/28 7:26 a.m.16 views

MGASA-2026-0071 Updated nodejs packages fix security vulnerabilities

Incomplete fix for CVE-2026-21637: loadSNI in tlswrap.js lacks try/catch leading to Remote DoS. CVE-2026-21637 Denial of Service via proto header name in req.headersDistinct Uncaught TypeError crashes Node.js process. CVE-2026-21710 Timing side-channel in HMAC verification via memcmp in...

7.5CVSS5.9AI score0.26356EPSS
SaveExploits0References3
Rows per page
Query Builder