147266 matches found
CVE-2026-114056
ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify edge type lightweight and unique schema flags without UPDATESCHEMA permission. Attackers can send a bare ALTER TYPE edgeType WITH lightweight = true command over the HTTP, gRPC...
CLEANSTART-2026-QX63869 HTTP parser in all current versions of Node
Security vulnerability affects the nodejs-24 package. The HTTP parser in all current versions of Node...
CLEANSTART-2026-XC13093 Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service
Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service...
CLEANSTART-2026-WZ77365 Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service
Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service...
CLEANSTART-2026-ST98216 Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service
Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service...
CLEANSTART-2026-EG08504 attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames
CVE-2023-45288 affects multiple packages. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. See references for individual vulnerability details...
CLEANSTART-2026-QQ59156 Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service
Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service...
CLEANSTART-2026-BX90561 Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service
Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service...
CLEANSTART-2026-BU08584 Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service
Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service...
CLEANSTART-2026-YO77738 HTTP request smuggling in Node
Security vulnerability affects the nodejs-24 package. HTTP request smuggling in Node...
CLEANSTART-2026-XE23259 Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons
Security vulnerability affects the nodejs-24 package. Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons...
CLEANSTART-2026-GA51993 llhttp parser in the http module in Node v18
Security vulnerability affects the nodejs-24 package. The llhttp parser in the http module in Node v18...
CLEANSTART-2026-NQ17832 Undici is an HTTP/1
Security vulnerability affects the nodejs-24 package. Undici is an HTTP/1...
CLEANSTART-2026-AU79702 Undici is an HTTP/1
Security vulnerability affects the nodejs-24 package. Undici is an HTTP/1...
CLEANSTART-2026-TM79261 Undici is an HTTP/1
Security vulnerability affects the nodejs-24 package. Undici is an HTTP/1...
CLEANSTART-2026-GV93850 team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling
Security vulnerability affects the nodejs-24 package. The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling...
CVE-2026-114062 SvelteKit before 3.0.0 SSRF via Redirects in Server-Side Self-Fetch Fallbacks
SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. Attackers can manipulate the Host or forwarded headers to point fallback requests at their server,...
EUVD-2026-107013
SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. Attackers can manipulate the Host or forwarded headers to point fallback requests at their server,...
CVE-2026-114062
SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. Attackers can manipulate the Host or forwarded headers to point fallback requests at their server,...
CVE-2026-114062 SvelteKit before 3.0.0 SSRF via Redirects in Server-Side Self-Fetch Fallbacks
SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. Attackers can manipulate the Host or forwarded headers to point fallback requests at their server,...