Lucene search
+L

11 matches found

osv_suse
osv_suse
•added 2026/04/13 10:59 a.m.•21 views

SUSE-SU-2026:21181-1 Security update for nodejs24

This update for nodejs24 fixes the following issues: Update to version 24.14.1. Security issues fixed: - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request bsc1260494. - CVE-2026-21716:...

7.5CVSS6.1AI score0.25044EPSS
SaveExploits0References19
osv_bit
osv_bit
•added 2026/04/06 7:58 a.m.•31 views

BIT-NODE-MIN-2026-21712

A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process...

6.5CVSS6.8AI score0.0032EPSS
SaveExploits0References3
osv_bit
osv_bit
•added 2026/04/06 7:58 a.m.•26 views

BIT-NODE-2026-21712

A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process...

6.5CVSS6.8AI score0.0032EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/03/31 10:32 p.m.•18 views

CVE-2026-21712

A flaw was found in Node.js. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a malformed Internationalized Domain Name IDN to the url.format function. When processed, this malformed input triggers an internal error, causing the Node.js application to crash. Thi...

6.5CVSS6.7AI score0.0032EPSS
SaveExploits0References5
osv_azl
osv_azl
•added 2026/03/30 4:16 p.m.•16 views

AZL-81101 CVE-2026-21712 affecting package nodejs24 for versions less than 24.14.1-1

A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process...

6.5CVSS6.8AI score0.0032EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/03/30 4:16 p.m.•19 views

UBUNTU-CVE-2026-21712

A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process...

6.5CVSS6.8AI score0.0032EPSS
SaveExploits0References3
Mend
Mend
•added 2026/03/30 3:13 p.m.•6 views

CVE-2026-21712

A flaw in Node.js URL processing causes an assertion failure in native code when "url.format" is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process...

6.9CVSS6.8AI score0.0032EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/03/30 3:13 p.m.•12 views

CVE-2026-21712

A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process...

5.7CVSS6.8AI score0.0032EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2026/03/30 3:13 p.m.•19 views

CVE-2026-21712

A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process...

6.5CVSS6.8AI score0.0032EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•5 views

CVE-2026-21712: Improper Input Validation

A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process...

6.5CVSS6.8AI score0.0032EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/03/25 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-21712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN...

6.5CVSS6.7AI score0.0032EPSS
SaveExploits0References3
Rows per page
Query Builder