267508 matches found
CLEANSTART-2026-LZ46216 fast-uri is a URI parser for Node
Security vulnerability affects the langfuse package. fast-uri is a URI parser for Node...
CLEANSTART-2026-SR09955 fast-uri is a URI parser for Node
Security vulnerability affects the langfuse package. fast-uri is a URI parser for Node...
CLEANSTART-2026-MI22504 flaw in Node
Security vulnerability affects the apache-superset package. A flaw in Node...
CLEANSTART-2026-VT26108 memory leak occurs in Node
Security vulnerability affects the apache-superset package. A memory leak occurs in Node...
CLEANSTART-2026-GV36005 We have identified a bug in Node
Security vulnerability affects the apache-superset package. We have identified a bug in Node...
CLEANSTART-2026-ZW37731 vulnerability has been identified in Node
Security vulnerability affects the apache-superset package. A vulnerability has been identified in Node...
CLEANSTART-2026-KY64095 flaw in Node
Security vulnerability affects the apache-superset package. A flaw in Node...
CLEANSTART-2026-NK73842 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
Security vulnerability affects the argo-workflows package. Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript...
CLEANSTART-2026-ZJ53876 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
Security vulnerability affects the argo-workflows package. Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript...
CLEANSTART-2026-IQ33916 compression is a Node
Security vulnerability affects the argo-workflows package. compression is a Node...
CLEANSTART-2026-MW03453 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
Security vulnerability affects the argo-workflows package. Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript...
CLEANSTART-2026-LK90655 Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node
Security vulnerability affects the grafana-alloy package. Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node...
PT-2026-102937
Name of the Vulnerable Software and Affected Versions LightLLM versions prior to 1.2.1 Description A memory exhaustion issue exists in the NCCL control channel when the software is started with the --pd trans mode nccl configuration. Unauthenticated attackers can exploit this by calling the expos...
PT-2026-108360
Security vulnerability affects the langfuse package. undici's experimental WebSocketStream client crashes the whole Node...
PT-2026-108594
Security vulnerability affects the argo-workflows package. Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript...
WS-2026-0106
@hono/node-server 1.19.10 before 2.1.3: serveStatic decodes the already-decoded request path a second time, so a crafted percent-encoded path bypasses middleware bound to the static path. The 1.x line is not fixed. GHSA-rmxm-3fg6-px4f...
@1mcp/agent (>=0.39.0-beta.4, <=0.39.5), @aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3) +345 more potentially affected by unknown CVE via @hono/node-server (>=2.0.0, <=2.1.1)
@hono/node-server NPM version =2.0.0, =0.39.0-beta.4, =0.1.0, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.4.0, =0.8.5, =0.0.1-alpha.0, =0.0.1-alpha.8, =0.0.1-alpha.0, =0.0.1-alpha.47, =0.0.1-alpha.1, =0.0.1-alpha.94 and more Source cves: unknown CVE Source advisory: MEND:WS-2026-0106...
CVE-2026-103042: Allocation of Resources Without Limits or Throttling
LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pdtransmode nccl, allowing unauthenticated attackers to exhaust KV-transfer worker memory. Attackers can call the exposedsetvalue method to store unbounded key-value pairs without siz...