3 matches found
PT-2026-65649
Impact The relay's reconnect handler forwards every RECONNECT REQUEST to the host without deduplication or a size cap on the pendingReconnects map, unlike the connect flow which guards against this with maxPendingConnections. An unauthenticated attacker who knows a valid session ID can send...
8.6CVSS5.9AI score
SaveExploits0References3
PT-2026-28517
Name of the Vulnerable Software and Affected Versions srvx versions prior to 0.11.13 Description srvx is a universal server based on web standards. A discrepancy in pathname parsing within srvx's FastURL component allows bypassing middleware on the Node.js adapter. This occurs when a raw HTTP...
4.8CVSS5.9AI score0.00255EPSS
SaveExploits0References9
20