Lucene search
+L

7 matches found

Cvelist
Cvelist
•added 2026/07/01 11:42 a.m.•64 views

CVE-2026-14181 @fastify/middie standalone engine vulnerable to Denial of Service via malformed percent-encoded paths

@fastify/middie versions 9.1.0 through 9.3.2 fail to guard the URL normalization step used by the standalone engine when incoming request paths contain malformed percent-encoded sequences. Inputs such as an incomplete percent escape or a truncated multibyte sequence cause the underlying decoder t...

7.5CVSS0.005EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/01 11:42 a.m.•66 views

CVE-2026-14181

CVE-2026-14181 affects @fastify/middie versions 9.1.0 through 9.3.2, where the URL normalization step in the standalone engine fails to sanitize malformed percent‑encoded sequences. Inputs such as incomplete escapes or truncated multibyte sequences cause the underlying decoder to throw synchronou...

7.5CVSS5.8AI score0.005EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/01 11:42 a.m.•22 views

CVE-2026-14181 @fastify/middie standalone engine vulnerable to Denial of Service via malformed percent-encoded paths

@fastify/middie versions 9.1.0 through 9.3.2 fail to guard the URL normalization step used by the standalone engine when incoming request paths contain malformed percent-encoded sequences. Inputs such as an incomplete percent escape or a truncated multibyte sequence cause the underlying decoder t...

7.5CVSS5.8AI score0.005EPSS
SaveExploits0References2
Mend
Mend
•added 2026/07/01 11:42 a.m.•4 views

CVE-2026-14181

@fastify/middie versions 9.1.0 through 9.3.2 fail to guard the URL normalization step used by the standalone engine when incoming request paths contain malformed percent-encoded sequences. Inputs such as an incomplete percent escape or a truncated multibyte sequence cause the underlying decoder t...

8.7CVSS5.8AI score0.005EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/07/01 11:42 a.m.•28 views

EUVD-2026-40947

@fastify/middie versions 9.1.0 through 9.3.2 fail to guard the URL normalization step used by the standalone engine when incoming request paths contain malformed percent-encoded sequences. Inputs such as an incomplete percent escape or a truncated multibyte sequence cause the underlying decoder t...

7.5CVSS5.8AI score0.005EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/01 12:00 a.m.•7 views

CVE-2026-14181: Uncaught Exception

@fastify/middie versions 9.1.0 through 9.3.2 fail to guard the URL normalization step used by the standalone engine when incoming request paths contain malformed percent-encoded sequences. Inputs such as an incomplete percent escape or a truncated multibyte sequence cause the underlying decoder t...

7.5CVSS5.8AI score0.005EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2009/06/16 12:00 a.m.•13 views

StoneTrip Ston3d Products Detection (Windows SMB Login)

This script detects the installed version of StoneTrip Ston3d products application. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

7.3AI score
SaveExploits0
Rows per page
Query Builder