Lucene search
K

7 matches found

NVD
NVD
added yesterday6 views

CVE-2026-48618

A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat. This can lead to confidentiality impact or bypass of the intended security boundary under...

7.7CVSS0.00609EPSS
Exploits0References1
OSV
OSV
added yesterday3 views

ALPINE-CVE-2026-48618

A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat. This can lead to confidentiality impact or bypass of the intended security boundary under...

6.5CVSS7.1AI score0.00609EPSS
Exploits0References1
Debian CVE
Debian CVE
added yesterday7 views

CVE-2026-48618

A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat. This can lead to confidentiality impact or bypass of the intended security boundary under...

7.7CVSS6.7AI score0.00609EPSS
Exploits0
Cvelist
Cvelist
added yesterday29 views

CVE-2026-48618

A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat. This can lead to confidentiality impact or bypass of the intended security boundary under...

7.7CVSS0.00609EPSS
Exploits0References1
Hacker One
Hacker One
added 2026/04/21 10:11 p.m.6 views

Node.js: Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat

Vulnerability description not provided...

7.7CVSS5.8AI score0.00609EPSS
Exploits0
OSV
OSV
added 2022/10/29 2:15 a.m.3 views

AZL-38722 CVE-2022-42916 affecting package tensorflow for versions less than 2.16.1-1

In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly instead of using an insecure cleartext HTTP step even when HTTP is provided in the URL. This mechanism could be bypassed if the host nam...

7.5CVSS6.7AI score0.01644EPSS
Exploits0References1
CNVD
CNVD
added 2015/07/09 12:0 a.m.2 views

Joyent Node.js 'unicode.cc' Denial of Service Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

7.5CVSS6.7AI score0.02995EPSS
Exploits0References1
Rows per page
Query Builder