@27works/posto (>=1.0.0, <=2.0.2), @abc45676/mailer (1.0.0) +274 more potentially affected by CVE-2026-59887 via linkify-it (>=5.0.0, <=5.0.1)

🗓️ 21 Jul 2026 19:06:09Reported by Vulners OSVType

vulnersosv🔗 osv.dev👁 3 Views

CVE-2026-59887 affects linkify-it versions 5.0.0-5.0.1 via regex-based DoS and XSS in NPM packages.

Reporter	Title	Published	Views	Family All 54
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to linkify-it and httpcore5 (CVE-2026-59887, CVE-2026-54428 & CVE-2026-54399)	31 Jul 202614:58	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilitie	24 Jul 202615:43	–	ibm
IBM Security Bulletins	Security Bulletin: linkify-it-5.0.1.tgz security vulnerability in Content Cortex(CCx) reported for GenAI ICN Plugin	12 Aug 202612:58	–	ibm
IBM Security Bulletins	Security Bulletin: Cyber Fraud includes components with multiple known vulnerabilities	6 Aug 202613:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	22 Jul 202617:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Decision Intelligence Client Managed Software (Formerly Known as IBM Automation Decision Services) for July 2026- Multiple CVEs addressed	11 Aug 202608:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities	30 Jul 202608:39	–	ibm
ATTACKERKB	CVE-2026-59887	8 Jul 202615:58	–	attackerkb
Chainguard	CVE-2026-59887 vulnerabilities	27 Jul 202620:25	–	cgr
Circl	CVE-2026-59887	8 Jul 202619:21	–	circl

27 Jul 2026 21:59Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

EPSS0.00342

SSVC

linkify-it CVE-2026-59887 XSS NPM transitive dependency regex injection denial of service