Products: 2
Vulnerabilities: 8
Known Exploited: 0
0
Critical Level Threats
0
High Level Threats
8
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-114129
stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service
Last Modified: Oct 28, 2026
Published: Oct 21, 2026
CVE-2026-104183
stream-json: Prototype pollution: Assembler writes this.current[this.key] on plain objects
Last Modified: Oct 01, 2026
Published: Oct 01, 2026
CVE-2026-104182
stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk
Last Modified: Oct 05, 2026
Published: Oct 01, 2026
CVE-2026-71429
stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)
Last Modified: Sep 04, 2026
Published: Sep 03, 2026
CVE-2026-71498
node-re2: Out-of-bounds heap read in `replace`/`split` via a `Buffer` ending in a truncated multi-byte UTF-8 character → adjacent heap memory disclosed to JavaScript
Last Modified: Aug 07, 2026
Published: Aug 06, 2026
Items Per Page
