Threats Tagged 'cve-2026-58042'
View all threats tagged with 'cve-2026-58042'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-58042'
Click on any threat for detailed analysis and mitigation recommendations
0 A security update for SUSE's nodejs24 addresses multiple vulnerabilities including SSRF bypass, HTTP/2 memory limit bypass, permission model flaws, heap-use-after-free, HTTPS agent issues, DNS resolution errors, request smuggling, and crash conditions. The update upgrades nodejs24 to version 24.18.1 to fix these issues. Join the discussion | GCVE Database | 08/10/2026, 09:28:21 UTC Added: 09/17/2026, 01:58:58 UTC |
0 A security update for SUSE's nodejs22 addresses multiple vulnerabilities including SSRF bypass, HTTP/2 memory limit bypass, permission model flaws, heap-use-after-free, hostname verification bypass, DNS resolution issues, request smuggling, and crash conditions. The update advances to version 22.23.2 to fix these issues. No CVSS score is provided, but the severity is assessed as high due to the range and nature of the vulnerabilities. Join the discussion | GCVE Database | 08/10/2026, 09:02:01 UTC Added: 09/17/2026, 01:58:58 UTC |
A vulnerability in Node.js versions 22.23.1, 24.18.0, and 26.5.0 exists where the dns.resolveAny() function aborts the Node.js process if a DNS response contains more than 256 A records. This can be repeatedly triggered to cause a denial of service condition. The issue is classified as CWE-400, indicating uncontrolled resource consumption. The CVSS v3.0 score is 5.9, reflecting a medium severity impact primarily affecting availability. Join the discussion | CVE Database V5 | 08/04/2026, 00:49:58 UTC Added: 08/04/2026, 01:03:31 UTC |
0 These are all security issues fixed in the nodejs26-26.5.1-1.1 package on the GA media of openSUSE Tumbleweed. Join the discussion | GCVE Database | 08/03/2026, 00:00:00 UTC Added: 08/07/2026, 05:56:37 UTC |
0 This update includes the following RPMs: nodejs24: * nodejs24-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-bin-24.18.1-0.1.hum1 (noarch) * nodejs24-devel-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-docs-24.18.1-0.1.hum1 (noarch) * nodejs24-full-i18n-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-libs-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-npm-11.16.0-1.24.18.1.0.1.hum1 (noarch) * nodejs24-npm-bin-24.18.1-0.1.hum1 (noarch) * v8-13.6-devel-13.6.233.17-1.24.18.1.0.1.hum1 (aarch64, x86_64) * nodejs24-24.18.1-0.1.hum1.src (src) Join the discussion | GCVE Database | 07/30/2026, 03:14:48 UTC Added: 07/31/2026, 15:39:35 UTC |
Showing 1 to 5 of 5 results