Threats Tagged 'cve-2026-58044'
View all threats tagged with 'cve-2026-58044'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-58044'
Click on any threat for detailed analysis and mitigation recommendations
0 A security update for SUSE's nodejs24 addresses multiple vulnerabilities including SSRF bypass, HTTP/2 memory limit bypass, permission model flaws, heap-use-after-free, HTTPS agent issues, DNS resolution errors, request smuggling, and crash conditions. The update upgrades nodejs24 to version 24.18.1 to fix these issues. Join the discussion | GCVE Database | 08/10/2026, 09:28:21 UTC Added: 09/17/2026, 01:58:58 UTC |
0 A security update for SUSE's nodejs22 addresses multiple vulnerabilities including SSRF bypass, HTTP/2 memory limit bypass, permission model flaws, heap-use-after-free, hostname verification bypass, DNS resolution issues, request smuggling, and crash conditions. The update advances to version 22.23.2 to fix these issues. No CVSS score is provided, but the severity is assessed as high due to the range and nature of the vulnerabilities. Join the discussion | GCVE Database | 08/10/2026, 09:02:01 UTC Added: 09/17/2026, 01:58:58 UTC |
CVE-2026-58044 is a low severity vulnerability in Node.js HTTP client affecting supported release lines 22, 24, and 26. It involves HTTP request smuggling due to request desynchronization in forwarding proxies that rebuild outbound headers from visible IncomingMessage headers while reusing backend connections. The flaw allows certain headers, including Content-Length, to be omitted from userland header objects but still used internally for HTTP framing, potentially causing inconsistencies. Join the discussion | CVE Database V5 | 08/04/2026, 00:49:58 UTC Added: 08/04/2026, 01:03:31 UTC |
0 These are all security issues fixed in the nodejs26-26.5.1-1.1 package on the GA media of openSUSE Tumbleweed. Join the discussion | GCVE Database | 08/03/2026, 00:00:00 UTC Added: 08/07/2026, 05:56:37 UTC |
0 This update includes the following RPMs: nodejs24: * nodejs24-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-bin-24.18.1-0.1.hum1 (noarch) * nodejs24-devel-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-docs-24.18.1-0.1.hum1 (noarch) * nodejs24-full-i18n-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-libs-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-npm-11.16.0-1.24.18.1.0.1.hum1 (noarch) * nodejs24-npm-bin-24.18.1-0.1.hum1 (noarch) * v8-13.6-devel-13.6.233.17-1.24.18.1.0.1.hum1 (aarch64, x86_64) * nodejs24-24.18.1-0.1.hum1.src (src) Join the discussion | GCVE Database | 07/30/2026, 03:14:48 UTC Added: 07/31/2026, 15:39:35 UTC |
Showing 1 to 5 of 5 results