CWE-1119 vulnerabilities

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	3.3	EPSS 0.2%	CVE-2026-56847nodejs node · Excessive Use of Unconditional Branching Low3.3EPSS 0.2%2026-07-30CVE Database V5CVE-2026-56847 A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and 26.x. EPSS 0.2%Vulnerability CWE-1119	CVE Database V5	2026-07-30
Medium	5.5	EPSS 0.2%	CVE-2026-21500InternationalColorConsortium iccDEV · Improper Input Validation Medium5.5EPSS 0.2%2026-01-07CVE Database V5CVE-2026-21500 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to stack overflow in the XML calculator macro expansion. This issue has been patched in version 2.3.1.2. EPSS 0.2%Vulnerability CWE-20	CVE Database V5	2026-01-07

Page 1 of 1 · 1 duplicate CVE record merged