Threats Tagged 'ubuntu-cve-2026-87029'
View all threats tagged with 'ubuntu-cve-2026-87029'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ubuntu-cve-2026-87029'
Click on any threat for detailed analysis and mitigation recommendations
Node.js HTTP client library undici versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1 contain a vulnerability in the decompress interceptor. This interceptor forwards decompressed response data from zlib stream event callbacks without catching exceptions thrown asynchronously. As a result, if a downstream handler throws an exception asynchronously (e.g., the built-in dump interceptor when a response exceeds its maximum size), the exception is uncaught and terminates the Node.js process. A malicious or compromised HTTP server can exploit this by sending a small compressed response that decompresses to a size exceeding the limit, causing a client crash. The issue is fixed in versions 7.30.1 and 8.12.2 and later. Join the discussion | GCVE Database | 10/16/2026, 00:00:00 UTC Added: 10/22/2026, 17:16:57 UTC |
Showing 1 to 1 of 1 result