Node.js

Major Node.js Security Flaws: Millions of Apps Could Be Vulnerable CVE-2024-21892 Node.js Security Update Server Crash Vulnerability

CVE-2024-21892 Node.js Security Update Server Crash Vulnerability

Major Node.js Security Flaws: Millions of Apps Could Be Vulnerable

Do Son February 15, 2024

Node.js, the popular JavaScript runtime environment used by millions of developers worldwide, has recently issued security updates...

Node.js is vulnerable to HTTP/2 rapid reset zero-day vulnerability CVE-2023-44487 Node.js CVE-2023-44487

Node.js CVE-2023-44487

Node.js is vulnerable to HTTP/2 rapid reset zero-day vulnerability CVE-2023-44487

Do Son October 15, 2023

Node.js is a popular JavaScript runtime environment that is used to build scalable and performant web applications...

Multiple Critical Security Vulnerabilities Found in Node.js CVE-2023-32002

CVE-2023-32002

Multiple Critical Security Vulnerabilities Found in Node.js

Do Son August 10, 2023

Node.js is a popular JavaScript runtime environment that is used to build a wide variety of applications,...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-102255CVSS 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
Admin intel📅 Updated: Oct 9, 2026
CVE-2026-105133CVSS 6.9
A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file...
Admin intel📅 Updated: Oct 9, 2026
CVE-2023-22894CVSS 4.9
Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2016-3081CVSS 8.1
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled,...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2015-3306CVSS 10.0
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2015-5477CVSS 7.5
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2021-3199CVSS 9.8
Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2026-94504CVSS 7.2
Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the...
Admin intel📅 Updated: Oct 7, 2026

CVE-2026-107824CVSS 9.3
x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality...
📅 Updated: Oct 9, 2026
CVE-2026-108109CVSS 9.3
PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows...
📅 Updated: Oct 9, 2026
CVE-2026-78663CVSS 9.1
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets...
📅 Updated: Oct 9, 2026
CVE-2026-108157CVSS 9.2
Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to...
📅 Updated: Oct 9, 2026
CVE-2026-7827CVSS 9.2
A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in FalkorDB before 4.18.4...
📅 Updated: Oct 9, 2026
CVE-2026-107935CVSS 9.3
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated...
📅 Updated: Oct 9, 2026
CVE-2026-104019CVSS 9.3
OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x...
📅 Updated: Oct 9, 2026
CVE-2026-103956CVSS 10.0
Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors...
📅 Updated: Oct 9, 2026