| brotli-libs |
CVE-2026-111497 |
CRITICAL |
1.2.0-r1 |
1.2.1-r0 |
http://www.openwall.com/lists/oss-security/2026/10/23/25
http://www.openwall.com/lists/oss-security/2026/10/24/6
http://www.openwall.com/lists/oss-security/2026/10/26/12
http://www.openwall.com/lists/oss-security/2026/10/26/13
http://www.openwall.com/lists/oss-security/2026/10/26/16
http://www.openwall.com/lists/oss-security/2026/11/03/2
https://access.redhat.com/errata/RHSA-2026:90495
https://access.redhat.com/errata/RHSA-2026:92492
https://access.redhat.com/security/cve/CVE-2026-111497
https://advisory.echohq.com/cve/CVE-2026-111497
https://broccoli2shell.com
https://bugzilla.redhat.com/2558973
https://bugzilla.redhat.com/2562054
https://bugzilla.redhat.com/show_bug.cgi?id=2558973
https://cert-portal.siemens.com/productcert/html/ssa-045512.html
https://cert-portal.siemens.com/productcert/html/ssa-443410.html
https://cert-portal.siemens.com/productcert/html/ssa-898633.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497
https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates
https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds
https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/
https://errata.almalinux.org/9/ALSA-2026-92492.html
https://errata.rockylinux.org/RLSA-2026:90495
https://github.com/advisories/GHSA-9v8h-qqgm-4m35
https://github.com/andybalholm/brotli/releases/tag/v1.2.7
https://github.com/dotnet/announcements/issues/494
https://github.com/google/brotli
https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b
https://github.com/google/brotli/commit/50a9b70a4d5e1443fc40927952276b68fffa83a0
https://github.com/google/brotli/commit/b418fa81c48262a86a95332b0bc6d62c30aa78b6
https://github.com/google/brotli/commit/da9806362874b9bd4b552a3af360b5d6347beb12
https://github.com/google/brotli/releases/tag/v1.0.10
https://github.com/google/brotli/releases/tag/v1.1.1
https://github.com/google/brotli/releases/tag/v1.2.1
https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2026-4322.yaml
https://github.com/pypa/advisory-database/tree/main/vulns/brotlicffi/PYSEC-2026-4323.yaml
https://linux.oracle.com/cve/CVE-2026-111497.html
https://linux.oracle.com/errata/ELSA-2026-92492.html
https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148
https://nodejs.org/en/blog/vulnerability/october-2026-security-releases
https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high
https://nvd.nist.gov/vuln/detail/CVE-2026-111497
https://opensourcemalware.com/blog/node2shell-affects-python
https://patchtheplanet.org/brotli
https://pypi.org/project/Brotli
https://pypi.org/project/brotlicffi
https://ubuntu.com/security/notices/USN-8956-1
https://ubuntu.com/security/notices/USN-8956-2
https://ubuntu.com/security/notices/USN-8958-1
https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497
https://www.cve.org/CVERecord?id=CVE-2026-111497
|
| libcurl |
CVE-2026-92392 |
HIGH |
8.22.0-r0 |
8.23.0-r0 |
http://www.openwall.com/lists/oss-security/2026/10/18/5
http://www.openwall.com/lists/oss-security/2026/10/18/6
https://access.redhat.com/security/cve/CVE-2026-92392
https://curl.se/docs/CVE-2026-92392.html
https://curl.se/docs/CVE-2026-92392.json
https://hackerone.com/reports/4030333
https://nvd.nist.gov/vuln/detail/CVE-2026-92392
https://ubuntu.com/security/notices/USN-8927-1
https://ubuntu.com/security/notices/USN-8927-2
https://www.cve.org/CVERecord?id=CVE-2026-92392
|
| libexpat |
CVE-2026-113351 |
HIGH |
2.9.0-r1 |
2.10.0-r0 |
https://access.redhat.com/security/cve/CVE-2026-113351
https://github.com/libexpat/libexpat
https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560
https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884
https://github.com/libexpat/libexpat/pull/1431
https://nvd.nist.gov/vuln/detail/CVE-2026-113351
https://www.cve.org/CVERecord?id=CVE-2026-113351
https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.9.0-denial-of-service-via-xml-parserreset
|
| libexpat |
CVE-2026-115506 |
HIGH |
2.9.0-r1 |
2.10.0-r0 |
https://access.redhat.com/security/cve/CVE-2026-115506
https://github.com/hannob/lololol
https://github.com/libexpat/libexpat
https://github.com/libexpat/libexpat/issues/1160
https://github.com/libexpat/libexpat/pull/1433
https://nvd.nist.gov/vuln/detail/CVE-2026-115506
https://www.cve.org/CVERecord?id=CVE-2026-115506
https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay
|
| libexpat |
CVE-2026-117610 |
HIGH |
2.9.0-r1 |
2.10.0-r0 |
https://access.redhat.com/security/cve/CVE-2026-117610
https://github.com/libexpat/libexpat
https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L3468-L3510
https://github.com/libexpat/libexpat/commit/7b0d50e4b1d16fafd55876260701e04279a7489d
https://github.com/libexpat/libexpat/pull/1444
https://nvd.nist.gov/vuln/detail/CVE-2026-117610
https://www.cve.org/CVERecord?id=CVE-2026-117610
https://www.vulncheck.com/advisories/libexpat-through-2.9.0-null-pointer-dereference-via-external-entity-subparser
|
| libexpat |
CVE-2026-118370 |
HIGH |
2.9.0-r1 |
2.10.0-r0 |
https://access.redhat.com/security/cve/CVE-2026-118370
https://github.com/libexpat/libexpat
https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L4138-L4140
https://github.com/libexpat/libexpat/commit/1bac53c4fc460a03cd9860f39501c7979f6750ae
https://github.com/libexpat/libexpat/commit/621cb2c78b253ee023a86bc91d6ddb048481c04c
https://github.com/libexpat/libexpat/pull/1450
https://nvd.nist.gov/vuln/detail/CVE-2026-118370
https://www.cve.org/CVERecord?id=CVE-2026-118370
https://www.vulncheck.com/advisories/libexpat-through-2.9.0-integer-overflow-in-storeatts-via-attindex-and-nprefixes
|
| openssh |
CVE-2026-123158 |
HIGH |
10.3_p1-r1 |
10.3_p1-r2 |
https://access.redhat.com/security/cve/CVE-2026-123158
https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/
https://github.com/google/goonami-scanner/pull/277
https://github.com/leonjza/sshhole-lab
https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482
https://github.com/predkambrij/sshhole-repro
https://hachyderm.io/@damienmiller/117563026759098135
https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2
https://news.ycombinator.com/item?id=50377976
https://news.ycombinator.com/item?id=50378228
https://news.ycombinator.com/item?id=50379704
https://nvd.nist.gov/vuln/detail/CVE-2026-123158
https://sshhole.com
https://www.cve.org/CVERecord?id=CVE-2026-123158
https://www.openssh.org/releasenotes.html#10.6p2
|
| openssh-client-common |
CVE-2026-123158 |
HIGH |
10.3_p1-r1 |
10.3_p1-r2 |
https://access.redhat.com/security/cve/CVE-2026-123158
https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/
https://github.com/google/goonami-scanner/pull/277
https://github.com/leonjza/sshhole-lab
https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482
https://github.com/predkambrij/sshhole-repro
https://hachyderm.io/@damienmiller/117563026759098135
https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2
https://news.ycombinator.com/item?id=50377976
https://news.ycombinator.com/item?id=50378228
https://news.ycombinator.com/item?id=50379704
https://nvd.nist.gov/vuln/detail/CVE-2026-123158
https://sshhole.com
https://www.cve.org/CVERecord?id=CVE-2026-123158
https://www.openssh.org/releasenotes.html#10.6p2
|
| openssh-client-default |
CVE-2026-123158 |
HIGH |
10.3_p1-r1 |
10.3_p1-r2 |
https://access.redhat.com/security/cve/CVE-2026-123158
https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/
https://github.com/google/goonami-scanner/pull/277
https://github.com/leonjza/sshhole-lab
https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482
https://github.com/predkambrij/sshhole-repro
https://hachyderm.io/@damienmiller/117563026759098135
https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2
https://news.ycombinator.com/item?id=50377976
https://news.ycombinator.com/item?id=50378228
https://news.ycombinator.com/item?id=50379704
https://nvd.nist.gov/vuln/detail/CVE-2026-123158
https://sshhole.com
https://www.cve.org/CVERecord?id=CVE-2026-123158
https://www.openssh.org/releasenotes.html#10.6p2
|
| openssh-keygen |
CVE-2026-123158 |
HIGH |
10.3_p1-r1 |
10.3_p1-r2 |
https://access.redhat.com/security/cve/CVE-2026-123158
https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/
https://github.com/google/goonami-scanner/pull/277
https://github.com/leonjza/sshhole-lab
https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482
https://github.com/predkambrij/sshhole-repro
https://hachyderm.io/@damienmiller/117563026759098135
https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2
https://news.ycombinator.com/item?id=50377976
https://news.ycombinator.com/item?id=50378228
https://news.ycombinator.com/item?id=50379704
https://nvd.nist.gov/vuln/detail/CVE-2026-123158
https://sshhole.com
https://www.cve.org/CVERecord?id=CVE-2026-123158
https://www.openssh.org/releasenotes.html#10.6p2
|
| openssh-server |
CVE-2026-123158 |
HIGH |
10.3_p1-r1 |
10.3_p1-r2 |
https://access.redhat.com/security/cve/CVE-2026-123158
https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/
https://github.com/google/goonami-scanner/pull/277
https://github.com/leonjza/sshhole-lab
https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482
https://github.com/predkambrij/sshhole-repro
https://hachyderm.io/@damienmiller/117563026759098135
https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2
https://news.ycombinator.com/item?id=50377976
https://news.ycombinator.com/item?id=50378228
https://news.ycombinator.com/item?id=50379704
https://nvd.nist.gov/vuln/detail/CVE-2026-123158
https://sshhole.com
https://www.cve.org/CVERecord?id=CVE-2026-123158
https://www.openssh.org/releasenotes.html#10.6p2
|
| openssh-server-common |
CVE-2026-123158 |
HIGH |
10.3_p1-r1 |
10.3_p1-r2 |
https://access.redhat.com/security/cve/CVE-2026-123158
https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/
https://github.com/google/goonami-scanner/pull/277
https://github.com/leonjza/sshhole-lab
https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482
https://github.com/predkambrij/sshhole-repro
https://hachyderm.io/@damienmiller/117563026759098135
https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2
https://news.ycombinator.com/item?id=50377976
https://news.ycombinator.com/item?id=50378228
https://news.ycombinator.com/item?id=50379704
https://nvd.nist.gov/vuln/detail/CVE-2026-123158
https://sshhole.com
https://www.cve.org/CVERecord?id=CVE-2026-123158
https://www.openssh.org/releasenotes.html#10.6p2
|
| openssh-sftp-server |
CVE-2026-123158 |
HIGH |
10.3_p1-r1 |
10.3_p1-r2 |
https://access.redhat.com/security/cve/CVE-2026-123158
https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/
https://github.com/google/goonami-scanner/pull/277
https://github.com/leonjza/sshhole-lab
https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482
https://github.com/predkambrij/sshhole-repro
https://hachyderm.io/@damienmiller/117563026759098135
https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2
https://news.ycombinator.com/item?id=50377976
https://news.ycombinator.com/item?id=50378228
https://news.ycombinator.com/item?id=50379704
https://nvd.nist.gov/vuln/detail/CVE-2026-123158
https://sshhole.com
https://www.cve.org/CVERecord?id=CVE-2026-123158
https://www.openssh.org/releasenotes.html#10.6p2
|
| No Misconfigurations found |
|---|
| @azure/msal-node |
CVE-2026-109461 |
HIGH |
5.1.5 |
7.1.0 |
https://github.com/AzureAD/microsoft-authentication-library-for-js
https://github.com/AzureAD/microsoft-authentication-library-for-js/commit/f550958586475dbfeb1cd44be14a2d653728850e
https://github.com/AzureAD/microsoft-authentication-library-for-js/pull/8901
https://github.com/AzureAD/microsoft-authentication-library-for-js/releases/tag/msal-node-v7.1.0
https://github.com/AzureAD/microsoft-authentication-library-for-js/security/advisories/GHSA-xcx6-jx8p-x3h5
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109461
https://nvd.nist.gov/vuln/detail/CVE-2026-109461
|
| @azure/msal-node |
CVE-2026-109461 |
HIGH |
5.6.0 |
7.1.0 |
https://github.com/AzureAD/microsoft-authentication-library-for-js
https://github.com/AzureAD/microsoft-authentication-library-for-js/commit/f550958586475dbfeb1cd44be14a2d653728850e
https://github.com/AzureAD/microsoft-authentication-library-for-js/pull/8901
https://github.com/AzureAD/microsoft-authentication-library-for-js/releases/tag/msal-node-v7.1.0
https://github.com/AzureAD/microsoft-authentication-library-for-js/security/advisories/GHSA-xcx6-jx8p-x3h5
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109461
https://nvd.nist.gov/vuln/detail/CVE-2026-109461
|
| @intlify/core-base |
CVE-2026-118257 |
HIGH |
11.4.5 |
11.4.14, 12.0.0-alpha.5 |
https://access.redhat.com/security/cve/CVE-2026-118257
https://advisory.echohq.com/cve/CVE-2026-118257
https://github.com/advisories/GHSA-83rm-6c8r-g728
https://github.com/intlify/vue-i18n
https://github.com/intlify/vue-i18n/commit/43391d20e7c85403cb59bdb21b5d542819f54042
https://github.com/intlify/vue-i18n/pull/2679
https://github.com/intlify/vue-i18n/releases/tag/v11.4.14
https://github.com/intlify/vue-i18n/releases/tag/v12.0.0-alpha.5
https://github.com/intlify/vue-i18n/security/advisories/GHSA-83rm-6c8r-g728
https://nvd.nist.gov/vuln/detail/CVE-2026-118257
https://www.cve.org/CVERecord?id=CVE-2026-118257
|
| @intlify/shared |
CVE-2026-118257 |
HIGH |
11.4.5 |
11.4.14, 12.0.0-alpha.5 |
https://access.redhat.com/security/cve/CVE-2026-118257
https://advisory.echohq.com/cve/CVE-2026-118257
https://github.com/advisories/GHSA-83rm-6c8r-g728
https://github.com/intlify/vue-i18n
https://github.com/intlify/vue-i18n/commit/43391d20e7c85403cb59bdb21b5d542819f54042
https://github.com/intlify/vue-i18n/pull/2679
https://github.com/intlify/vue-i18n/releases/tag/v11.4.14
https://github.com/intlify/vue-i18n/releases/tag/v12.0.0-alpha.5
https://github.com/intlify/vue-i18n/security/advisories/GHSA-83rm-6c8r-g728
https://nvd.nist.gov/vuln/detail/CVE-2026-118257
https://www.cve.org/CVERecord?id=CVE-2026-118257
|
| @modelcontextprotocol/node |
GHSA-f897-62hf-6gxq |
HIGH |
2.0.0 |
2.1.0 |
https://advisory.echohq.com/cve/GHSA-f897-62hf-6gxq
https://github.com/advisories/GHSA-f897-62hf-6gxq
https://github.com/modelcontextprotocol/typescript-sdk
https://github.com/modelcontextprotocol/typescript-sdk/commit/7b781ed4e25355a25d15974f3c76de81299694ed
https://github.com/modelcontextprotocol/typescript-sdk/commit/a9f6eb709b85459d01e8f2a9e881fef2621756c1
https://github.com/modelcontextprotocol/typescript-sdk/pull/2698
https://github.com/modelcontextprotocol/typescript-sdk/pull/2717
https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.30.1
https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/[email protected]
https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/[email protected]
https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/[email protected]
https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-f897-62hf-6gxq
|
| @modelcontextprotocol/sdk |
CVE-2026-111767 |
HIGH |
1.31.0 |
1.32.0 |
https://access.redhat.com/security/cve/CVE-2026-111767
https://advisory.echohq.com/cve/CVE-2026-111767
https://github.com/modelcontextprotocol/typescript-sdk
https://github.com/modelcontextprotocol/typescript-sdk/commit/727075b5bbeb77fbea22041b36b72a73042160fa
https://github.com/modelcontextprotocol/typescript-sdk/pull/2925
https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-22jm-h49p-29qw
https://nvd.nist.gov/vuln/detail/CVE-2026-111767
https://www.cve.org/CVERecord?id=CVE-2026-111767
|
| @modelcontextprotocol/sdk |
CVE-2026-111768 |
HIGH |
1.31.0 |
1.32.0 |
https://access.redhat.com/security/cve/CVE-2026-111768
https://advisory.echohq.com/cve/CVE-2026-111768
https://github.com/modelcontextprotocol/typescript-sdk
https://github.com/modelcontextprotocol/typescript-sdk/commit/6d8dbc6cb590edf766fcb66b636ca6b654e99c37
https://github.com/modelcontextprotocol/typescript-sdk/commit/fd26801b3b387742fe24a90ed4b275dd6072209f
https://github.com/modelcontextprotocol/typescript-sdk/pull/2926
https://github.com/modelcontextprotocol/typescript-sdk/pull/2927
https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0
https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/[email protected]
https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-46jr-4wx8-v453
https://nvd.nist.gov/vuln/detail/CVE-2026-111768
https://www.cve.org/CVERecord?id=CVE-2026-111768
|
| @modelcontextprotocol/server |
CVE-2026-111768 |
HIGH |
2.0.0 |
2.3.0 |
https://access.redhat.com/security/cve/CVE-2026-111768
https://advisory.echohq.com/cve/CVE-2026-111768
https://github.com/modelcontextprotocol/typescript-sdk
https://github.com/modelcontextprotocol/typescript-sdk/commit/6d8dbc6cb590edf766fcb66b636ca6b654e99c37
https://github.com/modelcontextprotocol/typescript-sdk/commit/fd26801b3b387742fe24a90ed4b275dd6072209f
https://github.com/modelcontextprotocol/typescript-sdk/pull/2926
https://github.com/modelcontextprotocol/typescript-sdk/pull/2927
https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0
https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/[email protected]
https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-46jr-4wx8-v453
https://nvd.nist.gov/vuln/detail/CVE-2026-111768
https://www.cve.org/CVERecord?id=CVE-2026-111768
|
| @modelcontextprotocol/server |
CVE-2026-111770 |
HIGH |
2.0.0 |
2.3.0 |
https://access.redhat.com/security/cve/CVE-2026-111770
https://advisory.echohq.com/cve/CVE-2026-111770
https://github.com/advisories/GHSA-jm63-cq47-j5jp
https://github.com/modelcontextprotocol/typescript-sdk
https://github.com/modelcontextprotocol/typescript-sdk/commit/84804c22e45a662675a198f853b7f00063838a8d
https://github.com/modelcontextprotocol/typescript-sdk/pull/2918
https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0
https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/[email protected]
https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-jm63-cq47-j5jp
https://nvd.nist.gov/vuln/detail/CVE-2026-111770
https://www.cve.org/CVERecord?id=CVE-2026-111770
|
| @modelcontextprotocol/server |
GHSA-f897-62hf-6gxq |
HIGH |
2.0.0 |
2.1.0 |
https://advisory.echohq.com/cve/GHSA-f897-62hf-6gxq
https://github.com/advisories/GHSA-f897-62hf-6gxq
https://github.com/modelcontextprotocol/typescript-sdk
https://github.com/modelcontextprotocol/typescript-sdk/commit/7b781ed4e25355a25d15974f3c76de81299694ed
https://github.com/modelcontextprotocol/typescript-sdk/commit/a9f6eb709b85459d01e8f2a9e881fef2621756c1
https://github.com/modelcontextprotocol/typescript-sdk/pull/2698
https://github.com/modelcontextprotocol/typescript-sdk/pull/2717
https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.30.1
https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/[email protected]
https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/[email protected]
https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/[email protected]
https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-f897-62hf-6gxq
|
| body-parser |
CVE-2026-111181 |
HIGH |
2.3.0 |
2.4.0, 1.20.9 |
https://access.redhat.com/security/cve/CVE-2026-111181
https://advisory.echohq.com/cve/CVE-2026-111181
https://cna.openjsf.org/security-advisories.html
https://github.com/expressjs/body-parser
https://github.com/expressjs/body-parser/commit/1260c3845f54502a05a87594f09a334786bb34d7
https://github.com/expressjs/body-parser/commit/f7075eae3a84c3473ab4bf0a777da28db208e916
https://github.com/expressjs/body-parser/releases/tag/1.20.9
https://github.com/expressjs/body-parser/releases/tag/v2.4.0
https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828
https://nvd.nist.gov/vuln/detail/CVE-2026-111181
https://www.cve.org/CVERecord?id=CVE-2026-111181
|
| follow-redirects |
CVE-2026-111755 |
HIGH |
1.16.0 |
1.16.1 |
https://access.redhat.com/security/cve/CVE-2026-111755
https://advisory.echohq.com/cve/CVE-2026-111755
https://github.com/follow-redirects/follow-redirects
https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8
https://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.1
https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c
https://nvd.nist.gov/vuln/detail/CVE-2026-111755
https://www.cve.org/CVERecord?id=CVE-2026-111755
|
| follow-redirects |
CVE-2026-111755 |
HIGH |
1.16.0 |
1.16.1 |
https://access.redhat.com/security/cve/CVE-2026-111755
https://advisory.echohq.com/cve/CVE-2026-111755
https://github.com/follow-redirects/follow-redirects
https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8
https://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.1
https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c
https://nvd.nist.gov/vuln/detail/CVE-2026-111755
https://www.cve.org/CVERecord?id=CVE-2026-111755
|
| follow-redirects |
CVE-2026-111756 |
HIGH |
1.16.0 |
1.16.1 |
https://access.redhat.com/security/cve/CVE-2026-111756
https://advisory.echohq.com/cve/CVE-2026-111756
https://github.com/follow-redirects/follow-redirects
https://github.com/follow-redirects/follow-redirects/commit/9865ca45490e4d0f7b6944870318408344570aff
https://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.1
https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-q3jh-wrc6-jgq8
https://nvd.nist.gov/vuln/detail/CVE-2026-111756
https://www.cve.org/CVERecord?id=CVE-2026-111756
|
| follow-redirects |
CVE-2026-111756 |
HIGH |
1.16.0 |
1.16.1 |
https://access.redhat.com/security/cve/CVE-2026-111756
https://advisory.echohq.com/cve/CVE-2026-111756
https://github.com/follow-redirects/follow-redirects
https://github.com/follow-redirects/follow-redirects/commit/9865ca45490e4d0f7b6944870318408344570aff
https://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.1
https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-q3jh-wrc6-jgq8
https://nvd.nist.gov/vuln/detail/CVE-2026-111756
https://www.cve.org/CVERecord?id=CVE-2026-111756
|
| follow-redirects |
CVE-2026-116689 |
HIGH |
1.16.0 |
1.16.2 |
https://access.redhat.com/security/cve/CVE-2026-116689
https://advisory.echohq.com/cve/CVE-2026-116689
https://github.com/follow-redirects/follow-redirects
https://github.com/follow-redirects/follow-redirects/commit/b0a7751e9cd64cd8eeb6ec67d2f206a9cc88d3f8
https://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.2
https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-mrwp-f3q8-3g9p
https://nvd.nist.gov/vuln/detail/CVE-2026-116689
https://www.cve.org/CVERecord?id=CVE-2026-116689
|
| follow-redirects |
CVE-2026-116689 |
HIGH |
1.16.0 |
1.16.2 |
https://access.redhat.com/security/cve/CVE-2026-116689
https://advisory.echohq.com/cve/CVE-2026-116689
https://github.com/follow-redirects/follow-redirects
https://github.com/follow-redirects/follow-redirects/commit/b0a7751e9cd64cd8eeb6ec67d2f206a9cc88d3f8
https://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.2
https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-mrwp-f3q8-3g9p
https://nvd.nist.gov/vuln/detail/CVE-2026-116689
https://www.cve.org/CVERecord?id=CVE-2026-116689
|
| markdown-it |
CVE-2026-111759 |
HIGH |
13.0.2 |
15.0.2, 14.3.2 |
https://access.redhat.com/security/cve/CVE-2026-111759
https://advisory.echohq.com/cve/CVE-2026-111759
https://github.com/advisories/GHSA-r7fv-28h4-cvq7
https://github.com/markdown-it/markdown-it
https://github.com/markdown-it/markdown-it/commit/1b379c1b6d0522421bd1a51b77337c79af2c8670
https://github.com/markdown-it/markdown-it/commit/cf27366035edf9196667110c47d9d67b030a4152
https://github.com/markdown-it/markdown-it/commit/daf5a3c32303e5d9de01b12eeb725fb5990b8162
https://github.com/markdown-it/markdown-it/releases/tag/14.3.2
https://github.com/markdown-it/markdown-it/releases/tag/15.0.2
https://github.com/markdown-it/markdown-it/security/advisories/GHSA-r7fv-28h4-cvq7
https://nvd.nist.gov/vuln/detail/CVE-2026-111759
https://www.cve.org/CVERecord?id=CVE-2026-111759
|
| multer |
CVE-2026-113872 |
HIGH |
2.3.0 |
2.5.0 |
https://access.redhat.com/security/cve/CVE-2026-113872
https://advisory.echohq.com/cve/CVE-2026-113872
https://cna.openjsf.org/security-advisories.html
https://github.com/advisories/GHSA-q7qp-rjg7-q26m
https://github.com/expressjs/multer
https://github.com/expressjs/multer/commit/80a2d9df1dfd63b5fab631b8b9966164ed647adf
https://github.com/expressjs/multer/releases/tag/v2.5.0
https://github.com/expressjs/multer/security/advisories/GHSA-q7qp-rjg7-q26m
https://nvd.nist.gov/vuln/detail/CVE-2026-113872
https://www.cve.org/CVERecord?id=CVE-2026-113872
|
| toml |
CVE-2026-114141 |
HIGH |
4.2.0 |
5.0.1 |
https://access.redhat.com/security/cve/CVE-2026-114141
https://github.com/BinaryMuse/toml-node
https://github.com/BinaryMuse/toml-node/commit/609c873fffea0a27ebe5b4dd098eed2b3daf3606
https://github.com/BinaryMuse/toml-node/releases/tag/v5.0.1
https://github.com/BinaryMuse/toml-node/security/advisories/GHSA-4qx8-w7c3-pj3p
https://nvd.nist.gov/vuln/detail/CVE-2026-114141
https://www.cve.org/CVERecord?id=CVE-2026-114141
|
| toml |
CVE-2026-114142 |
HIGH |
4.2.0 |
5.0.1 |
https://github.com/BinaryMuse/toml-node
https://github.com/BinaryMuse/toml-node/commit/609c873fffea0a27ebe5b4dd098eed2b3daf3606
https://github.com/BinaryMuse/toml-node/releases/tag/v5.0.1
https://github.com/BinaryMuse/toml-node/security/advisories/GHSA-h895-cgqg-jf52
https://nvd.nist.gov/vuln/detail/CVE-2026-114142
|
| toml |
CVE-2026-114143 |
HIGH |
4.2.0 |
5.0.1 |
https://access.redhat.com/security/cve/CVE-2026-114143
https://github.com/BinaryMuse/toml-node
https://github.com/BinaryMuse/toml-node/commit/609c873fffea0a27ebe5b4dd098eed2b3daf3606
https://github.com/BinaryMuse/toml-node/releases/tag/v5.0.1
https://github.com/BinaryMuse/toml-node/security/advisories/GHSA-9j65-hcg3-gc64
https://nvd.nist.gov/vuln/detail/CVE-2026-114143
https://www.cve.org/CVERecord?id=CVE-2026-114143
|
| toml |
CVE-2026-114144 |
HIGH |
4.2.0 |
5.0.1 |
https://access.redhat.com/security/cve/CVE-2026-114144
https://github.com/BinaryMuse/toml-node
https://github.com/BinaryMuse/toml-node/commit/9d52e384f6030932174d1afb0d910154dd62dead
https://github.com/BinaryMuse/toml-node/releases/tag/v5.0.1
https://github.com/BinaryMuse/toml-node/security/advisories/GHSA-9qmh-m7c6-f92p
https://nvd.nist.gov/vuln/detail/CVE-2026-114144
https://www.cve.org/CVERecord?id=CVE-2026-114144
|
| undici |
CVE-2026-109383 |
HIGH |
6.29.0 |
6.29.1, 7.30.1, 8.12.2 |
https://access.redhat.com/security/cve/CVE-2026-109383
https://advisory.echohq.com/cve/CVE-2026-109383
https://cna.openjsf.org/security-advisories.html
https://github.com/nodejs/undici
https://github.com/nodejs/undici/commit/04cb74b1db131ff8f5b4557dce811cbf5f4664b4
https://github.com/nodejs/undici/commit/8c59f6b302898cb2e9b0f7962cd7212b6e597c9f
https://github.com/nodejs/undici/commit/f75eac00ac17
https://github.com/nodejs/undici/commit/f75eac00ac177f7b2e6c8bfbd52d4113164286e6
https://github.com/nodejs/undici/releases/tag/v6.29.1
https://github.com/nodejs/undici/releases/tag/v7.30.1
https://github.com/nodejs/undici/releases/tag/v8.12.2
https://github.com/nodejs/undici/security/advisories/GHSA-2m5v-pch6-74hx
https://nvd.nist.gov/vuln/detail/CVE-2026-109383
https://www.cve.org/CVERecord?id=CVE-2026-109383
|
| undici |
CVE-2026-109869 |
HIGH |
6.29.0 |
6.29.1, 7.30.1, 8.12.2 |
https://access.redhat.com/security/cve/CVE-2026-109869
https://advisory.echohq.com/cve/CVE-2026-109869
https://cna.openjsf.org/security-advisories.html
https://github.com/nodejs/undici
https://github.com/nodejs/undici/commit/07ded4941b1e72afec862958c3b8ddf468f3b429
https://github.com/nodejs/undici/commit/1325a87dfb3492f8e87e6b0a84b3bda4e82e3436
https://github.com/nodejs/undici/commit/b5084c7dc239
https://github.com/nodejs/undici/commit/b5084c7dc239172d75c336b1cd51ddac023938a5
https://github.com/nodejs/undici/releases/tag/v6.29.1
https://github.com/nodejs/undici/releases/tag/v7.30.1
https://github.com/nodejs/undici/releases/tag/v8.12.2
https://github.com/nodejs/undici/security/advisories/GHSA-xjj6-f33q-929c
https://nvd.nist.gov/vuln/detail/CVE-2026-109869
https://www.cve.org/CVERecord?id=CVE-2026-109869
|
| undici |
CVE-2026-87018 |
HIGH |
6.29.0 |
6.29.1, 7.30.1, 8.12.2 |
https://access.redhat.com/security/cve/CVE-2026-87018
https://advisory.echohq.com/cve/CVE-2026-87018
https://cna.openjsf.org/security-advisories.html
https://github.com/nodejs/undici
https://github.com/nodejs/undici/commit/12cfd96c3f430897656e3edc1c5e02be8c1cd309
https://github.com/nodejs/undici/commit/b40fbfc0651703cf9fa9f6ced68b679f28d8bb28
https://github.com/nodejs/undici/commit/e257e9f8fb42eedd50727b9cf65e548c8925e4a8
https://github.com/nodejs/undici/releases/tag/v6.29.1
https://github.com/nodejs/undici/releases/tag/v7.30.1
https://github.com/nodejs/undici/releases/tag/v8.12.2
https://github.com/nodejs/undici/security/advisories/GHSA-qrxm-fqhp-jwvm
https://nvd.nist.gov/vuln/detail/CVE-2026-87018
https://www.cve.org/CVERecord?id=CVE-2026-87018
|
| undici |
CVE-2026-109383 |
HIGH |
7.29.1 |
6.29.1, 7.30.1, 8.12.2 |
https://access.redhat.com/security/cve/CVE-2026-109383
https://advisory.echohq.com/cve/CVE-2026-109383
https://cna.openjsf.org/security-advisories.html
https://github.com/nodejs/undici
https://github.com/nodejs/undici/commit/04cb74b1db131ff8f5b4557dce811cbf5f4664b4
https://github.com/nodejs/undici/commit/8c59f6b302898cb2e9b0f7962cd7212b6e597c9f
https://github.com/nodejs/undici/commit/f75eac00ac17
https://github.com/nodejs/undici/commit/f75eac00ac177f7b2e6c8bfbd52d4113164286e6
https://github.com/nodejs/undici/releases/tag/v6.29.1
https://github.com/nodejs/undici/releases/tag/v7.30.1
https://github.com/nodejs/undici/releases/tag/v8.12.2
https://github.com/nodejs/undici/security/advisories/GHSA-2m5v-pch6-74hx
https://nvd.nist.gov/vuln/detail/CVE-2026-109383
https://www.cve.org/CVERecord?id=CVE-2026-109383
|
| undici |
CVE-2026-109829 |
HIGH |
7.29.1 |
7.30.1, 8.12.2 |
https://access.redhat.com/security/cve/CVE-2026-109829
https://advisory.echohq.com/cve/CVE-2026-109829
https://cna.openjsf.org/security-advisories.html
https://github.com/nodejs/undici
https://github.com/nodejs/undici/commit/26c2bfb3def0
https://github.com/nodejs/undici/commit/26c2bfb3def0b67241ce878e80657ed5d6c3efa8
https://github.com/nodejs/undici/commit/b20b82ad80a405a12b6ce1f341bcd418de390aa0
https://github.com/nodejs/undici/releases/tag/v7.30.1
https://github.com/nodejs/undici/releases/tag/v8.12.2
https://github.com/nodejs/undici/security/advisories/GHSA-4w7w-5xrc-9h26
https://nvd.nist.gov/vuln/detail/CVE-2026-109829
https://www.cve.org/CVERecord?id=CVE-2026-109829
|
| undici |
CVE-2026-109869 |
HIGH |
7.29.1 |
6.29.1, 7.30.1, 8.12.2 |
https://access.redhat.com/security/cve/CVE-2026-109869
https://advisory.echohq.com/cve/CVE-2026-109869
https://cna.openjsf.org/security-advisories.html
https://github.com/nodejs/undici
https://github.com/nodejs/undici/commit/07ded4941b1e72afec862958c3b8ddf468f3b429
https://github.com/nodejs/undici/commit/1325a87dfb3492f8e87e6b0a84b3bda4e82e3436
https://github.com/nodejs/undici/commit/b5084c7dc239
https://github.com/nodejs/undici/commit/b5084c7dc239172d75c336b1cd51ddac023938a5
https://github.com/nodejs/undici/releases/tag/v6.29.1
https://github.com/nodejs/undici/releases/tag/v7.30.1
https://github.com/nodejs/undici/releases/tag/v8.12.2
https://github.com/nodejs/undici/security/advisories/GHSA-xjj6-f33q-929c
https://nvd.nist.gov/vuln/detail/CVE-2026-109869
https://www.cve.org/CVERecord?id=CVE-2026-109869
|
| undici |
CVE-2026-87018 |
HIGH |
7.29.1 |
6.29.1, 7.30.1, 8.12.2 |
https://access.redhat.com/security/cve/CVE-2026-87018
https://advisory.echohq.com/cve/CVE-2026-87018
https://cna.openjsf.org/security-advisories.html
https://github.com/nodejs/undici
https://github.com/nodejs/undici/commit/12cfd96c3f430897656e3edc1c5e02be8c1cd309
https://github.com/nodejs/undici/commit/b40fbfc0651703cf9fa9f6ced68b679f28d8bb28
https://github.com/nodejs/undici/commit/e257e9f8fb42eedd50727b9cf65e548c8925e4a8
https://github.com/nodejs/undici/releases/tag/v6.29.1
https://github.com/nodejs/undici/releases/tag/v7.30.1
https://github.com/nodejs/undici/releases/tag/v8.12.2
https://github.com/nodejs/undici/security/advisories/GHSA-qrxm-fqhp-jwvm
https://nvd.nist.gov/vuln/detail/CVE-2026-87018
https://www.cve.org/CVERecord?id=CVE-2026-87018
|
| vue-i18n |
CVE-2026-118257 |
HIGH |
11.4.5 |
11.4.14, 12.0.0-alpha.5 |
https://access.redhat.com/security/cve/CVE-2026-118257
https://advisory.echohq.com/cve/CVE-2026-118257
https://github.com/advisories/GHSA-83rm-6c8r-g728
https://github.com/intlify/vue-i18n
https://github.com/intlify/vue-i18n/commit/43391d20e7c85403cb59bdb21b5d542819f54042
https://github.com/intlify/vue-i18n/pull/2679
https://github.com/intlify/vue-i18n/releases/tag/v11.4.14
https://github.com/intlify/vue-i18n/releases/tag/v12.0.0-alpha.5
https://github.com/intlify/vue-i18n/security/advisories/GHSA-83rm-6c8r-g728
https://nvd.nist.gov/vuln/detail/CVE-2026-118257
https://www.cve.org/CVERecord?id=CVE-2026-118257
|
| No Misconfigurations found |
|---|