Back
Tool
Node.js
Related CVEs
Recent activity
CVE-2026-2441: Zero-Day CSS Vulnerability in Chromium-Based BrowsersCVE-2026-2441 is a zero-day CSS vulnerability affecting all Chromium-based browsers, allowing attackers to exploit a use-after-free condition in the Blink rendering engine. This vu…CVE-2026-47668: Unauthenticated RCE Vulnerability in DbGateDbGate's JSON script runner has a critical vulnerability (CVE-2026-47668) that allows unauthenticated remote code execution via the functionName parameter in JSON script assign com…Critical RCE Vulnerability in Prompty (CVE-2026-73299) Requires Immediate ActionCVE-2026-73299 is a critical remote code execution vulnerability in the TypeScript Nunjucks renderer of Prompty, affecting versions prior to 0.1.5 and 2.0.0-beta.5. An unauthentica…Critical RCE Vulnerability in n8n Affects Over 100K ServersA critical remote code execution vulnerability (CVE-2025-68613) in the n8n workflow automation platform has been disclosed, potentially impacting over 100,000 servers, primarily in…Critical Authentication Bypass in Rejetto HFS Exploited Within 24 HoursAnthropic's Mythos model identified a critical authentication bypass in Rejetto HTTP File Server (HFS), tracked as CVE-2026-61500, allowing remote code execution. Discovered by Hor…Mirage Kitten Targets Aviation and FinTech with New Cross-Platform MalwareThe Iranian cyberespionage group Mirage Kitten has launched a campaign targeting technology professionals in the aviation and FinTech sectors across the Middle East and Africa. Thi…Critical RCE Vulnerability in Rejetto HFSA critical vulnerability, CVE-2026-61500, in Rejetto HTTP File Server (HFS) allows unauthenticated remote code execution (RCE) due to a weak pseudo-random number generator (PRNG) u…Glassworm Malware Targets React Native npm Packages in Supply Chain AttackOn March 16, 2026, two React Native npm packages, react-native-country-select@0.3.91 and react-native-international-phone-number@0.11.8, were compromised in a supply chain attack a…Critical Vulnerability CVE-2026-101894 Exploited via Node.js Archive ExtractionA critical vulnerability, CVE-2026-101894, was disclosed on September 28, 2026, affecting Node.js packages `@xhmikosr/decompress` and the unmaintained `decompress`. This flaw allow…