Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-58044 | A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild... | LOW | 3.7 | N/A | cvelistv5 | 2026-10-23 |
| cve-2026-58043 | A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. ... | HIGH | 8.4 | N/A | cvelistv5 | 2026-10-23 |
| cve-2026-58042 | A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A ... | MEDIUM | 5.9 | N/A | cvelistv5 | 2026-10-23 |
| cve-2026-58041 | A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to c... | MEDIUM | 5.3 | N/A | cvelistv5 | 2026-10-23 |
| cve-2026-58039 | SUSE CVE CVE-2026-58039 | LOW | 3.3 | N/A | cvelistv5 | 2026-09-11 |
| cve-2026-58023 | SUSE CVE CVE-2026-58023 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-07-28 |
| cve-2026-5773 | SUSE CVE CVE-2026-5773 | LOW | 3.7 | N/A | cvelistv5 | 2026-09-18 |
| cve-2026-57438 | SUSE CVE CVE-2026-57438 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-57437 | Nokogiri is an open source XML and HTML library for the Ruby programming language | LOW | 1.7 | N/A | cvelistv5 | 2026-10-25 |
| cve-2026-57436 | nokogiri: rubygem-nokogiri: Nokogiri: Denial of Service via heap use-after-free | LOW | 3.7 | N/A | cvelistv5 | 2026-06-29 |
| cve-2026-57435 | SUSE CVE CVE-2026-57435 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-57432 | SUSE CVE CVE-2026-57432 | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-09 |
| cve-2026-57236 | SUSE CVE CVE-2026-57236 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-57235 | SUSE CVE CVE-2026-57235 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-57234 | Nokogiri is an open source XML and HTML library for the Ruby programming language | LOW | 2.6 | N/A | cvelistv5 | 2026-10-25 |
| cve-2026-5704 | A flaw was found in tar | MEDIUM | 5.0 | N/A | cvelistv5 | 2026-11-05 |
| cve-2026-56850 | A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) ... | MEDIUM | 4.4 | N/A | cvelistv5 | 2026-10-23 |
| cve-2026-56848 | SUSE CVE CVE-2026-56848 | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-18 |
| cve-2026-56847 | SUSE CVE CVE-2026-56847 | LOW | 3.3 | N/A | cvelistv5 | 2026-09-11 |
| cve-2026-56846 | SUSE CVE CVE-2026-56846 | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-18 |
| cve-2026-56822 | SUSE CVE CVE-2026-56822 | HIGH | 7.4 | N/A | cvelistv5 | 2026-08-05 |
| cve-2026-56821 | SUSE CVE CVE-2026-56821 | HIGH | 7.4 | N/A | cvelistv5 | 2026-08-05 |
| cve-2026-56820 | SUSE CVE CVE-2026-56820 | HIGH | 7.4 | N/A | cvelistv5 | 2026-08-05 |
| cve-2026-56819 | SUSE CVE CVE-2026-56819 | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-05 |
| cve-2026-56817 | SUSE CVE CVE-2026-56817 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-05 |
| cve-2026-56816 | SUSE CVE CVE-2026-56816 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-07-24 |
| cve-2026-56741 | SUSE CVE CVE-2026-56741 | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-02 |
| cve-2026-56740 | SUSE CVE CVE-2026-56740 | HIGH | 7.5 | N/A | cvelistv5 | 2026-07-30 |
| cve-2026-56684 | SUSE CVE CVE-2026-56684 | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-56130 | "Remember me" cookie age is not verified on the server | LOW | 2.0 | N/A | cvelistv5 | 2026-10-25 |