Vulnerability search

Batch lookup →

Active filters:nodejs msrc_update_guide clear all

3 matches

CVE

Title

Severity

CVE-2026-21710
A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received…
highEPSS 25%
115.3
7.5
97.8%
2026-04-01 01:16 UTC
CVE-2026-9697
undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent
highEPSS 0.5%
83.3
7.4
38.5%
2026-06-27 01:07 UTC
CVE-2026-16729
undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
mediumEPSS 0.2%
58.1
4.8
8.8%
2026-08-07 01:16 UTC