[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-55131":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T11:19:25.255Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":115,"aliases":116,"duplicate_of":9,"upstream":117,"downstream":118,"duplicates":183,"related":184,"reserved_at":9,"published_at":197,"modified_at":198,"state":199,"summary":200,"references_raw":209,"kevs":296,"epss":297,"epss_history":300,"metrics":574,"affected":584},"CVE-2025-55131","A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option. Under specific timing conditions, buffers allocated with `Buffer.alloc` and other `TypedArray` instances like `Uint8Array` may contain leftover data from previous operations, allowing in-process secrets like tokens or passwords to leak or causing data corruption. While exploitation typically requires precise timing or in-process code execution, it can become remotely exploitable when untrusted input influences workload and timeouts, leading to potential confidentiality and integrity impact.",null,[11,72],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-120","Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')","The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.","weakness","Incomplete","Base","High",[20,24,28,32,36,40,44,48,52,56,60,64,68],{"id":21,"name":22,"techniques":23},"CAPEC-10","Buffer Overflow via Environment Variables",[],{"id":25,"name":26,"techniques":27},"CAPEC-100","Overflow Buffers",[],{"id":29,"name":30,"techniques":31},"CAPEC-14","Client-side Injection-induced Buffer Overflow",[],{"id":33,"name":34,"techniques":35},"CAPEC-24","Filter Failure through Buffer Overflow",[],{"id":37,"name":38,"techniques":39},"CAPEC-42","MIME Conversion",[],{"id":41,"name":42,"techniques":43},"CAPEC-44","Overflow Binary Resource File",[],{"id":45,"name":46,"techniques":47},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":49,"name":50,"techniques":51},"CAPEC-46","Overflow Variables and Tags",[],{"id":53,"name":54,"techniques":55},"CAPEC-47","Buffer Overflow via Parameter Expansion",[],{"id":57,"name":58,"techniques":59},"CAPEC-67","String Format Overflow in syslog()",[],{"id":61,"name":62,"techniques":63},"CAPEC-8","Buffer Overflow in an API Call",[],{"id":65,"name":66,"techniques":67},"CAPEC-9","Buffer Overflow in Local Command-Line Utilities",[],{"id":69,"name":70,"techniques":71},"CAPEC-92","Forced Integer Overflow",[],{"_key":73,"id":73,"name":74,"description":75,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":76},"CWE-497","Exposure of Sensitive System Information to an Unauthorized Control Sphere","The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.",[77,81],{"id":78,"name":79,"techniques":80},"CAPEC-170","Web Application Fingerprinting",[],{"id":82,"name":83,"techniques":84},"CAPEC-694","System Location Discovery",[85],{"id":86,"name":83,"tactics":87,"countermeasures":91},"T1614",[88],{"id":89,"name":90},"TA0102","Discovery",[92,97,101,106,111],{"id":93,"name":94,"tactic":95},"D3-DI","Data Inventory",{"name":96},"Model",{"id":98,"name":99,"tactic":100},"D3-CI","Configuration Inventory",{"name":96},{"id":102,"name":103,"tactic":104},"D3-SCP","System Configuration Permissions",{"name":105},"Harden",{"id":107,"name":108,"tactic":109},"D3-RD","Restore Database",{"name":110},"Restore",{"id":112,"name":113,"tactic":114},"D3-RC","Restore Configuration",{"name":110},[],[],[],[119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163,165,167,169,171,173,175,177,179,181],{"_key":120},"SUSE-SU-2026:0301-1",{"_key":122},"SUSE-SU-2026:0457-1",{"_key":124},"SUSE-SU-2026:20436-1",{"_key":126},"DSA-6166-1",{"_key":128},"SUSE-SU-2026:0295-1",{"_key":130},"SUSE-SU-2026:0435-1",{"_key":132},"OPENSUSE-SU-2026:10062-1",{"_key":134},"OPENSUSE-SU-2026:10074-1",{"_key":136},"OPENSUSE-SU-2026:20236-1",{"_key":138},"MGASA-2026-0009",{"_key":140},"OPENSUSE-SU-2026:11110-1",{"_key":142},"ALPINE-CVE-2025-55131",{"_key":144},"RHSA-2026:1842",{"_key":146},"RHSA-2026:1843",{"_key":148},"RHSA-2026:2420",{"_key":150},"RHSA-2026:2421",{"_key":152},"RHSA-2026:2422",{"_key":154},"RHSA-2026:2767",{"_key":156},"RHSA-2026:2768",{"_key":158},"RHSA-2026:2781",{"_key":160},"RHSA-2026:2782",{"_key":162},"RHSA-2026:2783",{"_key":164},"RHSA-2026:2864",{"_key":166},"RHSA-2026:2899",{"_key":168},"UBUNTU-CVE-2025-55131",{"_key":170},"DEBIAN-CVE-2025-55131",{"_key":172},"RHSA-2026:6402",{"_key":174},"RHSA-2026:6431",{"_key":176},"RHSA-2026:7378",{"_key":178},"RHSA-2026:7386",{"_key":180},"RHSA-2026:7387",{"_key":182},"RHSA-2026:7657",[],[185,186,187,188,189,190,191,192,193,194,195],{"_key":120},{"_key":122},{"_key":124},{"_key":128},{"_key":130},{"_key":132},{"_key":134},{"_key":136},{"_key":138},{"_key":140},{"_key":196},"CGA-4Q26-FG8W-8359","2026-01-20T20:41:55.591Z","2026-07-15T01:26:01.235Z","Deferred",{"cisa_kev":201,"cisa_ransomware":201,"cisa_vendor":9,"epss_severity":202,"epss_score":203,"severity":204,"severity_score":205,"severity_version":206,"severity_source":207,"severity_vector":208,"severity_status":199},false,"low",0.03493,"high",7.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",[210,215,221,226,231,236,240,244,248,252,256,260,264,268,272,276,280,284,288,292],{"url":211,"sources":212,"tags":214},"https://nodejs.org/en/blog/vulnerability/december-2025-security-releases",[207,213],"nvd",[],{"url":216,"sources":217,"tags":218},"https://access.redhat.com/security/cve/CVE-2025-55131",[207],[219,220],"VDB Entry","X Refsource REDHAT",{"url":222,"sources":223,"tags":224},"https://bugzilla.redhat.com/show_bug.cgi?id=2431350",[207],[225,220],"Issue Tracking",{"url":227,"sources":228,"tags":229},"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55131.json",[207],[230],"X Sadp Csaf Vex",{"url":232,"sources":233,"tags":234},"https://access.redhat.com/errata/RHSA-2026:2899",[207],[235,220],"Vendor Advisory",{"url":237,"sources":238,"tags":239},"https://access.redhat.com/errata/RHSA-2026:1843",[207],[235,220],{"url":241,"sources":242,"tags":243},"https://access.redhat.com/errata/RHSA-2026:1842",[207],[235,220],{"url":245,"sources":246,"tags":247},"https://access.redhat.com/errata/RHSA-2026:2422",[207],[235,220],{"url":249,"sources":250,"tags":251},"https://access.redhat.com/errata/RHSA-2026:2421",[207],[235,220],{"url":253,"sources":254,"tags":255},"https://access.redhat.com/errata/RHSA-2026:2420",[207],[235,220],{"url":257,"sources":258,"tags":259},"https://access.redhat.com/errata/RHSA-2026:2768",[207],[235,220],{"url":261,"sources":262,"tags":263},"https://access.redhat.com/errata/RHSA-2026:2767",[207],[235,220],{"url":265,"sources":266,"tags":267},"https://access.redhat.com/errata/RHSA-2026:2864",[207],[235,220],{"url":269,"sources":270,"tags":271},"https://access.redhat.com/errata/RHSA-2026:2783",[207],[235,220],{"url":273,"sources":274,"tags":275},"https://access.redhat.com/errata/RHSA-2026:2782",[207],[235,220],{"url":277,"sources":278,"tags":279},"https://access.redhat.com/errata/RHSA-2026:2781",[207],[235,220],{"url":281,"sources":282,"tags":283},"https://access.redhat.com/errata/RHSA-2026:7386",[207],[235,220],{"url":285,"sources":286,"tags":287},"https://access.redhat.com/errata/RHSA-2026:7387",[207],[235,220],{"url":289,"sources":290,"tags":291},"https://access.redhat.com/errata/RHSA-2026:6402",[207],[235,220],{"url":293,"sources":294,"tags":295},"https://access.redhat.com/errata/RHSA-2026:6431",[207],[235,220],[],{"date":298,"score":203,"percentile":299},"2026-07-05",0.87729,[301,305,308,311,314,318,321,324,327,330,333,335,339,342,345,348,351,354,357,360,362,365,368,371,374,377,380,382,385,389,393,397,400,403,406,409,412,415,418,421,425,428,431,434,437,440,443,446,449,452,455,458,461,463,466,469,472,475,478,481,485,488,491,494,497,500,503,506,510,513,516,519,522,525,528,531,534,536,539,542,545,548,551,554,557,560,562,565,568,571],{"date":302,"score":303,"percentile":304},"2026-01-21",0.00023,0.05583,{"date":306,"score":303,"percentile":307},"2026-01-22",0.05566,{"date":309,"score":303,"percentile":310},"2026-01-23",0.05623,{"date":312,"score":303,"percentile":313},"2026-01-24",0.0567,{"date":315,"score":316,"percentile":317},"2026-01-25",0.0002,0.04522,{"date":319,"score":303,"percentile":320},"2026-01-26",0.05346,{"date":322,"score":303,"percentile":323},"2026-01-27",0.05325,{"date":325,"score":303,"percentile":326},"2026-01-28",0.05311,{"date":328,"score":303,"percentile":329},"2026-01-29",0.05322,{"date":331,"score":303,"percentile":332},"2026-01-30",0.05319,{"date":334,"score":303,"percentile":326},"2026-01-31",{"date":336,"score":337,"percentile":338},"2026-02-01",0.00026,0.06721,{"date":340,"score":337,"percentile":341},"2026-02-02",0.06706,{"date":343,"score":337,"percentile":344},"2026-02-03",0.06705,{"date":346,"score":303,"percentile":347},"2026-02-04",0.05391,{"date":349,"score":303,"percentile":350},"2026-02-05",0.05445,{"date":352,"score":303,"percentile":353},"2026-02-06",0.05462,{"date":355,"score":303,"percentile":356},"2026-02-07",0.05478,{"date":358,"score":303,"percentile":359},"2026-02-08",0.0547,{"date":361,"score":303,"percentile":350},"2026-02-09",{"date":363,"score":303,"percentile":364},"2026-02-10",0.0544,{"date":366,"score":303,"percentile":367},"2026-02-11",0.05498,{"date":369,"score":303,"percentile":370},"2026-02-12",0.05536,{"date":372,"score":303,"percentile":373},"2026-02-13",0.05548,{"date":375,"score":303,"percentile":376},"2026-02-14",0.05544,{"date":378,"score":303,"percentile":379},"2026-02-15",0.05558,{"date":381,"score":303,"percentile":373},"2026-02-16",{"date":383,"score":303,"percentile":384},"2026-02-17",0.05525,{"date":386,"score":387,"percentile":388},"2026-02-18",0.00027,0.07195,{"date":390,"score":391,"percentile":392},"2026-02-19",0.00028,0.07662,{"date":394,"score":395,"percentile":396},"2026-02-20",0.00024,0.06187,{"date":398,"score":387,"percentile":399},"2026-02-21",0.07533,{"date":401,"score":387,"percentile":402},"2026-02-22",0.07527,{"date":404,"score":387,"percentile":405},"2026-02-23",0.07517,{"date":407,"score":387,"percentile":408},"2026-02-24",0.07504,{"date":410,"score":387,"percentile":411},"2026-02-25",0.07432,{"date":413,"score":387,"percentile":414},"2026-02-26",0.07381,{"date":416,"score":387,"percentile":417},"2026-02-27",0.07395,{"date":419,"score":387,"percentile":420},"2026-02-28",0.07406,{"date":422,"score":423,"percentile":424},"2026-03-01",0.00031,0.08855,{"date":426,"score":423,"percentile":427},"2026-03-02",0.08805,{"date":429,"score":423,"percentile":430},"2026-03-03",0.08798,{"date":432,"score":387,"percentile":433},"2026-03-04",0.0734,{"date":435,"score":387,"percentile":436},"2026-03-05",0.07362,{"date":438,"score":387,"percentile":439},"2026-03-06",0.07357,{"date":441,"score":387,"percentile":442},"2026-03-07",0.07363,{"date":444,"score":387,"percentile":445},"2026-03-08",0.07336,{"date":447,"score":387,"percentile":448},"2026-03-09",0.07299,{"date":450,"score":387,"percentile":451},"2026-03-10",0.07287,{"date":453,"score":387,"percentile":454},"2026-03-11",0.07302,{"date":456,"score":387,"percentile":457},"2026-03-12",0.07327,{"date":459,"score":387,"percentile":460},"2026-03-13",0.07351,{"date":462,"score":387,"percentile":448},"2026-03-14",{"date":464,"score":387,"percentile":465},"2026-03-15",0.07289,{"date":467,"score":387,"percentile":468},"2026-03-16",0.07265,{"date":470,"score":387,"percentile":471},"2026-03-17",0.07255,{"date":473,"score":387,"percentile":474},"2026-03-18",0.07252,{"date":476,"score":387,"percentile":477},"2026-03-19",0.07264,{"date":479,"score":387,"percentile":480},"2026-03-20",0.07293,{"date":482,"score":483,"percentile":484},"2026-03-21",0.00029,0.08219,{"date":486,"score":483,"percentile":487},"2026-03-22",0.08204,{"date":489,"score":483,"percentile":490},"2026-03-23",0.08175,{"date":492,"score":483,"percentile":493},"2026-03-24",0.0816,{"date":495,"score":483,"percentile":496},"2026-03-25",0.08242,{"date":498,"score":483,"percentile":499},"2026-03-26",0.08309,{"date":501,"score":483,"percentile":502},"2026-03-27",0.08303,{"date":504,"score":483,"percentile":505},"2026-03-28",0.08312,{"date":507,"score":508,"percentile":509},"2026-03-29",0.00034,0.0986,{"date":511,"score":508,"percentile":512},"2026-03-30",0.09832,{"date":514,"score":508,"percentile":515},"2026-03-31",0.09778,{"date":517,"score":508,"percentile":518},"2026-04-01",0.09762,{"date":520,"score":508,"percentile":521},"2026-04-02",0.09833,{"date":523,"score":508,"percentile":524},"2026-04-03",0.09843,{"date":526,"score":508,"percentile":527},"2026-04-04",0.09884,{"date":529,"score":508,"percentile":530},"2026-04-05",0.09868,{"date":532,"score":508,"percentile":533},"2026-04-06",0.09783,{"date":535,"score":508,"percentile":533},"2026-04-07",{"date":537,"score":508,"percentile":538},"2026-04-08",0.09855,{"date":540,"score":508,"percentile":541},"2026-04-09",0.09908,{"date":543,"score":508,"percentile":544},"2026-04-10",0.09927,{"date":546,"score":508,"percentile":547},"2026-04-11",0.09913,{"date":549,"score":508,"percentile":550},"2026-04-12",0.09876,{"date":552,"score":508,"percentile":553},"2026-04-13",0.09861,{"date":555,"score":508,"percentile":556},"2026-04-14",0.09724,{"date":558,"score":508,"percentile":559},"2026-04-15",0.09742,{"date":561,"score":508,"percentile":559},"2026-04-16",{"date":563,"score":508,"percentile":564},"2026-04-17",0.09738,{"date":566,"score":508,"percentile":567},"2026-04-18",0.09715,{"date":569,"score":508,"percentile":570},"2026-04-19",0.09693,{"date":572,"score":508,"percentile":573},"2026-04-20",0.09683,[575,582],{"source":207,"cvss_v2_0":9,"cvss_v3_0":576,"cvss_v3_1":581,"cvss_v4_0":9},{"baseScore":205,"baseSeverity":577,"vectorString":578,"impactScore":579,"exploitabilityScore":580},"HIGH","CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",9.2,4.1,{"baseScore":205,"baseSeverity":577,"vectorString":208,"impactScore":579,"exploitabilityScore":580},{"source":213,"cvss_v2_0":9,"cvss_v3_0":583,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":205,"baseSeverity":577,"vectorString":578,"impactScore":579,"exploitabilityScore":580},[585],{"ecosystem":9,"name":586,"vendor":587,"product":586,"cpe_part":588,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":589},"node","nodejs","a",[590,595,598,601,604,609,613,617,621,625,629,633,637,641,645,649,653,657,661],{"version":591,"is_range":592,"range_type":207,"version_start":593,"version_start_type":594,"version_end":593,"version_end_type":594,"fixed_in":9},">= 20.19.6, \u003C= 20.19.6",true,"20.19.6","including",{"version":596,"is_range":592,"range_type":207,"version_start":597,"version_start_type":594,"version_end":597,"version_end_type":594,"fixed_in":9},">= 22.21.1, \u003C= 22.21.1","22.21.1",{"version":599,"is_range":592,"range_type":207,"version_start":600,"version_start_type":594,"version_end":600,"version_end_type":594,"fixed_in":9},">= 24.12.0, \u003C= 24.12.0","24.12.0",{"version":602,"is_range":592,"range_type":207,"version_start":603,"version_start_type":594,"version_end":603,"version_end_type":594,"fixed_in":9},">= 25.2.1, \u003C= 25.2.1","25.2.1",{"version":605,"is_range":592,"range_type":207,"version_start":606,"version_start_type":594,"version_end":607,"version_end_type":608,"fixed_in":9},">= 4.0, \u003C 4.*","4.0","4.*","excluding",{"version":610,"is_range":592,"range_type":207,"version_start":611,"version_start_type":594,"version_end":612,"version_end_type":608,"fixed_in":9},">= 5.0, \u003C 5.*","5.0","5.*",{"version":614,"is_range":592,"range_type":207,"version_start":615,"version_start_type":594,"version_end":616,"version_end_type":608,"fixed_in":9},">= 6.0, \u003C 6.*","6.0","6.*",{"version":618,"is_range":592,"range_type":207,"version_start":619,"version_start_type":594,"version_end":620,"version_end_type":608,"fixed_in":9},">= 7.0, \u003C 7.*","7.0","7.*",{"version":622,"is_range":592,"range_type":207,"version_start":623,"version_start_type":594,"version_end":624,"version_end_type":608,"fixed_in":9},">= 8.0, \u003C 8.*","8.0","8.*",{"version":626,"is_range":592,"range_type":207,"version_start":627,"version_start_type":594,"version_end":628,"version_end_type":608,"fixed_in":9},">= 9.0, \u003C 9.*","9.0","9.*",{"version":630,"is_range":592,"range_type":207,"version_start":631,"version_start_type":594,"version_end":632,"version_end_type":608,"fixed_in":9},">= 10.0, \u003C 10.*","10.0","10.*",{"version":634,"is_range":592,"range_type":207,"version_start":635,"version_start_type":594,"version_end":636,"version_end_type":608,"fixed_in":9},">= 11.0, \u003C 11.*","11.0","11.*",{"version":638,"is_range":592,"range_type":207,"version_start":639,"version_start_type":594,"version_end":640,"version_end_type":608,"fixed_in":9},">= 12.0, \u003C 12.*","12.0","12.*",{"version":642,"is_range":592,"range_type":207,"version_start":643,"version_start_type":594,"version_end":644,"version_end_type":608,"fixed_in":9},">= 13.0, \u003C 13.*","13.0","13.*",{"version":646,"is_range":592,"range_type":207,"version_start":647,"version_start_type":594,"version_end":648,"version_end_type":608,"fixed_in":9},">= 14.0, \u003C 14.*","14.0","14.*",{"version":650,"is_range":592,"range_type":207,"version_start":651,"version_start_type":594,"version_end":652,"version_end_type":608,"fixed_in":9},">= 15.0, \u003C 15.*","15.0","15.*",{"version":654,"is_range":592,"range_type":207,"version_start":655,"version_start_type":594,"version_end":656,"version_end_type":608,"fixed_in":9},">= 16.0, \u003C 16.*","16.0","16.*",{"version":658,"is_range":592,"range_type":207,"version_start":659,"version_start_type":594,"version_end":660,"version_end_type":608,"fixed_in":9},">= 17.0, \u003C 17.*","17.0","17.*",{"version":662,"is_range":592,"range_type":207,"version_start":663,"version_start_type":594,"version_end":664,"version_end_type":608,"fixed_in":9},">= 18.0, \u003C 18.*","18.0","18.*"]