[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-1526":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T17:19:26.604Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":411,"aliases":412,"duplicate_of":9,"upstream":414,"downstream":415,"duplicates":436,"related":437,"reserved_at":9,"published_at":440,"modified_at":441,"state":442,"summary":443,"references_raw":452,"kevs":565,"epss":566,"epss_history":569,"metrics":843,"affected":853},"CVE-2026-1526","The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessage-deflate decompression. When a WebSocket connection negotiates the permessage-deflate extension, the client decompresses incoming compressed frames without enforcing any limit on the decompressed data size. A malicious WebSocket server can send a small compressed frame (a \"decompression bomb\") that expands to an extremely large size in memory, causing the Node.js process to exhaust available memory and crash or become unresponsive.\n\nThe vulnerability exists in the PerMessageDeflate.decompress() method, which accumulates all decompressed chunks in memory and concatenates them into a single Buffer without checking whether the total size exceeds a safe threshold.",null,[11,19],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-409","Improper Handling of Highly Compressed Data (Data Amplification)","The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.","weakness","Incomplete","Base",[],{"_key":20,"id":20,"name":21,"description":22,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":23,"capec":24},"CWE-770","Allocation of Resources Without Limits or Throttling","The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","High",[25,111,121,125,129,133,137,141,173,235,239,243,273,303,335,339,343,347,351,355],{"id":26,"name":27,"techniques":28},"CAPEC-125","Flooding",[29,83],{"id":30,"name":31,"tactics":32,"countermeasures":36},"T1498.001","Direct Network Flood",[33],{"id":34,"name":35},"TA0105","Impact",[37,42,46,50,54,58,62,66,70,74,79],{"id":38,"name":39,"tactic":40},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":41},"Detect",{"id":43,"name":44,"tactic":45},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":41},{"id":47,"name":48,"tactic":49},"D3-CSPP","Client-server Payload Profiling",{"name":41},{"id":51,"name":52,"tactic":53},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":41},{"id":55,"name":56,"tactic":57},"D3-NTSA","Network Traffic Signature Analysis",{"name":41},{"id":59,"name":60,"tactic":61},"D3-APCA","Application Protocol Command Analysis",{"name":41},{"id":63,"name":64,"tactic":65},"D3-NTCD","Network Traffic Community Deviation",{"name":41},{"id":67,"name":68,"tactic":69},"D3-RTSD","Remote Terminal Session Detection",{"name":41},{"id":71,"name":72,"tactic":73},"D3-ISVA","Inbound Session Volume Analysis",{"name":41},{"id":75,"name":76,"tactic":77},"D3-NTF","Network Traffic Filtering",{"name":78},"Isolate",{"id":80,"name":81,"tactic":82},"D3-ITF","Inbound Traffic Filtering",{"name":78},{"id":84,"name":85,"tactics":86,"countermeasures":88},"T1499","Endpoint Denial of Service",[87],{"id":34,"name":35},[89,91,93,95,97,99,101,103,105,107,109],{"id":38,"name":39,"tactic":90},{"name":41},{"id":43,"name":44,"tactic":92},{"name":41},{"id":47,"name":48,"tactic":94},{"name":41},{"id":51,"name":52,"tactic":96},{"name":41},{"id":55,"name":56,"tactic":98},{"name":41},{"id":59,"name":60,"tactic":100},{"name":41},{"id":63,"name":64,"tactic":102},{"name":41},{"id":67,"name":68,"tactic":104},{"name":41},{"id":71,"name":72,"tactic":106},{"name":41},{"id":75,"name":76,"tactic":108},{"name":78},{"id":80,"name":81,"tactic":110},{"name":78},{"id":112,"name":113,"techniques":114},"CAPEC-130","Excessive Allocation",[115],{"id":116,"name":117,"tactics":118,"countermeasures":120},"T1499.003","Application Exhaustion Flood",[119],{"id":34,"name":35},[],{"id":122,"name":123,"techniques":124},"CAPEC-147","XML Ping of the Death",[],{"id":126,"name":127,"techniques":128},"CAPEC-197","Exponential Data Expansion",[],{"id":130,"name":131,"techniques":132},"CAPEC-229","Serialized Data Parameter Blowup",[],{"id":134,"name":135,"techniques":136},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":138,"name":139,"techniques":140},"CAPEC-231","Oversized Serialized Data Payloads",[],{"id":142,"name":143,"techniques":144},"CAPEC-469","HTTP DoS",[145],{"id":146,"name":147,"tactics":148,"countermeasures":150},"T1499.002","Service Exhaustion Flood",[149],{"id":34,"name":35},[151,153,155,157,159,161,163,165,167,169,171],{"id":38,"name":39,"tactic":152},{"name":41},{"id":43,"name":44,"tactic":154},{"name":41},{"id":47,"name":48,"tactic":156},{"name":41},{"id":51,"name":52,"tactic":158},{"name":41},{"id":55,"name":56,"tactic":160},{"name":41},{"id":59,"name":60,"tactic":162},{"name":41},{"id":63,"name":64,"tactic":164},{"name":41},{"id":67,"name":68,"tactic":166},{"name":41},{"id":71,"name":72,"tactic":168},{"name":41},{"id":75,"name":76,"tactic":170},{"name":78},{"id":80,"name":81,"tactic":172},{"name":78},{"id":174,"name":175,"techniques":176},"CAPEC-482","TCP Flood",[177,203,209],{"id":30,"name":31,"tactics":178,"countermeasures":180},[179],{"id":34,"name":35},[181,183,185,187,189,191,193,195,197,199,201],{"id":38,"name":39,"tactic":182},{"name":41},{"id":43,"name":44,"tactic":184},{"name":41},{"id":47,"name":48,"tactic":186},{"name":41},{"id":51,"name":52,"tactic":188},{"name":41},{"id":55,"name":56,"tactic":190},{"name":41},{"id":59,"name":60,"tactic":192},{"name":41},{"id":63,"name":64,"tactic":194},{"name":41},{"id":67,"name":68,"tactic":196},{"name":41},{"id":71,"name":72,"tactic":198},{"name":41},{"id":75,"name":76,"tactic":200},{"name":78},{"id":80,"name":81,"tactic":202},{"name":78},{"id":204,"name":205,"tactics":206,"countermeasures":208},"T1499.001","OS Exhaustion Flood",[207],{"id":34,"name":35},[],{"id":146,"name":147,"tactics":210,"countermeasures":212},[211],{"id":34,"name":35},[213,215,217,219,221,223,225,227,229,231,233],{"id":38,"name":39,"tactic":214},{"name":41},{"id":43,"name":44,"tactic":216},{"name":41},{"id":47,"name":48,"tactic":218},{"name":41},{"id":51,"name":52,"tactic":220},{"name":41},{"id":55,"name":56,"tactic":222},{"name":41},{"id":59,"name":60,"tactic":224},{"name":41},{"id":63,"name":64,"tactic":226},{"name":41},{"id":67,"name":68,"tactic":228},{"name":41},{"id":71,"name":72,"tactic":230},{"name":41},{"id":75,"name":76,"tactic":232},{"name":78},{"id":80,"name":81,"tactic":234},{"name":78},{"id":236,"name":237,"techniques":238},"CAPEC-486","UDP Flood",[],{"id":240,"name":241,"techniques":242},"CAPEC-487","ICMP Flood",[],{"id":244,"name":245,"techniques":246},"CAPEC-488","HTTP Flood",[247],{"id":146,"name":147,"tactics":248,"countermeasures":250},[249],{"id":34,"name":35},[251,253,255,257,259,261,263,265,267,269,271],{"id":38,"name":39,"tactic":252},{"name":41},{"id":43,"name":44,"tactic":254},{"name":41},{"id":47,"name":48,"tactic":256},{"name":41},{"id":51,"name":52,"tactic":258},{"name":41},{"id":55,"name":56,"tactic":260},{"name":41},{"id":59,"name":60,"tactic":262},{"name":41},{"id":63,"name":64,"tactic":264},{"name":41},{"id":67,"name":68,"tactic":266},{"name":41},{"id":71,"name":72,"tactic":268},{"name":41},{"id":75,"name":76,"tactic":270},{"name":78},{"id":80,"name":81,"tactic":272},{"name":78},{"id":274,"name":275,"techniques":276},"CAPEC-489","SSL Flood",[277],{"id":146,"name":147,"tactics":278,"countermeasures":280},[279],{"id":34,"name":35},[281,283,285,287,289,291,293,295,297,299,301],{"id":38,"name":39,"tactic":282},{"name":41},{"id":43,"name":44,"tactic":284},{"name":41},{"id":47,"name":48,"tactic":286},{"name":41},{"id":51,"name":52,"tactic":288},{"name":41},{"id":55,"name":56,"tactic":290},{"name":41},{"id":59,"name":60,"tactic":292},{"name":41},{"id":63,"name":64,"tactic":294},{"name":41},{"id":67,"name":68,"tactic":296},{"name":41},{"id":71,"name":72,"tactic":298},{"name":41},{"id":75,"name":76,"tactic":300},{"name":78},{"id":80,"name":81,"tactic":302},{"name":78},{"id":304,"name":305,"techniques":306},"CAPEC-490","Amplification",[307],{"id":308,"name":309,"tactics":310,"countermeasures":312},"T1498.002","Reflection Amplification",[311],{"id":34,"name":35},[313,315,317,319,321,323,325,327,329,331,333],{"id":38,"name":39,"tactic":314},{"name":41},{"id":43,"name":44,"tactic":316},{"name":41},{"id":47,"name":48,"tactic":318},{"name":41},{"id":51,"name":52,"tactic":320},{"name":41},{"id":55,"name":56,"tactic":322},{"name":41},{"id":59,"name":60,"tactic":324},{"name":41},{"id":63,"name":64,"tactic":326},{"name":41},{"id":67,"name":68,"tactic":328},{"name":41},{"id":71,"name":72,"tactic":330},{"name":41},{"id":75,"name":76,"tactic":332},{"name":78},{"id":80,"name":81,"tactic":334},{"name":78},{"id":336,"name":337,"techniques":338},"CAPEC-491","Quadratic Data Expansion",[],{"id":340,"name":341,"techniques":342},"CAPEC-493","SOAP Array Blowup",[],{"id":344,"name":345,"techniques":346},"CAPEC-494","TCP Fragmentation",[],{"id":348,"name":349,"techniques":350},"CAPEC-495","UDP Fragmentation",[],{"id":352,"name":353,"techniques":354},"CAPEC-496","ICMP Fragmentation",[],{"id":356,"name":357,"techniques":358},"CAPEC-528","XML Flood",[359,385],{"id":146,"name":147,"tactics":360,"countermeasures":362},[361],{"id":34,"name":35},[363,365,367,369,371,373,375,377,379,381,383],{"id":38,"name":39,"tactic":364},{"name":41},{"id":43,"name":44,"tactic":366},{"name":41},{"id":47,"name":48,"tactic":368},{"name":41},{"id":51,"name":52,"tactic":370},{"name":41},{"id":55,"name":56,"tactic":372},{"name":41},{"id":59,"name":60,"tactic":374},{"name":41},{"id":63,"name":64,"tactic":376},{"name":41},{"id":67,"name":68,"tactic":378},{"name":41},{"id":71,"name":72,"tactic":380},{"name":41},{"id":75,"name":76,"tactic":382},{"name":78},{"id":80,"name":81,"tactic":384},{"name":78},{"id":30,"name":31,"tactics":386,"countermeasures":388},[387],{"id":34,"name":35},[389,391,393,395,397,399,401,403,405,407,409],{"id":38,"name":39,"tactic":390},{"name":41},{"id":43,"name":44,"tactic":392},{"name":41},{"id":47,"name":48,"tactic":394},{"name":41},{"id":51,"name":52,"tactic":396},{"name":41},{"id":55,"name":56,"tactic":398},{"name":41},{"id":59,"name":60,"tactic":400},{"name":41},{"id":63,"name":64,"tactic":402},{"name":41},{"id":67,"name":68,"tactic":404},{"name":41},{"id":71,"name":72,"tactic":406},{"name":41},{"id":75,"name":76,"tactic":408},{"name":78},{"id":80,"name":81,"tactic":410},{"name":78},[],[413],"GHSA-vrm6-8vpv-qv8q",[],[416,418,420,422,424,426,428,430,432,434],{"_key":417},"DEBIAN-CVE-2026-1526",{"_key":419},"UBUNTU-CVE-2026-1526",{"_key":421},"RHSA-2026:7080",{"_key":423},"RHSA-2026:7123",{"_key":425},"RHSA-2026:7302",{"_key":427},"RHSA-2026:7310",{"_key":429},"RHSA-2026:7350",{"_key":431},"RHSA-2026:7670",{"_key":433},"RHSA-2026:7675",{"_key":435},"RHSA-2026:7983",[],[438],{"_key":439},"CGA-XMGJ-HC7R-RJJG","2026-03-12T20:08:05.950Z","2026-07-15T01:21:37.085Z","Analyzed",{"cisa_kev":444,"cisa_ransomware":444,"cisa_vendor":9,"epss_severity":445,"epss_score":446,"severity":447,"severity_score":448,"severity_version":449,"severity_source":450,"severity_vector":451,"severity_status":442},false,"low",0.0115,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[453,461,466,470,475,480,485,489,495,500,505,509,513,517,521,525,529,533,537,541,545,549,553,557,561],{"url":454,"sources":455,"tags":458},"https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q",[450,456,457],"nvd","osv_npm",[459,460],"WEB","Vendor Advisory",{"url":462,"sources":463,"tags":464},"https://hackerone.com/reports/3481206",[450,456,457],[459,465],"Permissions Required",{"url":467,"sources":468,"tags":469},"https://cna.openjsf.org/security-advisories.html",[450,456,457],[459,460],{"url":471,"sources":472,"tags":473},"https://datatracker.ietf.org/doc/html/rfc7692",[450,456,457],[459,474],"Technical Description",{"url":476,"sources":477,"tags":478},"https://nvd.nist.gov/vuln/detail/CVE-2026-1526",[457],[479],"Advisory",{"url":481,"sources":482,"tags":483},"https://github.com/nodejs/undici",[457],[484],"PACKAGE",{"url":486,"sources":487,"tags":488},"https://owasp.org/www-community/attacks/Denial_of_Service",[457],[459],{"url":490,"sources":491,"tags":492},"https://access.redhat.com/security/cve/CVE-2026-1526",[450],[493,494],"VDB Entry","X Refsource REDHAT",{"url":496,"sources":497,"tags":498},"https://bugzilla.redhat.com/show_bug.cgi?id=2447142",[450],[499,494],"Issue Tracking",{"url":501,"sources":502,"tags":503},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1526.json",[450],[504],"X Sadp Csaf Vex",{"url":506,"sources":507,"tags":508},"https://access.redhat.com/errata/RHSA-2026:17789",[450],[460,494],{"url":510,"sources":511,"tags":512},"https://access.redhat.com/errata/RHSA-2026:7310",[450],[460,494],{"url":514,"sources":515,"tags":516},"https://access.redhat.com/errata/RHSA-2026:7080",[450],[460,494],{"url":518,"sources":519,"tags":520},"https://access.redhat.com/errata/RHSA-2026:7675",[450],[460,494],{"url":522,"sources":523,"tags":524},"https://access.redhat.com/errata/RHSA-2026:7123",[450],[460,494],{"url":526,"sources":527,"tags":528},"https://access.redhat.com/errata/RHSA-2026:7670",[450],[460,494],{"url":530,"sources":531,"tags":532},"https://access.redhat.com/errata/RHSA-2026:7983",[450],[460,494],{"url":534,"sources":535,"tags":536},"https://access.redhat.com/errata/RHSA-2026:7302",[450],[460,494],{"url":538,"sources":539,"tags":540},"https://access.redhat.com/errata/RHSA-2026:7350",[450],[460,494],{"url":542,"sources":543,"tags":544},"https://access.redhat.com/errata/RHSA-2026:9742",[450],[460,494],{"url":546,"sources":547,"tags":548},"https://access.redhat.com/errata/RHSA-2026:13826",[450],[460,494],{"url":550,"sources":551,"tags":552},"https://access.redhat.com/errata/RHSA-2026:5807",[450],[460,494],{"url":554,"sources":555,"tags":556},"https://access.redhat.com/errata/RHSA-2026:21772",[450],[460,494],{"url":558,"sources":559,"tags":560},"https://access.redhat.com/errata/RHSA-2026:21931",[450],[460,494],{"url":562,"sources":563,"tags":564},"https://access.redhat.com/errata/RHSA-2026:34342",[450],[460,494],[],{"date":567,"score":446,"percentile":568},"2026-07-05",0.63032,[570,574,577,580,583,587,591,593,596,600,603,606,609,612,615,618,621,624,627,630,633,636,639,642,645,648,651,654,657,660,663,666,670,673,676,679,682,685,688,691,694,697,700,703,706,709,712,715,718,721,723,726,729,732,735,738,741,744,747,750,753,756,759,762,765,768,771,773,777,780,783,786,789,792,795,798,801,804,807,810,813,816,819,822,825,828,831,834,837,840],{"date":571,"score":572,"percentile":573},"2026-03-13",0.00042,0.12434,{"date":575,"score":572,"percentile":576},"2026-03-14",0.1244,{"date":578,"score":572,"percentile":579},"2026-03-15",0.12406,{"date":581,"score":572,"percentile":582},"2026-03-16",0.1236,{"date":584,"score":585,"percentile":586},"2026-03-17",0.00051,0.15661,{"date":588,"score":589,"percentile":590},"2026-03-18",0.00067,0.20507,{"date":592,"score":589,"percentile":590},"2026-03-19",{"date":594,"score":589,"percentile":595},"2026-03-20",0.20559,{"date":597,"score":598,"percentile":599},"2026-03-21",0.00018,0.04711,{"date":601,"score":598,"percentile":602},"2026-03-22",0.04703,{"date":604,"score":598,"percentile":605},"2026-03-23",0.04699,{"date":607,"score":598,"percentile":608},"2026-03-24",0.04681,{"date":610,"score":598,"percentile":611},"2026-03-25",0.04727,{"date":613,"score":598,"percentile":614},"2026-03-26",0.04758,{"date":616,"score":598,"percentile":617},"2026-03-27",0.04759,{"date":619,"score":598,"percentile":620},"2026-03-28",0.04761,{"date":622,"score":598,"percentile":623},"2026-03-29",0.04757,{"date":625,"score":598,"percentile":626},"2026-03-30",0.04738,{"date":628,"score":598,"percentile":629},"2026-03-31",0.04706,{"date":631,"score":598,"percentile":632},"2026-04-01",0.04723,{"date":634,"score":598,"percentile":635},"2026-04-02",0.04784,{"date":637,"score":598,"percentile":638},"2026-04-03",0.04797,{"date":640,"score":598,"percentile":641},"2026-04-04",0.04808,{"date":643,"score":598,"percentile":644},"2026-04-05",0.04803,{"date":646,"score":598,"percentile":647},"2026-04-06",0.04809,{"date":649,"score":598,"percentile":650},"2026-04-07",0.04824,{"date":652,"score":598,"percentile":653},"2026-04-08",0.04862,{"date":655,"score":598,"percentile":656},"2026-04-09",0.0488,{"date":658,"score":598,"percentile":659},"2026-04-10",0.04879,{"date":661,"score":598,"percentile":662},"2026-04-11",0.04857,{"date":664,"score":598,"percentile":665},"2026-04-12",0.04834,{"date":667,"score":668,"percentile":669},"2026-04-13",0.0002,0.05394,{"date":671,"score":668,"percentile":672},"2026-04-14",0.05327,{"date":674,"score":668,"percentile":675},"2026-04-15",0.05328,{"date":677,"score":668,"percentile":678},"2026-04-16",0.05343,{"date":680,"score":668,"percentile":681},"2026-04-17",0.05351,{"date":683,"score":668,"percentile":684},"2026-04-18",0.05345,{"date":686,"score":668,"percentile":687},"2026-04-19",0.05339,{"date":689,"score":668,"percentile":690},"2026-04-20",0.05336,{"date":692,"score":668,"percentile":693},"2026-04-21",0.05508,{"date":695,"score":668,"percentile":696},"2026-04-22",0.0552,{"date":698,"score":668,"percentile":699},"2026-04-23",0.05546,{"date":701,"score":668,"percentile":702},"2026-04-24",0.05545,{"date":704,"score":668,"percentile":705},"2026-04-25",0.05586,{"date":707,"score":668,"percentile":708},"2026-04-26",0.05582,{"date":710,"score":668,"percentile":711},"2026-04-27",0.05574,{"date":713,"score":668,"percentile":714},"2026-04-28",0.05566,{"date":716,"score":668,"percentile":717},"2026-04-29",0.05583,{"date":719,"score":668,"percentile":720},"2026-04-30",0.05588,{"date":722,"score":668,"percentile":720},"2026-05-01",{"date":724,"score":668,"percentile":725},"2026-05-02",0.05604,{"date":727,"score":668,"percentile":728},"2026-05-03",0.05599,{"date":730,"score":668,"percentile":731},"2026-05-04",0.05594,{"date":733,"score":668,"percentile":734},"2026-05-05",0.05589,{"date":736,"score":668,"percentile":737},"2026-05-06",0.05596,{"date":739,"score":668,"percentile":740},"2026-05-07",0.05643,{"date":742,"score":668,"percentile":743},"2026-05-08",0.05649,{"date":745,"score":668,"percentile":746},"2026-05-09",0.0573,{"date":748,"score":668,"percentile":749},"2026-05-10",0.05746,{"date":751,"score":668,"percentile":752},"2026-05-11",0.05741,{"date":754,"score":668,"percentile":755},"2026-05-12",0.05745,{"date":757,"score":668,"percentile":758},"2026-05-13",0.0576,{"date":760,"score":668,"percentile":761},"2026-05-14",0.0575,{"date":763,"score":668,"percentile":764},"2026-05-15",0.05765,{"date":766,"score":668,"percentile":767},"2026-05-16",0.05774,{"date":769,"score":668,"percentile":770},"2026-05-17",0.05771,{"date":772,"score":668,"percentile":752},"2026-05-18",{"date":774,"score":775,"percentile":776},"2026-05-19",0.00021,0.05994,{"date":778,"score":775,"percentile":779},"2026-05-20",0.05959,{"date":781,"score":775,"percentile":782},"2026-05-21",0.05951,{"date":784,"score":775,"percentile":785},"2026-05-22",0.06174,{"date":787,"score":775,"percentile":788},"2026-05-23",0.06158,{"date":790,"score":775,"percentile":791},"2026-05-24",0.06157,{"date":793,"score":775,"percentile":794},"2026-05-25",0.06139,{"date":796,"score":775,"percentile":797},"2026-05-26",0.0612,{"date":799,"score":775,"percentile":800},"2026-05-27",0.06156,{"date":802,"score":775,"percentile":803},"2026-05-28",0.06244,{"date":805,"score":775,"percentile":806},"2026-05-29",0.0625,{"date":808,"score":775,"percentile":809},"2026-05-30",0.06238,{"date":811,"score":775,"percentile":812},"2026-05-31",0.06227,{"date":814,"score":775,"percentile":815},"2026-06-01",0.06178,{"date":817,"score":775,"percentile":818},"2026-06-02",0.06094,{"date":820,"score":775,"percentile":821},"2026-06-03",0.06053,{"date":823,"score":775,"percentile":824},"2026-06-04",0.06056,{"date":826,"score":775,"percentile":827},"2026-06-05",0.06082,{"date":829,"score":775,"percentile":830},"2026-06-06",0.0607,{"date":832,"score":775,"percentile":833},"2026-06-07",0.06067,{"date":835,"score":775,"percentile":836},"2026-06-08",0.06019,{"date":838,"score":775,"percentile":839},"2026-06-09",0.06044,{"date":841,"score":775,"percentile":842},"2026-06-10",0.06069,[844,849,851],{"source":450,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":845,"cvss_v4_0":9},{"baseScore":448,"baseSeverity":846,"vectorString":451,"impactScore":847,"exploitabilityScore":848},"HIGH",6,10,{"source":456,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":850,"cvss_v4_0":9},{"baseScore":448,"baseSeverity":846,"vectorString":451,"impactScore":847,"exploitabilityScore":848},{"source":457,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":852,"cvss_v4_0":9},{"baseScore":448,"baseSeverity":9,"vectorString":451,"impactScore":847,"exploitabilityScore":848},[854,870,879],{"ecosystem":9,"name":855,"vendor":856,"product":855,"cpe_part":857,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":858},"undici","nodejs","a",[859,865],{"version":860,"is_range":861,"range_type":862,"version_start":9,"version_start_type":9,"version_end":863,"version_end_type":864,"fixed_in":9},"lt6.24.0",true,"cpe","6.24.0","excluding",{"version":866,"is_range":861,"range_type":862,"version_start":867,"version_start_type":868,"version_end":869,"version_end_type":864,"fixed_in":9},"gte7.0.0_lt7.24.0","7.0.0","including","7.24.0",{"ecosystem":871,"name":855,"vendor":871,"product":855,"cpe_part":9,"purl_type":872,"purl_namespace":9,"purl_name":855,"source":9,"versions":873},"Npm","npm",[874,877],{"version":875,"is_range":861,"range_type":876,"version_start":9,"version_start_type":9,"version_end":863,"version_end_type":864,"fixed_in":9},"lt6_24_0","semver",{"version":878,"is_range":861,"range_type":876,"version_start":867,"version_start_type":868,"version_end":869,"version_end_type":864,"fixed_in":9},"gte7_0_0_lt7_24_0",{"ecosystem":9,"name":855,"vendor":855,"product":855,"cpe_part":857,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":880},[881],{"version":882,"is_range":861,"range_type":450,"version_start":9,"version_start_type":9,"version_end":883,"version_end_type":864,"fixed_in":9},"\u003C 6.24.0; 7.0.0 \u003C 7.24.0","6.24.0; 7.0.0 \u003C 7.24.0"]