[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-1528":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T17:19:26.604Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":25,"aliases":26,"duplicate_of":9,"upstream":28,"downstream":29,"duplicates":50,"related":51,"reserved_at":9,"published_at":54,"modified_at":55,"state":56,"summary":57,"references_raw":66,"kevs":170,"epss":171,"epss_history":174,"metrics":450,"affected":460},"CVE-2026-1528","ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length. undici's ByteParser overflows internal math, ends up in an invalid state, and throws a fatal TypeError that terminates the process.\n\nPatches\n\nPatched in the undici version v7.24.0 and v6.24.0. Users should upgrade to this version or later.",null,[11,19],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-248","Uncaught Exception","An exception is thrown from a function, but it is not caught.","weakness","Draft","Base",[],{"_key":20,"id":20,"name":21,"description":22,"type":15,"status":23,"abstraction":17,"likelihood_of_exploit":9,"capec":24},"CWE-1284","Improper Validation of Specified Quantity in Input","The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.","Incomplete",[],[],[27],"GHSA-f269-vfmq-vjvj",[],[30,32,34,36,38,40,42,44,46,48],{"_key":31},"DEBIAN-CVE-2026-1528",{"_key":33},"UBUNTU-CVE-2026-1528",{"_key":35},"RHSA-2026:7080",{"_key":37},"RHSA-2026:7123",{"_key":39},"RHSA-2026:7302",{"_key":41},"RHSA-2026:7310",{"_key":43},"RHSA-2026:7350",{"_key":45},"RHSA-2026:7670",{"_key":47},"RHSA-2026:7675",{"_key":49},"RHSA-2026:7983",[],[52],{"_key":53},"CGA-W442-VJ6R-7J29","2026-03-12T20:21:57.775Z","2026-07-15T01:21:34.462Z","Analyzed",{"cisa_kev":58,"cisa_ransomware":58,"cisa_vendor":9,"epss_severity":59,"epss_score":60,"severity":61,"severity_score":62,"severity_version":63,"severity_source":64,"severity_vector":65,"severity_status":56},false,"low",0.00488,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[67,75,80,84,89,94,100,105,110,114,118,122,126,130,134,138,142,146,150,154,158,162,166],{"url":68,"sources":69,"tags":72},"https://github.com/nodejs/undici/security/advisories/GHSA-f269-vfmq-vjvj",[64,70,71],"nvd","osv_npm",[73,74],"WEB","Vendor Advisory",{"url":76,"sources":77,"tags":78},"https://hackerone.com/reports/3537648",[64,70,71],[73,79],"Permissions Required",{"url":81,"sources":82,"tags":83},"https://cna.openjsf.org/security-advisories.html",[64,70,71],[73,74],{"url":85,"sources":86,"tags":87},"https://nvd.nist.gov/vuln/detail/CVE-2026-1528",[71],[88],"Advisory",{"url":90,"sources":91,"tags":92},"https://github.com/nodejs/undici",[71],[93],"PACKAGE",{"url":95,"sources":96,"tags":97},"https://access.redhat.com/security/cve/CVE-2026-1528",[64],[98,99],"VDB Entry","X Refsource REDHAT",{"url":101,"sources":102,"tags":103},"https://bugzilla.redhat.com/show_bug.cgi?id=2447145",[64],[104,99],"Issue Tracking",{"url":106,"sources":107,"tags":108},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1528.json",[64],[109],"X Sadp Csaf Vex",{"url":111,"sources":112,"tags":113},"https://access.redhat.com/errata/RHSA-2026:17789",[64],[74,99],{"url":115,"sources":116,"tags":117},"https://access.redhat.com/errata/RHSA-2026:7310",[64],[74,99],{"url":119,"sources":120,"tags":121},"https://access.redhat.com/errata/RHSA-2026:7080",[64],[74,99],{"url":123,"sources":124,"tags":125},"https://access.redhat.com/errata/RHSA-2026:7675",[64],[74,99],{"url":127,"sources":128,"tags":129},"https://access.redhat.com/errata/RHSA-2026:7123",[64],[74,99],{"url":131,"sources":132,"tags":133},"https://access.redhat.com/errata/RHSA-2026:7670",[64],[74,99],{"url":135,"sources":136,"tags":137},"https://access.redhat.com/errata/RHSA-2026:7983",[64],[74,99],{"url":139,"sources":140,"tags":141},"https://access.redhat.com/errata/RHSA-2026:7302",[64],[74,99],{"url":143,"sources":144,"tags":145},"https://access.redhat.com/errata/RHSA-2026:7350",[64],[74,99],{"url":147,"sources":148,"tags":149},"https://access.redhat.com/errata/RHSA-2026:9742",[64],[74,99],{"url":151,"sources":152,"tags":153},"https://access.redhat.com/errata/RHSA-2026:13826",[64],[74,99],{"url":155,"sources":156,"tags":157},"https://access.redhat.com/errata/RHSA-2026:5807",[64],[74,99],{"url":159,"sources":160,"tags":161},"https://access.redhat.com/errata/RHSA-2026:21772",[64],[74,99],{"url":163,"sources":164,"tags":165},"https://access.redhat.com/errata/RHSA-2026:21931",[64],[74,99],{"url":167,"sources":168,"tags":169},"https://access.redhat.com/errata/RHSA-2026:34342",[64],[74,99],[],{"date":172,"score":60,"percentile":173},"2026-07-05",0.38517,[175,179,182,185,188,191,195,198,201,205,208,211,214,217,220,223,226,229,232,235,238,241,244,247,250,253,256,259,262,265,268,271,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,338,341,344,347,350,353,356,359,362,365,368,371,374,377,380,384,387,390,393,396,399,402,405,408,411,414,417,420,423,426,429,432,435,438,441,444,447],{"date":176,"score":177,"percentile":178},"2026-03-13",0.00056,0.17338,{"date":180,"score":177,"percentile":181},"2026-03-14",0.17342,{"date":183,"score":177,"percentile":184},"2026-03-15",0.17282,{"date":186,"score":177,"percentile":187},"2026-03-16",0.17252,{"date":189,"score":177,"percentile":190},"2026-03-17",0.17222,{"date":192,"score":193,"percentile":194},"2026-03-18",0.00066,0.20111,{"date":196,"score":193,"percentile":197},"2026-03-19",0.20113,{"date":199,"score":193,"percentile":200},"2026-03-20",0.2016,{"date":202,"score":203,"percentile":204},"2026-03-21",0.00128,0.32147,{"date":206,"score":203,"percentile":207},"2026-03-22",0.32134,{"date":209,"score":203,"percentile":210},"2026-03-23",0.32112,{"date":212,"score":203,"percentile":213},"2026-03-24",0.32117,{"date":215,"score":203,"percentile":216},"2026-03-25",0.32165,{"date":218,"score":203,"percentile":219},"2026-03-26",0.32207,{"date":221,"score":203,"percentile":222},"2026-03-27",0.32241,{"date":224,"score":203,"percentile":225},"2026-03-28",0.32254,{"date":227,"score":203,"percentile":228},"2026-03-29",0.32218,{"date":230,"score":203,"percentile":231},"2026-03-30",0.32202,{"date":233,"score":203,"percentile":234},"2026-03-31",0.32179,{"date":236,"score":203,"percentile":237},"2026-04-01",0.32196,{"date":239,"score":203,"percentile":240},"2026-04-02",0.32332,{"date":242,"score":203,"percentile":243},"2026-04-03",0.32342,{"date":245,"score":203,"percentile":246},"2026-04-04",0.3237,{"date":248,"score":203,"percentile":249},"2026-04-05",0.32326,{"date":251,"score":203,"percentile":252},"2026-04-06",0.32192,{"date":254,"score":203,"percentile":255},"2026-04-07",0.32194,{"date":257,"score":203,"percentile":258},"2026-04-08",0.32243,{"date":260,"score":203,"percentile":261},"2026-04-09",0.32271,{"date":263,"score":203,"percentile":264},"2026-04-10",0.32291,{"date":266,"score":203,"percentile":267},"2026-04-11",0.32272,{"date":269,"score":203,"percentile":270},"2026-04-12",0.32234,{"date":272,"score":273,"percentile":274},"2026-04-13",0.0014,0.34129,{"date":276,"score":273,"percentile":277},"2026-04-14",0.34124,{"date":279,"score":273,"percentile":280},"2026-04-15",0.34185,{"date":282,"score":273,"percentile":283},"2026-04-16",0.34167,{"date":285,"score":273,"percentile":286},"2026-04-17",0.3415,{"date":288,"score":273,"percentile":289},"2026-04-18",0.34153,{"date":291,"score":273,"percentile":292},"2026-04-19",0.34128,{"date":294,"score":273,"percentile":295},"2026-04-20",0.34116,{"date":297,"score":273,"percentile":298},"2026-04-21",0.34118,{"date":300,"score":273,"percentile":301},"2026-04-22",0.34173,{"date":303,"score":273,"percentile":304},"2026-04-23",0.34181,{"date":306,"score":273,"percentile":307},"2026-04-24",0.33745,{"date":309,"score":273,"percentile":310},"2026-04-25",0.33752,{"date":312,"score":273,"percentile":313},"2026-04-26",0.33723,{"date":315,"score":273,"percentile":316},"2026-04-27",0.33701,{"date":318,"score":273,"percentile":319},"2026-04-28",0.3364,{"date":321,"score":273,"percentile":322},"2026-04-29",0.33634,{"date":324,"score":273,"percentile":325},"2026-04-30",0.33601,{"date":327,"score":273,"percentile":328},"2026-05-01",0.33609,{"date":330,"score":273,"percentile":331},"2026-05-02",0.33642,{"date":333,"score":273,"percentile":334},"2026-05-03",0.33589,{"date":336,"score":273,"percentile":337},"2026-05-04",0.33535,{"date":339,"score":273,"percentile":340},"2026-05-05",0.33516,{"date":342,"score":273,"percentile":343},"2026-05-06",0.33523,{"date":345,"score":273,"percentile":346},"2026-05-07",0.33585,{"date":348,"score":273,"percentile":349},"2026-05-08",0.33576,{"date":351,"score":273,"percentile":352},"2026-05-09",0.33627,{"date":354,"score":273,"percentile":355},"2026-05-10",0.33591,{"date":357,"score":273,"percentile":358},"2026-05-11",0.33538,{"date":360,"score":273,"percentile":361},"2026-05-12",0.33562,{"date":363,"score":273,"percentile":364},"2026-05-13",0.33612,{"date":366,"score":273,"percentile":367},"2026-05-14",0.33638,{"date":369,"score":273,"percentile":370},"2026-05-15",0.33663,{"date":372,"score":273,"percentile":373},"2026-05-16",0.33672,{"date":375,"score":273,"percentile":376},"2026-05-17",0.33625,{"date":378,"score":273,"percentile":379},"2026-05-18",0.33575,{"date":381,"score":382,"percentile":383},"2026-05-19",0.0012,0.30433,{"date":385,"score":382,"percentile":386},"2026-05-20",0.30435,{"date":388,"score":382,"percentile":389},"2026-05-21",0.30439,{"date":391,"score":382,"percentile":392},"2026-05-22",0.30482,{"date":394,"score":382,"percentile":395},"2026-05-23",0.30481,{"date":397,"score":382,"percentile":398},"2026-05-24",0.3045,{"date":400,"score":382,"percentile":401},"2026-05-25",0.30427,{"date":403,"score":382,"percentile":404},"2026-05-26",0.30411,{"date":406,"score":382,"percentile":407},"2026-05-27",0.3047,{"date":409,"score":382,"percentile":410},"2026-05-28",0.30576,{"date":412,"score":382,"percentile":413},"2026-05-29",0.30622,{"date":415,"score":382,"percentile":416},"2026-05-30",0.30632,{"date":418,"score":382,"percentile":419},"2026-05-31",0.30617,{"date":421,"score":382,"percentile":422},"2026-06-01",0.3058,{"date":424,"score":382,"percentile":425},"2026-06-02",0.30596,{"date":427,"score":382,"percentile":428},"2026-06-03",0.30583,{"date":430,"score":382,"percentile":431},"2026-06-04",0.30521,{"date":433,"score":382,"percentile":434},"2026-06-05",0.30594,{"date":436,"score":382,"percentile":437},"2026-06-06",0.30561,{"date":439,"score":382,"percentile":440},"2026-06-07",0.3053,{"date":442,"score":382,"percentile":443},"2026-06-08",0.30497,{"date":445,"score":382,"percentile":446},"2026-06-09",0.30514,{"date":448,"score":382,"percentile":449},"2026-06-10",0.30548,[451,456,458],{"source":64,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":452,"cvss_v4_0":9},{"baseScore":62,"baseSeverity":453,"vectorString":65,"impactScore":454,"exploitabilityScore":455},"HIGH",6,10,{"source":70,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":457,"cvss_v4_0":9},{"baseScore":62,"baseSeverity":453,"vectorString":65,"impactScore":454,"exploitabilityScore":455},{"source":71,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":459,"cvss_v4_0":9},{"baseScore":62,"baseSeverity":9,"vectorString":65,"impactScore":454,"exploitabilityScore":455},[461,477,487],{"ecosystem":9,"name":462,"vendor":463,"product":462,"cpe_part":464,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":465},"undici","nodejs","a",[466,472],{"version":467,"is_range":468,"range_type":469,"version_start":9,"version_start_type":9,"version_end":470,"version_end_type":471,"fixed_in":9},"lt6.24.0",true,"cpe","6.24.0","excluding",{"version":473,"is_range":468,"range_type":469,"version_start":474,"version_start_type":475,"version_end":476,"version_end_type":471,"fixed_in":9},"gte7.0.0_lt7.24.0","7.0.0","including","7.24.0",{"ecosystem":478,"name":462,"vendor":478,"product":462,"cpe_part":9,"purl_type":479,"purl_namespace":9,"purl_name":462,"source":9,"versions":480},"Npm","npm",[481,485],{"version":482,"is_range":468,"range_type":483,"version_start":484,"version_start_type":475,"version_end":470,"version_end_type":471,"fixed_in":9},"gte6_0_0_lt6_24_0","semver","6.0.0",{"version":486,"is_range":468,"range_type":483,"version_start":474,"version_start_type":475,"version_end":476,"version_end_type":471,"fixed_in":9},"gte7_0_0_lt7_24_0",{"ecosystem":9,"name":462,"vendor":462,"product":462,"cpe_part":464,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":488},[489],{"version":490,"is_range":468,"range_type":64,"version_start":491,"version_start_type":475,"version_end":9,"version_end_type":9,"fixed_in":9},">= 6.0.0 \u003C 6.24.0; 7.0.0 \u003C 7.24.0","6.0.0 \u003C 6.24.0; 7.0.0 \u003C 7.24.0"]