[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-21637":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T16:22:42.503Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":86,"aliases":87,"duplicate_of":9,"upstream":88,"downstream":89,"duplicates":178,"related":179,"reserved_at":9,"published_at":202,"modified_at":203,"state":204,"summary":205,"references_raw":214,"kevs":222,"epss":223,"epss_history":226,"metrics":504,"affected":517},"CVE-2026-21637","A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use. Synchronous exceptions thrown during these callbacks bypass standard TLS error handling paths (tlsClientError and error), causing either immediate process termination or silent file descriptor leaks that eventually lead to denial of service. Because these callbacks process attacker-controlled input during the TLS handshake, a remote client can repeatedly trigger the issue. This vulnerability affects TLS servers using PSK or ALPN callbacks across Node.js versions where these callbacks throw without being safely wrapped.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-400","Uncontrolled Resource Consumption","The product does not properly control the allocation and maintenance of a limited resource.","weakness","Draft","Class","High",[20,24,82],{"id":21,"name":22,"techniques":23},"CAPEC-147","XML Ping of the Death",[],{"id":25,"name":26,"techniques":27},"CAPEC-227","Sustained Client Engagement",[28],{"id":29,"name":30,"tactics":31,"countermeasures":35},"T1499","Endpoint Denial of Service",[32],{"id":33,"name":34},"TA0105","Impact",[36,41,45,49,53,57,61,65,69,73,78],{"id":37,"name":38,"tactic":39},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":40},"Detect",{"id":42,"name":43,"tactic":44},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":40},{"id":46,"name":47,"tactic":48},"D3-CSPP","Client-server Payload Profiling",{"name":40},{"id":50,"name":51,"tactic":52},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":40},{"id":54,"name":55,"tactic":56},"D3-NTSA","Network Traffic Signature Analysis",{"name":40},{"id":58,"name":59,"tactic":60},"D3-APCA","Application Protocol Command Analysis",{"name":40},{"id":62,"name":63,"tactic":64},"D3-NTCD","Network Traffic Community Deviation",{"name":40},{"id":66,"name":67,"tactic":68},"D3-RTSD","Remote Terminal Session Detection",{"name":40},{"id":70,"name":71,"tactic":72},"D3-ISVA","Inbound Session Volume Analysis",{"name":40},{"id":74,"name":75,"tactic":76},"D3-NTF","Network Traffic Filtering",{"name":77},"Isolate",{"id":79,"name":80,"tactic":81},"D3-ITF","Inbound Traffic Filtering",{"name":77},{"id":83,"name":84,"techniques":85},"CAPEC-492","Regular Expression Exponential Blowup",[],[],[],[],[90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148,150,152,154,156,158,160,162,164,166,168,170,172,174,176],{"_key":91},"SUSE-SU-2026:0301-1",{"_key":93},"SUSE-SU-2026:0457-1",{"_key":95},"SUSE-SU-2026:20436-1",{"_key":97},"DSA-6166-1",{"_key":99},"SUSE-SU-2026:0295-1",{"_key":101},"SUSE-SU-2026:0435-1",{"_key":103},"OPENSUSE-SU-2026:10062-1",{"_key":105},"OPENSUSE-SU-2026:10074-1",{"_key":107},"OPENSUSE-SU-2026:20236-1",{"_key":109},"DSA-6183-1",{"_key":111},"SUSE-SU-2026:1299-1",{"_key":113},"MGASA-2026-0009",{"_key":115},"MGASA-2026-0071",{"_key":117},"SUSE-SU-2026:1363-1",{"_key":119},"SUSE-SU-2026:1371-1",{"_key":121},"SUSE-SU-2026:1478-1",{"_key":123},"SUSE-SU-2026:1509-1",{"_key":125},"SUSE-SU-2026:21181-1",{"_key":127},"OPENSUSE-SU-2026:20519-1",{"_key":129},"UBUNTU-CVE-2026-21637",{"_key":131},"DEBIAN-CVE-2026-21637",{"_key":133},"OPENSUSE-SU-2026:11110-1",{"_key":135},"ALPINE-CVE-2026-21637",{"_key":137},"SUSE-SU-2026:22368-1",{"_key":139},"RHSA-2026:1842",{"_key":141},"RHSA-2026:1843",{"_key":143},"RHSA-2026:2420",{"_key":145},"RHSA-2026:2421",{"_key":147},"RHSA-2026:2422",{"_key":149},"RHSA-2026:2767",{"_key":151},"RHSA-2026:2768",{"_key":153},"RHSA-2026:2781",{"_key":155},"RHSA-2026:2782",{"_key":157},"RHSA-2026:2783",{"_key":159},"RHSA-2026:2864",{"_key":161},"RHSA-2026:2899",{"_key":163},"OPENSUSE-SU-2026:21058-1",{"_key":165},"RHSA-2026:6402",{"_key":167},"RHSA-2026:6431",{"_key":169},"RHSA-2026:7350",{"_key":171},"RHSA-2026:7386",{"_key":173},"RHSA-2026:7387",{"_key":175},"RHSA-2026:7670",{"_key":177},"RHSA-2026:7675",[],[180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200],{"_key":91},{"_key":93},{"_key":95},{"_key":99},{"_key":101},{"_key":103},{"_key":105},{"_key":107},{"_key":111},{"_key":113},{"_key":115},{"_key":117},{"_key":119},{"_key":121},{"_key":123},{"_key":125},{"_key":127},{"_key":133},{"_key":137},{"_key":163},{"_key":201},"CGA-9MRV-P3FW-QJ5C","2026-01-20T20:41:55.352Z","2026-01-21T20:22:51.033Z","Analyzed",{"cisa_kev":206,"cisa_ransomware":206,"cisa_vendor":9,"epss_severity":207,"epss_score":208,"severity":209,"severity_score":210,"severity_version":211,"severity_source":212,"severity_vector":213,"severity_status":204},false,"low",0.01056,"high",7.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[215],{"url":216,"sources":217,"tags":219},"https://nodejs.org/en/blog/vulnerability/december-2025-security-releases",[218,212],"cve.org",[220,221],"Release Notes","Vendor Advisory",[],{"date":224,"score":208,"percentile":225},"2026-07-05",0.60323,[227,231,234,237,240,243,247,250,253,256,259,263,266,269,272,275,278,281,284,287,290,293,296,299,301,304,307,310,313,317,320,324,327,330,333,336,339,342,345,348,352,355,358,361,364,367,370,373,376,379,382,385,388,391,394,397,400,403,406,409,412,415,418,421,425,428,431,434,438,441,444,447,450,453,456,459,462,465,468,471,474,477,480,483,486,489,492,495,498,501],{"date":228,"score":229,"percentile":230},"2026-01-21",0.0002,0.04329,{"date":232,"score":229,"percentile":233},"2026-01-22",0.04209,{"date":235,"score":229,"percentile":236},"2026-01-23",0.0426,{"date":238,"score":229,"percentile":239},"2026-01-24",0.04305,{"date":241,"score":229,"percentile":242},"2026-01-25",0.04406,{"date":244,"score":245,"percentile":246},"2026-01-26",0.00026,0.06642,{"date":248,"score":245,"percentile":249},"2026-01-27",0.0663,{"date":251,"score":245,"percentile":252},"2026-01-28",0.06605,{"date":254,"score":245,"percentile":255},"2026-01-29",0.06603,{"date":257,"score":245,"percentile":258},"2026-01-30",0.06619,{"date":260,"score":261,"percentile":262},"2026-01-31",0.00034,0.0957,{"date":264,"score":261,"percentile":265},"2026-02-01",0.09359,{"date":267,"score":261,"percentile":268},"2026-02-02",0.09316,{"date":270,"score":261,"percentile":271},"2026-02-03",0.09281,{"date":273,"score":261,"percentile":274},"2026-02-04",0.09523,{"date":276,"score":261,"percentile":277},"2026-02-05",0.0958,{"date":279,"score":261,"percentile":280},"2026-02-06",0.09602,{"date":282,"score":261,"percentile":283},"2026-02-07",0.09626,{"date":285,"score":261,"percentile":286},"2026-02-08",0.09613,{"date":288,"score":261,"percentile":289},"2026-02-09",0.09573,{"date":291,"score":261,"percentile":292},"2026-02-10",0.09542,{"date":294,"score":261,"percentile":295},"2026-02-11",0.09586,{"date":297,"score":261,"percentile":298},"2026-02-12",0.09618,{"date":300,"score":261,"percentile":286},"2026-02-13",{"date":302,"score":261,"percentile":303},"2026-02-14",0.09598,{"date":305,"score":261,"percentile":306},"2026-02-15",0.09603,{"date":308,"score":261,"percentile":309},"2026-02-16",0.09594,{"date":311,"score":261,"percentile":312},"2026-02-17",0.09553,{"date":314,"score":315,"percentile":316},"2026-02-18",0.00035,0.10271,{"date":318,"score":315,"percentile":319},"2026-02-19",0.10351,{"date":321,"score":322,"percentile":323},"2026-02-20",0.00032,0.09388,{"date":325,"score":315,"percentile":326},"2026-02-21",0.10465,{"date":328,"score":315,"percentile":329},"2026-02-22",0.10462,{"date":331,"score":315,"percentile":332},"2026-02-23",0.10432,{"date":334,"score":315,"percentile":335},"2026-02-24",0.10345,{"date":337,"score":315,"percentile":338},"2026-02-25",0.1027,{"date":340,"score":315,"percentile":341},"2026-02-26",0.10226,{"date":343,"score":315,"percentile":344},"2026-02-27",0.10242,{"date":346,"score":315,"percentile":347},"2026-02-28",0.10241,{"date":349,"score":350,"percentile":351},"2026-03-01",0.00038,0.1112,{"date":353,"score":350,"percentile":354},"2026-03-02",0.1106,{"date":356,"score":350,"percentile":357},"2026-03-03",0.11041,{"date":359,"score":315,"percentile":360},"2026-03-04",0.10133,{"date":362,"score":315,"percentile":363},"2026-03-05",0.10169,{"date":365,"score":315,"percentile":366},"2026-03-06",0.10167,{"date":368,"score":315,"percentile":369},"2026-03-07",0.10173,{"date":371,"score":315,"percentile":372},"2026-03-08",0.10124,{"date":374,"score":315,"percentile":375},"2026-03-09",0.10095,{"date":377,"score":315,"percentile":378},"2026-03-10",0.10082,{"date":380,"score":315,"percentile":381},"2026-03-11",0.10088,{"date":383,"score":315,"percentile":384},"2026-03-12",0.10132,{"date":386,"score":315,"percentile":387},"2026-03-13",0.10149,{"date":389,"score":315,"percentile":390},"2026-03-14",0.10141,{"date":392,"score":315,"percentile":393},"2026-03-15",0.10117,{"date":395,"score":315,"percentile":396},"2026-03-16",0.1009,{"date":398,"score":315,"percentile":399},"2026-03-17",0.10071,{"date":401,"score":315,"percentile":402},"2026-03-18",0.10065,{"date":404,"score":315,"percentile":405},"2026-03-19",0.10064,{"date":407,"score":315,"percentile":408},"2026-03-20",0.10114,{"date":410,"score":350,"percentile":411},"2026-03-21",0.11219,{"date":413,"score":350,"percentile":414},"2026-03-22",0.11198,{"date":416,"score":350,"percentile":417},"2026-03-23",0.11136,{"date":419,"score":350,"percentile":420},"2026-03-24",0.11107,{"date":422,"score":423,"percentile":424},"2026-03-25",0.00042,0.12936,{"date":426,"score":423,"percentile":427},"2026-03-26",0.1302,{"date":429,"score":423,"percentile":430},"2026-03-27",0.13057,{"date":432,"score":423,"percentile":433},"2026-03-28",0.13081,{"date":435,"score":436,"percentile":437},"2026-03-29",0.00044,0.13658,{"date":439,"score":436,"percentile":440},"2026-03-30",0.1361,{"date":442,"score":436,"percentile":443},"2026-03-31",0.13566,{"date":445,"score":436,"percentile":446},"2026-04-01",0.13591,{"date":448,"score":436,"percentile":449},"2026-04-02",0.1369,{"date":451,"score":436,"percentile":452},"2026-04-03",0.1372,{"date":454,"score":436,"percentile":455},"2026-04-04",0.13752,{"date":457,"score":436,"percentile":458},"2026-04-05",0.13732,{"date":460,"score":436,"percentile":461},"2026-04-06",0.13568,{"date":463,"score":436,"percentile":464},"2026-04-07",0.13552,{"date":466,"score":436,"percentile":467},"2026-04-08",0.13633,{"date":469,"score":436,"percentile":470},"2026-04-09",0.13684,{"date":472,"score":436,"percentile":473},"2026-04-10",0.13681,{"date":475,"score":436,"percentile":476},"2026-04-11",0.13654,{"date":478,"score":436,"percentile":479},"2026-04-12",0.13618,{"date":481,"score":436,"percentile":482},"2026-04-13",0.1357,{"date":484,"score":436,"percentile":485},"2026-04-14",0.13446,{"date":487,"score":436,"percentile":488},"2026-04-15",0.13486,{"date":490,"score":436,"percentile":491},"2026-04-16",0.13484,{"date":493,"score":436,"percentile":494},"2026-04-17",0.13482,{"date":496,"score":436,"percentile":497},"2026-04-18",0.1348,{"date":499,"score":436,"percentile":500},"2026-04-19",0.13441,{"date":502,"score":436,"percentile":503},"2026-04-20",0.13403,[505,512],{"source":218,"cvss_v2_0":9,"cvss_v3_0":506,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":507,"baseSeverity":508,"vectorString":509,"impactScore":510,"exploitabilityScore":511},5.9,"MEDIUM","CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",6,5.6,{"source":212,"cvss_v2_0":9,"cvss_v3_0":513,"cvss_v3_1":514,"cvss_v4_0":9},{"baseScore":507,"baseSeverity":508,"vectorString":509,"impactScore":510,"exploitabilityScore":511},{"baseScore":210,"baseSeverity":515,"vectorString":213,"impactScore":510,"exploitabilityScore":516},"HIGH",10,[518,598],{"ecosystem":9,"name":519,"vendor":520,"product":519,"cpe_part":521,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":522},"node","nodejs","a",[523,528,531,534,537,542,546,550,554,558,562,566,570,574,578,582,586,590,594],{"version":524,"is_range":525,"range_type":218,"version_start":526,"version_start_type":527,"version_end":526,"version_end_type":527,"fixed_in":9},">= 20.19.6, \u003C= 20.19.6",true,"20.19.6","including",{"version":529,"is_range":525,"range_type":218,"version_start":530,"version_start_type":527,"version_end":530,"version_end_type":527,"fixed_in":9},">= 22.21.1, \u003C= 22.21.1","22.21.1",{"version":532,"is_range":525,"range_type":218,"version_start":533,"version_start_type":527,"version_end":533,"version_end_type":527,"fixed_in":9},">= 24.12.0, \u003C= 24.12.0","24.12.0",{"version":535,"is_range":525,"range_type":218,"version_start":536,"version_start_type":527,"version_end":536,"version_end_type":527,"fixed_in":9},">= 25.2.1, \u003C= 25.2.1","25.2.1",{"version":538,"is_range":525,"range_type":218,"version_start":539,"version_start_type":527,"version_end":540,"version_end_type":541,"fixed_in":9},">= 4.0, \u003C 4.*","4.0","4.*","excluding",{"version":543,"is_range":525,"range_type":218,"version_start":544,"version_start_type":527,"version_end":545,"version_end_type":541,"fixed_in":9},">= 5.0, \u003C 5.*","5.0","5.*",{"version":547,"is_range":525,"range_type":218,"version_start":548,"version_start_type":527,"version_end":549,"version_end_type":541,"fixed_in":9},">= 6.0, \u003C 6.*","6.0","6.*",{"version":551,"is_range":525,"range_type":218,"version_start":552,"version_start_type":527,"version_end":553,"version_end_type":541,"fixed_in":9},">= 7.0, \u003C 7.*","7.0","7.*",{"version":555,"is_range":525,"range_type":218,"version_start":556,"version_start_type":527,"version_end":557,"version_end_type":541,"fixed_in":9},">= 8.0, \u003C 8.*","8.0","8.*",{"version":559,"is_range":525,"range_type":218,"version_start":560,"version_start_type":527,"version_end":561,"version_end_type":541,"fixed_in":9},">= 9.0, \u003C 9.*","9.0","9.*",{"version":563,"is_range":525,"range_type":218,"version_start":564,"version_start_type":527,"version_end":565,"version_end_type":541,"fixed_in":9},">= 10.0, \u003C 10.*","10.0","10.*",{"version":567,"is_range":525,"range_type":218,"version_start":568,"version_start_type":527,"version_end":569,"version_end_type":541,"fixed_in":9},">= 11.0, \u003C 11.*","11.0","11.*",{"version":571,"is_range":525,"range_type":218,"version_start":572,"version_start_type":527,"version_end":573,"version_end_type":541,"fixed_in":9},">= 12.0, \u003C 12.*","12.0","12.*",{"version":575,"is_range":525,"range_type":218,"version_start":576,"version_start_type":527,"version_end":577,"version_end_type":541,"fixed_in":9},">= 13.0, \u003C 13.*","13.0","13.*",{"version":579,"is_range":525,"range_type":218,"version_start":580,"version_start_type":527,"version_end":581,"version_end_type":541,"fixed_in":9},">= 14.0, \u003C 14.*","14.0","14.*",{"version":583,"is_range":525,"range_type":218,"version_start":584,"version_start_type":527,"version_end":585,"version_end_type":541,"fixed_in":9},">= 15.0, \u003C 15.*","15.0","15.*",{"version":587,"is_range":525,"range_type":218,"version_start":588,"version_start_type":527,"version_end":589,"version_end_type":541,"fixed_in":9},">= 16.0, \u003C 16.*","16.0","16.*",{"version":591,"is_range":525,"range_type":218,"version_start":592,"version_start_type":527,"version_end":593,"version_end_type":541,"fixed_in":9},">= 17.0, \u003C 17.*","17.0","17.*",{"version":595,"is_range":525,"range_type":218,"version_start":596,"version_start_type":527,"version_end":597,"version_end_type":541,"fixed_in":9},">= 18.0, \u003C 18.*","18.0","18.*",{"ecosystem":9,"name":599,"vendor":520,"product":599,"cpe_part":521,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":600},"node.js",[601,606,610,614],{"version":602,"is_range":525,"range_type":603,"version_start":604,"version_start_type":527,"version_end":605,"version_end_type":541,"fixed_in":9},"gte4.0.0_lt20.20.0","cpe","4.0.0","20.20.0",{"version":607,"is_range":525,"range_type":603,"version_start":608,"version_start_type":527,"version_end":609,"version_end_type":541,"fixed_in":9},"gte22.0.0_lt22.22.0","22.0.0","22.22.0",{"version":611,"is_range":525,"range_type":603,"version_start":612,"version_start_type":527,"version_end":613,"version_end_type":541,"fixed_in":9},"gte24.0.0_lt24.13.0","24.0.0","24.13.0",{"version":615,"is_range":525,"range_type":603,"version_start":616,"version_start_type":527,"version_end":617,"version_end_type":541,"fixed_in":9},"gte25.0.0_lt25.3.0","25.0.0","25.3.0"]