[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-21710":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T16:22:42.503Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":411,"aliases":412,"duplicate_of":9,"upstream":413,"downstream":414,"duplicates":471,"related":472,"reserved_at":9,"published_at":487,"modified_at":488,"state":489,"summary":490,"references_raw":498,"kevs":569,"epss":570,"epss_history":573,"metrics":847,"affected":857},"CVE-2026-21710","A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses `req.headersDistinct`.\r\n\r\nWhen this occurs, `dest[\"__proto__\"]` resolves to `Object.prototype` rather than `undefined`, causing `.push()` to be called on a non-array. This exception is thrown synchronously inside a property getter and cannot be intercepted by `error` event listeners, meaning it cannot be handled without wrapping every `req.headersDistinct` access in a `try/catch`.\r\n\r\n* This vulnerability affects all Node.js HTTP servers on **20.x, 22.x, 24.x, and v25.x**",null,[11,406],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-770","Allocation of Resources Without Limits or Throttling","The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","weakness","Incomplete","Base","High",[20,106,116,120,124,128,132,136,168,230,234,238,268,298,330,334,338,342,346,350],{"id":21,"name":22,"techniques":23},"CAPEC-125","Flooding",[24,78],{"id":25,"name":26,"tactics":27,"countermeasures":31},"T1498.001","Direct Network Flood",[28],{"id":29,"name":30},"TA0105","Impact",[32,37,41,45,49,53,57,61,65,69,74],{"id":33,"name":34,"tactic":35},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":36},"Detect",{"id":38,"name":39,"tactic":40},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":36},{"id":42,"name":43,"tactic":44},"D3-CSPP","Client-server Payload Profiling",{"name":36},{"id":46,"name":47,"tactic":48},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":36},{"id":50,"name":51,"tactic":52},"D3-NTSA","Network Traffic Signature Analysis",{"name":36},{"id":54,"name":55,"tactic":56},"D3-APCA","Application Protocol Command Analysis",{"name":36},{"id":58,"name":59,"tactic":60},"D3-NTCD","Network Traffic Community Deviation",{"name":36},{"id":62,"name":63,"tactic":64},"D3-RTSD","Remote Terminal Session Detection",{"name":36},{"id":66,"name":67,"tactic":68},"D3-ISVA","Inbound Session Volume Analysis",{"name":36},{"id":70,"name":71,"tactic":72},"D3-NTF","Network Traffic Filtering",{"name":73},"Isolate",{"id":75,"name":76,"tactic":77},"D3-ITF","Inbound Traffic Filtering",{"name":73},{"id":79,"name":80,"tactics":81,"countermeasures":83},"T1499","Endpoint Denial of Service",[82],{"id":29,"name":30},[84,86,88,90,92,94,96,98,100,102,104],{"id":33,"name":34,"tactic":85},{"name":36},{"id":38,"name":39,"tactic":87},{"name":36},{"id":42,"name":43,"tactic":89},{"name":36},{"id":46,"name":47,"tactic":91},{"name":36},{"id":50,"name":51,"tactic":93},{"name":36},{"id":54,"name":55,"tactic":95},{"name":36},{"id":58,"name":59,"tactic":97},{"name":36},{"id":62,"name":63,"tactic":99},{"name":36},{"id":66,"name":67,"tactic":101},{"name":36},{"id":70,"name":71,"tactic":103},{"name":73},{"id":75,"name":76,"tactic":105},{"name":73},{"id":107,"name":108,"techniques":109},"CAPEC-130","Excessive Allocation",[110],{"id":111,"name":112,"tactics":113,"countermeasures":115},"T1499.003","Application Exhaustion Flood",[114],{"id":29,"name":30},[],{"id":117,"name":118,"techniques":119},"CAPEC-147","XML Ping of the Death",[],{"id":121,"name":122,"techniques":123},"CAPEC-197","Exponential Data Expansion",[],{"id":125,"name":126,"techniques":127},"CAPEC-229","Serialized Data Parameter Blowup",[],{"id":129,"name":130,"techniques":131},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":133,"name":134,"techniques":135},"CAPEC-231","Oversized Serialized Data Payloads",[],{"id":137,"name":138,"techniques":139},"CAPEC-469","HTTP DoS",[140],{"id":141,"name":142,"tactics":143,"countermeasures":145},"T1499.002","Service Exhaustion Flood",[144],{"id":29,"name":30},[146,148,150,152,154,156,158,160,162,164,166],{"id":33,"name":34,"tactic":147},{"name":36},{"id":38,"name":39,"tactic":149},{"name":36},{"id":42,"name":43,"tactic":151},{"name":36},{"id":46,"name":47,"tactic":153},{"name":36},{"id":50,"name":51,"tactic":155},{"name":36},{"id":54,"name":55,"tactic":157},{"name":36},{"id":58,"name":59,"tactic":159},{"name":36},{"id":62,"name":63,"tactic":161},{"name":36},{"id":66,"name":67,"tactic":163},{"name":36},{"id":70,"name":71,"tactic":165},{"name":73},{"id":75,"name":76,"tactic":167},{"name":73},{"id":169,"name":170,"techniques":171},"CAPEC-482","TCP Flood",[172,198,204],{"id":25,"name":26,"tactics":173,"countermeasures":175},[174],{"id":29,"name":30},[176,178,180,182,184,186,188,190,192,194,196],{"id":33,"name":34,"tactic":177},{"name":36},{"id":38,"name":39,"tactic":179},{"name":36},{"id":42,"name":43,"tactic":181},{"name":36},{"id":46,"name":47,"tactic":183},{"name":36},{"id":50,"name":51,"tactic":185},{"name":36},{"id":54,"name":55,"tactic":187},{"name":36},{"id":58,"name":59,"tactic":189},{"name":36},{"id":62,"name":63,"tactic":191},{"name":36},{"id":66,"name":67,"tactic":193},{"name":36},{"id":70,"name":71,"tactic":195},{"name":73},{"id":75,"name":76,"tactic":197},{"name":73},{"id":199,"name":200,"tactics":201,"countermeasures":203},"T1499.001","OS Exhaustion Flood",[202],{"id":29,"name":30},[],{"id":141,"name":142,"tactics":205,"countermeasures":207},[206],{"id":29,"name":30},[208,210,212,214,216,218,220,222,224,226,228],{"id":33,"name":34,"tactic":209},{"name":36},{"id":38,"name":39,"tactic":211},{"name":36},{"id":42,"name":43,"tactic":213},{"name":36},{"id":46,"name":47,"tactic":215},{"name":36},{"id":50,"name":51,"tactic":217},{"name":36},{"id":54,"name":55,"tactic":219},{"name":36},{"id":58,"name":59,"tactic":221},{"name":36},{"id":62,"name":63,"tactic":223},{"name":36},{"id":66,"name":67,"tactic":225},{"name":36},{"id":70,"name":71,"tactic":227},{"name":73},{"id":75,"name":76,"tactic":229},{"name":73},{"id":231,"name":232,"techniques":233},"CAPEC-486","UDP Flood",[],{"id":235,"name":236,"techniques":237},"CAPEC-487","ICMP Flood",[],{"id":239,"name":240,"techniques":241},"CAPEC-488","HTTP Flood",[242],{"id":141,"name":142,"tactics":243,"countermeasures":245},[244],{"id":29,"name":30},[246,248,250,252,254,256,258,260,262,264,266],{"id":33,"name":34,"tactic":247},{"name":36},{"id":38,"name":39,"tactic":249},{"name":36},{"id":42,"name":43,"tactic":251},{"name":36},{"id":46,"name":47,"tactic":253},{"name":36},{"id":50,"name":51,"tactic":255},{"name":36},{"id":54,"name":55,"tactic":257},{"name":36},{"id":58,"name":59,"tactic":259},{"name":36},{"id":62,"name":63,"tactic":261},{"name":36},{"id":66,"name":67,"tactic":263},{"name":36},{"id":70,"name":71,"tactic":265},{"name":73},{"id":75,"name":76,"tactic":267},{"name":73},{"id":269,"name":270,"techniques":271},"CAPEC-489","SSL Flood",[272],{"id":141,"name":142,"tactics":273,"countermeasures":275},[274],{"id":29,"name":30},[276,278,280,282,284,286,288,290,292,294,296],{"id":33,"name":34,"tactic":277},{"name":36},{"id":38,"name":39,"tactic":279},{"name":36},{"id":42,"name":43,"tactic":281},{"name":36},{"id":46,"name":47,"tactic":283},{"name":36},{"id":50,"name":51,"tactic":285},{"name":36},{"id":54,"name":55,"tactic":287},{"name":36},{"id":58,"name":59,"tactic":289},{"name":36},{"id":62,"name":63,"tactic":291},{"name":36},{"id":66,"name":67,"tactic":293},{"name":36},{"id":70,"name":71,"tactic":295},{"name":73},{"id":75,"name":76,"tactic":297},{"name":73},{"id":299,"name":300,"techniques":301},"CAPEC-490","Amplification",[302],{"id":303,"name":304,"tactics":305,"countermeasures":307},"T1498.002","Reflection Amplification",[306],{"id":29,"name":30},[308,310,312,314,316,318,320,322,324,326,328],{"id":33,"name":34,"tactic":309},{"name":36},{"id":38,"name":39,"tactic":311},{"name":36},{"id":42,"name":43,"tactic":313},{"name":36},{"id":46,"name":47,"tactic":315},{"name":36},{"id":50,"name":51,"tactic":317},{"name":36},{"id":54,"name":55,"tactic":319},{"name":36},{"id":58,"name":59,"tactic":321},{"name":36},{"id":62,"name":63,"tactic":323},{"name":36},{"id":66,"name":67,"tactic":325},{"name":36},{"id":70,"name":71,"tactic":327},{"name":73},{"id":75,"name":76,"tactic":329},{"name":73},{"id":331,"name":332,"techniques":333},"CAPEC-491","Quadratic Data Expansion",[],{"id":335,"name":336,"techniques":337},"CAPEC-493","SOAP Array Blowup",[],{"id":339,"name":340,"techniques":341},"CAPEC-494","TCP Fragmentation",[],{"id":343,"name":344,"techniques":345},"CAPEC-495","UDP Fragmentation",[],{"id":347,"name":348,"techniques":349},"CAPEC-496","ICMP Fragmentation",[],{"id":351,"name":352,"techniques":353},"CAPEC-528","XML Flood",[354,380],{"id":141,"name":142,"tactics":355,"countermeasures":357},[356],{"id":29,"name":30},[358,360,362,364,366,368,370,372,374,376,378],{"id":33,"name":34,"tactic":359},{"name":36},{"id":38,"name":39,"tactic":361},{"name":36},{"id":42,"name":43,"tactic":363},{"name":36},{"id":46,"name":47,"tactic":365},{"name":36},{"id":50,"name":51,"tactic":367},{"name":36},{"id":54,"name":55,"tactic":369},{"name":36},{"id":58,"name":59,"tactic":371},{"name":36},{"id":62,"name":63,"tactic":373},{"name":36},{"id":66,"name":67,"tactic":375},{"name":36},{"id":70,"name":71,"tactic":377},{"name":73},{"id":75,"name":76,"tactic":379},{"name":73},{"id":25,"name":26,"tactics":381,"countermeasures":383},[382],{"id":29,"name":30},[384,386,388,390,392,394,396,398,400,402,404],{"id":33,"name":34,"tactic":385},{"name":36},{"id":38,"name":39,"tactic":387},{"name":36},{"id":42,"name":43,"tactic":389},{"name":36},{"id":46,"name":47,"tactic":391},{"name":36},{"id":50,"name":51,"tactic":393},{"name":36},{"id":54,"name":55,"tactic":395},{"name":36},{"id":58,"name":59,"tactic":397},{"name":36},{"id":62,"name":63,"tactic":399},{"name":36},{"id":66,"name":67,"tactic":401},{"name":36},{"id":70,"name":71,"tactic":403},{"name":73},{"id":75,"name":76,"tactic":405},{"name":73},{"_key":407,"id":407,"name":408,"description":409,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":410},"CWE-843","Access of Resource Using Incompatible Type ('Type Confusion')","The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.",[],[],[],[],[415,417,419,421,423,425,427,429,431,433,435,437,439,441,443,445,447,449,451,453,455,457,459,461,463,465,467,469],{"_key":416},"DSA-6183-1",{"_key":418},"OPENSUSE-SU-2026:10504-1",{"_key":420},"SUSE-SU-2026:1299-1",{"_key":422},"MGASA-2026-0071",{"_key":424},"SUSE-SU-2026:1363-1",{"_key":426},"SUSE-SU-2026:1371-1",{"_key":428},"SUSE-SU-2026:1478-1",{"_key":430},"SUSE-SU-2026:1509-1",{"_key":432},"SUSE-SU-2026:21181-1",{"_key":434},"OPENSUSE-SU-2026:20519-1",{"_key":436},"OPENSUSE-SU-2026:11110-1",{"_key":438},"ALPINE-CVE-2026-21710",{"_key":440},"SUSE-SU-2026:22368-1",{"_key":442},"UBUNTU-CVE-2026-21710",{"_key":444},"DEBIAN-CVE-2026-21710",{"_key":446},"OPENSUSE-SU-2026:21058-1",{"_key":448},"RHSA-2026:7080",{"_key":450},"RHSA-2026:7123",{"_key":452},"RHSA-2026:7302",{"_key":454},"RHSA-2026:7310",{"_key":456},"RHSA-2026:7350",{"_key":458},"RHSA-2026:7670",{"_key":460},"RHSA-2026:7675",{"_key":462},"RHSA-2026:7896",{"_key":464},"RHSA-2026:7983",{"_key":466},"RHSA-2026:8339",{"_key":468},"RHSA-2026:9711",{"_key":470},"RHSA-2026:9874",[],[473,474,475,476,477,478,479,480,481,482,483,484,485],{"_key":418},{"_key":420},{"_key":422},{"_key":424},{"_key":426},{"_key":428},{"_key":430},{"_key":432},{"_key":434},{"_key":436},{"_key":440},{"_key":446},{"_key":486},"CGA-FMMF-9RJW-6F83","2026-03-30T19:07:28.558Z","2026-07-15T01:19:57.306Z","Awaiting Analysis",{"cisa_kev":491,"cisa_ransomware":491,"cisa_vendor":9,"epss_severity":492,"epss_score":493,"severity":492,"severity_score":494,"severity_version":495,"severity_source":496,"severity_vector":497,"severity_status":489},false,"high",0.26356,7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[499,504,510,515,520,525,529,533,537,541,545,549,553,557,561,565],{"url":500,"sources":501,"tags":503},"https://nodejs.org/en/blog/vulnerability/march-2026-security-releases",[496,502],"nvd",[],{"url":505,"sources":506,"tags":507},"https://access.redhat.com/security/cve/CVE-2026-21710",[496],[508,509],"VDB Entry","X Refsource REDHAT",{"url":511,"sources":512,"tags":513},"https://bugzilla.redhat.com/show_bug.cgi?id=2453151",[496],[514,509],"Issue Tracking",{"url":516,"sources":517,"tags":518},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21710.json",[496],[519],"X Sadp Csaf Vex",{"url":521,"sources":522,"tags":523},"https://access.redhat.com/errata/RHSA-2026:7310",[496],[524,509],"Vendor Advisory",{"url":526,"sources":527,"tags":528},"https://access.redhat.com/errata/RHSA-2026:7080",[496],[524,509],{"url":530,"sources":531,"tags":532},"https://access.redhat.com/errata/RHSA-2026:7675",[496],[524,509],{"url":534,"sources":535,"tags":536},"https://access.redhat.com/errata/RHSA-2026:8339",[496],[524,509],{"url":538,"sources":539,"tags":540},"https://access.redhat.com/errata/RHSA-2026:7123",[496],[524,509],{"url":542,"sources":543,"tags":544},"https://access.redhat.com/errata/RHSA-2026:7670",[496],[524,509],{"url":546,"sources":547,"tags":548},"https://access.redhat.com/errata/RHSA-2026:9711",[496],[524,509],{"url":550,"sources":551,"tags":552},"https://access.redhat.com/errata/RHSA-2026:9874",[496],[524,509],{"url":554,"sources":555,"tags":556},"https://access.redhat.com/errata/RHSA-2026:7983",[496],[524,509],{"url":558,"sources":559,"tags":560},"https://access.redhat.com/errata/RHSA-2026:7896",[496],[524,509],{"url":562,"sources":563,"tags":564},"https://access.redhat.com/errata/RHSA-2026:7302",[496],[524,509],{"url":566,"sources":567,"tags":568},"https://access.redhat.com/errata/RHSA-2026:7350",[496],[524,509],[],{"date":571,"score":493,"percentile":572},"2026-07-05",0.97755,[574,578,581,584,587,591,595,598,601,604,607,610,613,616,619,622,625,628,631,633,636,638,642,645,648,651,654,657,660,663,666,669,673,676,679,682,685,688,691,694,697,700,703,706,709,712,715,718,721,724,727,729,731,735,738,741,744,747,750,753,756,759,762,765,768,771,774,778,782,785,788,791,794,797,800,803,806,810,813,816,819,822,825,827,829,832,835,838,841,844],{"date":575,"score":576,"percentile":577},"2026-03-31",0.00014,0.0245,{"date":579,"score":576,"percentile":580},"2026-04-01",0.02453,{"date":582,"score":576,"percentile":583},"2026-04-02",0.0252,{"date":585,"score":576,"percentile":586},"2026-04-03",0.02534,{"date":588,"score":589,"percentile":590},"2026-04-04",0.00016,0.03788,{"date":592,"score":593,"percentile":594},"2026-04-05",0.00021,0.0577,{"date":596,"score":593,"percentile":597},"2026-04-06",0.05749,{"date":599,"score":593,"percentile":600},"2026-04-07",0.05762,{"date":602,"score":593,"percentile":603},"2026-04-08",0.05801,{"date":605,"score":593,"percentile":606},"2026-04-09",0.05826,{"date":608,"score":593,"percentile":609},"2026-04-10",0.05818,{"date":611,"score":593,"percentile":612},"2026-04-11",0.05805,{"date":614,"score":593,"percentile":615},"2026-04-12",0.05797,{"date":617,"score":593,"percentile":618},"2026-04-13",0.0579,{"date":620,"score":593,"percentile":621},"2026-04-14",0.05734,{"date":623,"score":593,"percentile":624},"2026-04-15",0.05742,{"date":626,"score":593,"percentile":627},"2026-04-16",0.05755,{"date":629,"score":593,"percentile":630},"2026-04-17",0.05763,{"date":632,"score":593,"percentile":630},"2026-04-18",{"date":634,"score":593,"percentile":635},"2026-04-19",0.0574,{"date":637,"score":593,"percentile":621},"2026-04-20",{"date":639,"score":640,"percentile":641},"2026-04-21",0.00028,0.08124,{"date":643,"score":640,"percentile":644},"2026-04-22",0.0815,{"date":646,"score":640,"percentile":647},"2026-04-23",0.08179,{"date":649,"score":640,"percentile":650},"2026-04-24",0.08078,{"date":652,"score":640,"percentile":653},"2026-04-25",0.08057,{"date":655,"score":640,"percentile":656},"2026-04-26",0.08043,{"date":658,"score":640,"percentile":659},"2026-04-27",0.08031,{"date":661,"score":640,"percentile":662},"2026-04-28",0.08011,{"date":664,"score":640,"percentile":665},"2026-04-29",0.08015,{"date":667,"score":640,"percentile":668},"2026-04-30",0.0802,{"date":670,"score":671,"percentile":672},"2026-05-01",0.00031,0.08808,{"date":674,"score":671,"percentile":675},"2026-05-02",0.08858,{"date":677,"score":671,"percentile":678},"2026-05-03",0.08829,{"date":680,"score":671,"percentile":681},"2026-05-04",0.08779,{"date":683,"score":671,"percentile":684},"2026-05-05",0.08778,{"date":686,"score":671,"percentile":687},"2026-05-06",0.08793,{"date":689,"score":671,"percentile":690},"2026-05-07",0.08927,{"date":692,"score":671,"percentile":693},"2026-05-08",0.08957,{"date":695,"score":671,"percentile":696},"2026-05-09",0.08998,{"date":698,"score":671,"percentile":699},"2026-05-10",0.08995,{"date":701,"score":671,"percentile":702},"2026-05-11",0.08962,{"date":704,"score":671,"percentile":705},"2026-05-12",0.08991,{"date":707,"score":671,"percentile":708},"2026-05-13",0.09008,{"date":710,"score":671,"percentile":711},"2026-05-14",0.09057,{"date":713,"score":671,"percentile":714},"2026-05-15",0.09059,{"date":716,"score":671,"percentile":717},"2026-05-16",0.09075,{"date":719,"score":671,"percentile":720},"2026-05-17",0.0906,{"date":722,"score":671,"percentile":723},"2026-05-18",0.09011,{"date":725,"score":671,"percentile":726},"2026-05-19",0.08981,{"date":728,"score":671,"percentile":726},"2026-05-20",{"date":730,"score":671,"percentile":702},"2026-05-21",{"date":732,"score":733,"percentile":734},"2026-05-22",0.00036,0.10906,{"date":736,"score":733,"percentile":737},"2026-05-23",0.10887,{"date":739,"score":733,"percentile":740},"2026-05-24",0.10882,{"date":742,"score":733,"percentile":743},"2026-05-25",0.10856,{"date":745,"score":733,"percentile":746},"2026-05-26",0.10844,{"date":748,"score":733,"percentile":749},"2026-05-27",0.10925,{"date":751,"score":733,"percentile":752},"2026-05-28",0.11057,{"date":754,"score":733,"percentile":755},"2026-05-29",0.11107,{"date":757,"score":733,"percentile":758},"2026-05-30",0.11081,{"date":760,"score":733,"percentile":761},"2026-05-31",0.11064,{"date":763,"score":733,"percentile":764},"2026-06-01",0.11048,{"date":766,"score":733,"percentile":767},"2026-06-02",0.11034,{"date":769,"score":733,"percentile":770},"2026-06-03",0.11,{"date":772,"score":733,"percentile":773},"2026-06-04",0.11018,{"date":775,"score":776,"percentile":777},"2026-06-05",0.00042,0.13155,{"date":779,"score":780,"percentile":781},"2026-06-06",0.00044,0.13847,{"date":783,"score":780,"percentile":784},"2026-06-07",0.13807,{"date":786,"score":780,"percentile":787},"2026-06-08",0.13723,{"date":789,"score":780,"percentile":790},"2026-06-09",0.13752,{"date":792,"score":780,"percentile":793},"2026-06-10",0.13799,{"date":795,"score":780,"percentile":796},"2026-06-11",0.13832,{"date":798,"score":780,"percentile":799},"2026-06-12",0.13949,{"date":801,"score":780,"percentile":802},"2026-06-13",0.13947,{"date":804,"score":780,"percentile":805},"2026-06-14",0.13917,{"date":807,"score":808,"percentile":809},"2026-06-15",0.13066,0.95835,{"date":811,"score":808,"percentile":812},"2026-06-16",0.9584,{"date":814,"score":808,"percentile":815},"2026-06-17",0.95846,{"date":817,"score":808,"percentile":818},"2026-06-18",0.9585,{"date":820,"score":808,"percentile":821},"2026-06-19",0.95849,{"date":823,"score":808,"percentile":824},"2026-06-20",0.95847,{"date":826,"score":808,"percentile":824},"2026-06-21",{"date":828,"score":808,"percentile":815},"2026-06-22",{"date":830,"score":808,"percentile":831},"2026-06-23",0.95841,{"date":833,"score":808,"percentile":834},"2026-06-24",0.95845,{"date":836,"score":808,"percentile":837},"2026-06-25",0.95852,{"date":839,"score":808,"percentile":840},"2026-06-26",0.95855,{"date":842,"score":808,"percentile":843},"2026-06-27",0.95858,{"date":845,"score":808,"percentile":846},"2026-06-28",0.95857,[848,855],{"source":496,"cvss_v2_0":9,"cvss_v3_0":849,"cvss_v3_1":854,"cvss_v4_0":9},{"baseScore":494,"baseSeverity":850,"vectorString":851,"impactScore":852,"exploitabilityScore":853},"HIGH","CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",6,10,{"baseScore":494,"baseSeverity":850,"vectorString":497,"impactScore":852,"exploitabilityScore":853},{"source":502,"cvss_v2_0":9,"cvss_v3_0":856,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":494,"baseSeverity":850,"vectorString":851,"impactScore":852,"exploitabilityScore":853},[858],{"ecosystem":9,"name":859,"vendor":860,"product":859,"cpe_part":861,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":862},"node","nodejs","a",[863,868,871,874,877,882,886,890,894,898,902,906,910,914,918,922,926,930,934,938],{"version":864,"is_range":865,"range_type":496,"version_start":866,"version_start_type":867,"version_end":866,"version_end_type":867,"fixed_in":9},">= 20.20.1, \u003C= 20.20.1",true,"20.20.1","including",{"version":869,"is_range":865,"range_type":496,"version_start":870,"version_start_type":867,"version_end":870,"version_end_type":867,"fixed_in":9},">= 22.22.1, \u003C= 22.22.1","22.22.1",{"version":872,"is_range":865,"range_type":496,"version_start":873,"version_start_type":867,"version_end":873,"version_end_type":867,"fixed_in":9},">= 24.14.0, \u003C= 24.14.0","24.14.0",{"version":875,"is_range":865,"range_type":496,"version_start":876,"version_start_type":867,"version_end":876,"version_end_type":867,"fixed_in":9},">= 25.8.1, \u003C= 25.8.1","25.8.1",{"version":878,"is_range":865,"range_type":496,"version_start":879,"version_start_type":867,"version_end":880,"version_end_type":881,"fixed_in":9},">= 4.0, \u003C 4.*","4.0","4.*","excluding",{"version":883,"is_range":865,"range_type":496,"version_start":884,"version_start_type":867,"version_end":885,"version_end_type":881,"fixed_in":9},">= 5.0, \u003C 5.*","5.0","5.*",{"version":887,"is_range":865,"range_type":496,"version_start":888,"version_start_type":867,"version_end":889,"version_end_type":881,"fixed_in":9},">= 6.0, \u003C 6.*","6.0","6.*",{"version":891,"is_range":865,"range_type":496,"version_start":892,"version_start_type":867,"version_end":893,"version_end_type":881,"fixed_in":9},">= 7.0, \u003C 7.*","7.0","7.*",{"version":895,"is_range":865,"range_type":496,"version_start":896,"version_start_type":867,"version_end":897,"version_end_type":881,"fixed_in":9},">= 8.0, \u003C 8.*","8.0","8.*",{"version":899,"is_range":865,"range_type":496,"version_start":900,"version_start_type":867,"version_end":901,"version_end_type":881,"fixed_in":9},">= 9.0, \u003C 9.*","9.0","9.*",{"version":903,"is_range":865,"range_type":496,"version_start":904,"version_start_type":867,"version_end":905,"version_end_type":881,"fixed_in":9},">= 10.0, \u003C 10.*","10.0","10.*",{"version":907,"is_range":865,"range_type":496,"version_start":908,"version_start_type":867,"version_end":909,"version_end_type":881,"fixed_in":9},">= 11.0, \u003C 11.*","11.0","11.*",{"version":911,"is_range":865,"range_type":496,"version_start":912,"version_start_type":867,"version_end":913,"version_end_type":881,"fixed_in":9},">= 12.0, \u003C 12.*","12.0","12.*",{"version":915,"is_range":865,"range_type":496,"version_start":916,"version_start_type":867,"version_end":917,"version_end_type":881,"fixed_in":9},">= 13.0, \u003C 13.*","13.0","13.*",{"version":919,"is_range":865,"range_type":496,"version_start":920,"version_start_type":867,"version_end":921,"version_end_type":881,"fixed_in":9},">= 14.0, \u003C 14.*","14.0","14.*",{"version":923,"is_range":865,"range_type":496,"version_start":924,"version_start_type":867,"version_end":925,"version_end_type":881,"fixed_in":9},">= 15.0, \u003C 15.*","15.0","15.*",{"version":927,"is_range":865,"range_type":496,"version_start":928,"version_start_type":867,"version_end":929,"version_end_type":881,"fixed_in":9},">= 16.0, \u003C 16.*","16.0","16.*",{"version":931,"is_range":865,"range_type":496,"version_start":932,"version_start_type":867,"version_end":933,"version_end_type":881,"fixed_in":9},">= 17.0, \u003C 17.*","17.0","17.*",{"version":935,"is_range":865,"range_type":496,"version_start":936,"version_start_type":867,"version_end":937,"version_end_type":881,"fixed_in":9},">= 18.0, \u003C 18.*","18.0","18.*",{"version":939,"is_range":865,"range_type":496,"version_start":940,"version_start_type":867,"version_end":941,"version_end_type":881,"fixed_in":9},">= 19.0, \u003C 19.*","19.0","19.*"]