[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-56847":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":19,"aliases":20,"duplicate_of":9,"upstream":30,"downstream":31,"duplicates":66,"related":67,"reserved_at":9,"published_at":83,"modified_at":84,"state":85,"summary":86,"references_raw":95,"kevs":138,"epss":139,"epss_history":142,"metrics":293,"affected":317},"CVE-2026-56847","A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`.\r\n\r\nThis can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.\r\n\r\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-1119","Excessive Use of Unconditional Branching","The code uses too many unconditional branches (such as\n\t\t\t\t\t\"goto\").","weakness","Incomplete","Base",[],[],[21,22,23,24,25,26,27,28,29],"ALPINE-CVE-2026-56847","UBUNTU-CVE-2026-56847","DEBIAN-CVE-2026-56847","CGA-2jg9-h3r5-vmw6","CGA-6jfv-h6wr-hwhv","CGA-f5vf-f4cg-fr4h","CGA-j345-m9mc-qmxv","CGA-vw9c-7m4m-hrpg","CGA-wwfq-rf37-5vw6",[],[32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64],{"_key":33},"SUSE-SU-2026:3520-1",{"_key":35},"SUSE-SU-2026:3521-1",{"_key":37},"SUSE-SU-2026:3557-1",{"_key":39},"OPENSUSE-SU-2026:11439-1",{"_key":41},"OPENSUSE-SU-2026:11440-1",{"_key":43},"OPENSUSE-SU-2026:21545-1",{"_key":45},"OPENSUSE-SU-2026:21546-1",{"_key":47},"SUSE-SU-2026:23130-1",{"_key":49},"SUSE-SU-2026:23131-1",{"_key":51},"SUSE-SU-2026:23154-1",{"_key":53},"SUSE-SU-2026:23155-1",{"_key":55},"MGASA-2026-0359",{"_key":57},"RHSA-2026:48273",{"_key":59},"RHSA-2026:48305",{"_key":61},"RHSA-2026:48537",{"_key":63},"SUSE-SU-2026:3929-1",{"_key":65},"SUSE-SU-2026:3930-1",[],[68,69,70,71,72,73,74,75,76,77,78,79,80,81],{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":63},{"_key":65},{"_key":82},"CGA-QJQF-7W84-4PFQ","2026-07-30T06:02:50.099Z","2026-07-30T12:35:31.331Z","Analyzed",{"cisa_kev":87,"cisa_ransomware":87,"cisa_vendor":9,"epss_severity":88,"epss_score":89,"severity":90,"severity_score":91,"severity_version":92,"severity_source":93,"severity_vector":94,"severity_status":85},false,"low",0.00158,"medium",6.1,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",[96,107,113,117,121,125,130,134],{"url":97,"sources":98,"tags":103},"https://nodejs.org/en/blog/vulnerability/july-2026-security-releases",[99,93,100,101,102],"cve.org","osv_ubuntu","osv_wolfi","osv_chainguard",[104,105,106],"REPORT","Vendor Advisory","ARTICLE",{"url":108,"sources":109,"tags":111},"https://security.alpinelinux.org/vuln/CVE-2026-56847",[110],"osv_alpine",[112],"Advisory",{"url":114,"sources":115,"tags":116},"https://ubuntu.com/security/CVE-2026-56847",[100],[104],{"url":118,"sources":119,"tags":120},"https://www.cve.org/CVERecord?id=CVE-2026-56847",[100],[104],{"url":122,"sources":123,"tags":124},"https://nodejs.org/en/blog/vulnerability/july-2026-security-releases#permission-model-allows-trace-events-to-write-outside-the-allowlist-cve-2026-56847---low",[100],[104],{"url":126,"sources":127,"tags":129},"https://security-tracker.debian.org/tracker/CVE-2026-56847",[128],"osv_debian",[112],{"url":131,"sources":132,"tags":133},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/56xxx/CVE-2026-56847.json",[101,102],[112],{"url":135,"sources":136,"tags":137},"https://nvd.nist.gov/vuln/detail/CVE-2026-56847",[101,102],[112],[],{"date":140,"score":89,"percentile":141},"2026-09-19",0.05353,[143,147,150,153,156,159,162,165,168,171,174,177,180,182,184,187,190,193,196,199,202,205,208,211,214,217,221,224,227,230,233,236,239,242,245,248,251,253,256,259,262,264,267,269,272,274,277,280,283,286,289,292],{"date":144,"score":145,"percentile":146},"2026-07-30",0.00153,0.04983,{"date":148,"score":145,"percentile":149},"2026-07-31",0.04997,{"date":151,"score":145,"percentile":152},"2026-08-01",0.04989,{"date":154,"score":145,"percentile":155},"2026-08-02",0.0498,{"date":157,"score":145,"percentile":158},"2026-08-03",0.04986,{"date":160,"score":89,"percentile":161},"2026-08-04",0.05462,{"date":163,"score":89,"percentile":164},"2026-08-05",0.05458,{"date":166,"score":89,"percentile":167},"2026-08-06",0.05451,{"date":169,"score":89,"percentile":170},"2026-08-07",0.0545,{"date":172,"score":89,"percentile":173},"2026-08-08",0.05446,{"date":175,"score":89,"percentile":176},"2026-08-09",0.05443,{"date":178,"score":89,"percentile":179},"2026-08-10",0.05448,{"date":181,"score":89,"percentile":170},"2026-08-11",{"date":183,"score":89,"percentile":161},"2026-08-12",{"date":185,"score":89,"percentile":186},"2026-08-13",0.05467,{"date":188,"score":89,"percentile":189},"2026-08-14",0.05494,{"date":191,"score":89,"percentile":192},"2026-08-15",0.05493,{"date":194,"score":89,"percentile":195},"2026-08-16",0.05482,{"date":197,"score":89,"percentile":198},"2026-08-17",0.05497,{"date":200,"score":89,"percentile":201},"2026-08-18",0.05499,{"date":203,"score":89,"percentile":204},"2026-08-19",0.05518,{"date":206,"score":89,"percentile":207},"2026-08-20",0.05517,{"date":209,"score":89,"percentile":210},"2026-08-21",0.05509,{"date":212,"score":89,"percentile":213},"2026-08-22",0.05511,{"date":215,"score":89,"percentile":216},"2026-08-23",0.05483,{"date":218,"score":219,"percentile":220},"2026-08-24",0.00164,0.05739,{"date":222,"score":219,"percentile":223},"2026-08-25",0.05766,{"date":225,"score":89,"percentile":226},"2026-08-26",0.05137,{"date":228,"score":89,"percentile":229},"2026-08-27",0.05223,{"date":231,"score":89,"percentile":232},"2026-08-28",0.05214,{"date":234,"score":89,"percentile":235},"2026-08-29",0.0522,{"date":237,"score":89,"percentile":238},"2026-08-30",0.05233,{"date":240,"score":89,"percentile":241},"2026-08-31",0.05234,{"date":243,"score":89,"percentile":244},"2026-09-01",0.05222,{"date":246,"score":89,"percentile":247},"2026-09-02",0.05229,{"date":249,"score":89,"percentile":250},"2026-09-03",0.05218,{"date":252,"score":89,"percentile":244},"2026-09-04",{"date":254,"score":89,"percentile":255},"2026-09-05",0.05227,{"date":257,"score":89,"percentile":258},"2026-09-06",0.05241,{"date":260,"score":89,"percentile":261},"2026-09-07",0.05221,{"date":263,"score":89,"percentile":229},"2026-09-08",{"date":265,"score":89,"percentile":266},"2026-09-09",0.05249,{"date":268,"score":89,"percentile":258},"2026-09-10",{"date":270,"score":89,"percentile":271},"2026-09-11",0.0524,{"date":273,"score":89,"percentile":266},"2026-09-12",{"date":275,"score":89,"percentile":276},"2026-09-13",0.05257,{"date":278,"score":89,"percentile":279},"2026-09-14",0.05266,{"date":281,"score":89,"percentile":282},"2026-09-15",0.0528,{"date":284,"score":89,"percentile":285},"2026-09-16",0.05317,{"date":287,"score":89,"percentile":288},"2026-09-17",0.05329,{"date":290,"score":89,"percentile":291},"2026-09-18",0.05346,{"date":140,"score":89,"percentile":141},[294,301,306,308,311,313,315],{"source":99,"cvss_v2_0":9,"cvss_v3_0":295,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":296,"baseSeverity":297,"vectorString":298,"impactScore":299,"exploitabilityScore":300},3.3,"LOW","CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",2.3,4.6,{"source":93,"cvss_v2_0":9,"cvss_v3_0":302,"cvss_v3_1":303,"cvss_v4_0":9},{"baseScore":296,"baseSeverity":297,"vectorString":298,"impactScore":299,"exploitabilityScore":300},{"baseScore":91,"baseSeverity":304,"vectorString":94,"impactScore":305,"exploitabilityScore":300},"MEDIUM",7,{"source":110,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":307,"cvss_v4_0":9},{"baseScore":91,"baseSeverity":9,"vectorString":94,"impactScore":305,"exploitabilityScore":300},{"source":100,"cvss_v2_0":9,"cvss_v3_0":309,"cvss_v3_1":310,"cvss_v4_0":9},{"baseScore":296,"baseSeverity":9,"vectorString":298,"impactScore":299,"exploitabilityScore":300},{"baseScore":91,"baseSeverity":9,"vectorString":94,"impactScore":305,"exploitabilityScore":300},{"source":128,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":312,"cvss_v4_0":9},{"baseScore":91,"baseSeverity":9,"vectorString":94,"impactScore":305,"exploitabilityScore":300},{"source":101,"cvss_v2_0":9,"cvss_v3_0":314,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":296,"baseSeverity":9,"vectorString":298,"impactScore":299,"exploitabilityScore":300},{"source":102,"cvss_v2_0":9,"cvss_v3_0":316,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":296,"baseSeverity":9,"vectorString":298,"impactScore":299,"exploitabilityScore":300},[318,335,342,346,350,355,358,361,371,378,392],{"ecosystem":319,"name":320,"vendor":321,"product":320,"cpe_part":9,"purl_type":322,"purl_namespace":321,"purl_name":320,"source":9,"versions":323},"Alpine Linux","nodejs","alpine","apk",[324,330,331,334],{"version":325,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":328,"version_end_type":329,"fixed_in":9},"lt22_23_2_r0",true,"ecosystem","22.23.2-r0","excluding",{"version":325,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":328,"version_end_type":329,"fixed_in":9},{"version":332,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":333,"version_end_type":329,"fixed_in":9},"lt24_18_1_r0","24.18.1-r0",{"version":332,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":333,"version_end_type":329,"fixed_in":9},{"ecosystem":336,"name":337,"vendor":338,"product":337,"cpe_part":9,"purl_type":322,"purl_namespace":338,"purl_name":337,"source":9,"versions":339},"Chainguard","nodejs-20","chainguard",[340],{"version":341,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"ecosystem":336,"name":343,"vendor":338,"product":343,"cpe_part":9,"purl_type":322,"purl_namespace":338,"purl_name":343,"source":9,"versions":344},"nodejs-22",[345],{"version":325,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":328,"version_end_type":329,"fixed_in":9},{"ecosystem":336,"name":347,"vendor":338,"product":347,"cpe_part":9,"purl_type":322,"purl_namespace":338,"purl_name":347,"source":9,"versions":348},"nodejs-25",[349],{"version":341,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":351,"name":337,"vendor":352,"product":337,"cpe_part":9,"purl_type":322,"purl_namespace":352,"purl_name":337,"source":9,"versions":353},"Wolfi","wolfi",[354],{"version":341,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":351,"name":343,"vendor":352,"product":343,"cpe_part":9,"purl_type":322,"purl_namespace":352,"purl_name":343,"source":9,"versions":356},[357],{"version":325,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":328,"version_end_type":329,"fixed_in":9},{"ecosystem":351,"name":347,"vendor":352,"product":347,"cpe_part":9,"purl_type":322,"purl_namespace":352,"purl_name":347,"source":9,"versions":359},[360],{"version":341,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":362,"name":320,"vendor":363,"product":320,"cpe_part":9,"purl_type":364,"purl_namespace":363,"purl_name":320,"source":9,"versions":365},"Debian","debian","deb",[366,367,368],{"version":341,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":341,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":369,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":370,"version_end_type":329,"fixed_in":9},"lt24_19_0+dfsg+~cs24_13_3_1","24.19.0+dfsg+~cs24.13.3-1",{"ecosystem":372,"name":320,"vendor":373,"product":320,"cpe_part":9,"purl_type":364,"purl_namespace":373,"purl_name":320,"source":9,"versions":374},"Ubuntu","ubuntu",[375,376,377],{"version":341,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":341,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":341,"is_range":326,"range_type":327,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":379,"vendor":320,"product":379,"cpe_part":380,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":381},"node","a",[382,386,389],{"version":383,"is_range":326,"range_type":99,"version_start":384,"version_start_type":385,"version_end":384,"version_end_type":385,"fixed_in":9},">= 26.5.0, \u003C= 26.5.0","26.5.0","including",{"version":387,"is_range":326,"range_type":99,"version_start":388,"version_start_type":385,"version_end":388,"version_end_type":385,"fixed_in":9},">= 24.18.0, \u003C= 24.18.0","24.18.0",{"version":390,"is_range":326,"range_type":99,"version_start":391,"version_start_type":385,"version_end":391,"version_end_type":385,"fixed_in":9},">= 22.23.1, \u003C= 22.23.1","22.23.1",{"ecosystem":9,"name":393,"vendor":320,"product":393,"cpe_part":380,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":394},"node.js",[395,399,402],{"version":396,"is_range":326,"range_type":397,"version_start":398,"version_start_type":385,"version_end":391,"version_end_type":385,"fixed_in":9},"gte22.0_lte22.23.1","cpe","22.0",{"version":400,"is_range":326,"range_type":397,"version_start":401,"version_start_type":385,"version_end":388,"version_end_type":385,"fixed_in":9},"gte24.0.0_lte24.18.0","24.0.0",{"version":403,"is_range":326,"range_type":397,"version_start":404,"version_start_type":385,"version_end":384,"version_end_type":385,"fixed_in":9},"gte26.0.0_lte26.5.0","26.0.0"]