[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-58040":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":29,"downstream":30,"duplicates":69,"related":70,"reserved_at":9,"published_at":86,"modified_at":87,"state":88,"summary":89,"references_raw":98,"kevs":129,"epss":130,"epss_history":133,"metrics":289,"affected":303},"CVE-2026-58040","An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934).\r\n\r\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-297","Improper Validation of Certificate with Host Mismatch","The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host.","weakness","Incomplete","Variant","High",[],[],[22,23,24,25,26,27,28],"ALPINE-CVE-2026-58040","UBUNTU-CVE-2026-58040","DEBIAN-CVE-2026-58040","CGA-g54j-776w-663c","CGA-hw4v-jgpg-8794","CGA-v9r3-594h-v9jg","CGA-ww49-2pj3-f8gx",[],[31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67],{"_key":32},"SUSE-SU-2026:3520-1",{"_key":34},"SUSE-SU-2026:3521-1",{"_key":36},"SUSE-SU-2026:3557-1",{"_key":38},"OPENSUSE-SU-2026:11439-1",{"_key":40},"OPENSUSE-SU-2026:11440-1",{"_key":42},"OPENSUSE-SU-2026:21545-1",{"_key":44},"OPENSUSE-SU-2026:21546-1",{"_key":46},"SUSE-SU-2026:23130-1",{"_key":48},"SUSE-SU-2026:23131-1",{"_key":50},"SUSE-SU-2026:23154-1",{"_key":52},"SUSE-SU-2026:23155-1",{"_key":54},"MGASA-2026-0359",{"_key":56},"RHSA-2026:48273",{"_key":58},"RHSA-2026:48305",{"_key":60},"RHSA-2026:48537",{"_key":62},"SUSE-SU-2026:3929-1",{"_key":64},"SUSE-SU-2026:3930-1",{"_key":66},"SUSE-SU-2026:4248-1",{"_key":68},"SUSE-SU-2026:4261-1",[],[71,72,73,74,75,76,77,78,79,80,81,82,83,84,85],{"_key":32},{"_key":34},{"_key":36},{"_key":38},{"_key":40},{"_key":42},{"_key":44},{"_key":46},{"_key":48},{"_key":50},{"_key":52},{"_key":62},{"_key":64},{"_key":66},{"_key":68},"2026-07-30T06:02:49.942Z","2026-07-30T12:50:20.213Z","Awaiting Analysis",{"cisa_kev":90,"cisa_ransomware":90,"cisa_vendor":9,"epss_severity":91,"epss_score":92,"severity":93,"severity_score":94,"severity_version":95,"severity_source":96,"severity_vector":97,"severity_status":88},false,"low",0.00278,"medium",6.3,"v3.0","cve.org","CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",[99,106,112,116,120,124],{"url":100,"sources":101,"tags":104},"https://nodejs.org/en/blog/vulnerability/july-2026-security-releases",[96,102,103],"nvd","osv_ubuntu",[105],"REPORT",{"url":107,"sources":108,"tags":110},"https://security.alpinelinux.org/vuln/CVE-2026-58040",[109],"osv_alpine",[111],"Advisory",{"url":113,"sources":114,"tags":115},"https://ubuntu.com/security/CVE-2026-58040",[103],[105],{"url":117,"sources":118,"tags":119},"https://www.cve.org/CVERecord?id=CVE-2026-58040",[103],[105],{"url":121,"sources":122,"tags":123},"https://nodejs.org/en/blog/vulnerability/july-2026-security-releases#https-agent-session-reuse-can-skip-hostname-verification-cve-2026-58040---medium",[103],[105],{"url":125,"sources":126,"tags":128},"https://security-tracker.debian.org/tracker/CVE-2026-58040",[127],"osv_debian",[111],[],{"date":131,"score":92,"percentile":132},"2026-09-19",0.20453,[134,138,142,145,148,151,155,158,161,164,167,170,173,176,179,182,185,188,191,194,197,200,203,206,209,212,215,218,221,224,227,230,233,236,239,242,245,248,251,254,256,259,262,265,268,271,274,277,279,282,285,288],{"date":135,"score":136,"percentile":137},"2026-07-30",0.00269,0.18893,{"date":139,"score":140,"percentile":141},"2026-07-31",0.00246,0.16048,{"date":143,"score":140,"percentile":144},"2026-08-01",0.16041,{"date":146,"score":140,"percentile":147},"2026-08-02",0.16037,{"date":149,"score":140,"percentile":150},"2026-08-03",0.16039,{"date":152,"score":153,"percentile":154},"2026-08-04",0.00272,0.19337,{"date":156,"score":153,"percentile":157},"2026-08-05",0.19253,{"date":159,"score":153,"percentile":160},"2026-08-06",0.1926,{"date":162,"score":153,"percentile":163},"2026-08-07",0.19268,{"date":165,"score":153,"percentile":166},"2026-08-08",0.19272,{"date":168,"score":153,"percentile":169},"2026-08-09",0.19266,{"date":171,"score":153,"percentile":172},"2026-08-10",0.19269,{"date":174,"score":153,"percentile":175},"2026-08-11",0.1936,{"date":177,"score":153,"percentile":178},"2026-08-12",0.19402,{"date":180,"score":153,"percentile":181},"2026-08-13",0.19426,{"date":183,"score":153,"percentile":184},"2026-08-14",0.19442,{"date":186,"score":153,"percentile":187},"2026-08-15",0.19598,{"date":189,"score":153,"percentile":190},"2026-08-16",0.19631,{"date":192,"score":153,"percentile":193},"2026-08-17",0.19548,{"date":195,"score":153,"percentile":196},"2026-08-18",0.19566,{"date":198,"score":153,"percentile":199},"2026-08-19",0.19633,{"date":201,"score":153,"percentile":202},"2026-08-20",0.19659,{"date":204,"score":153,"percentile":205},"2026-08-21",0.1968,{"date":207,"score":153,"percentile":208},"2026-08-22",0.19687,{"date":210,"score":153,"percentile":211},"2026-08-23",0.19679,{"date":213,"score":153,"percentile":214},"2026-08-24",0.19011,{"date":216,"score":153,"percentile":217},"2026-08-25",0.19026,{"date":219,"score":153,"percentile":220},"2026-08-26",0.19091,{"date":222,"score":153,"percentile":223},"2026-08-27",0.19095,{"date":225,"score":153,"percentile":226},"2026-08-28",0.19132,{"date":228,"score":153,"percentile":229},"2026-08-29",0.1915,{"date":231,"score":153,"percentile":232},"2026-08-30",0.19171,{"date":234,"score":153,"percentile":235},"2026-08-31",0.19152,{"date":237,"score":153,"percentile":238},"2026-09-01",0.19173,{"date":240,"score":153,"percentile":241},"2026-09-02",0.19192,{"date":243,"score":153,"percentile":244},"2026-09-03",0.19199,{"date":246,"score":153,"percentile":247},"2026-09-04",0.19223,{"date":249,"score":153,"percentile":250},"2026-09-05",0.19261,{"date":252,"score":153,"percentile":253},"2026-09-06",0.1928,{"date":255,"score":153,"percentile":253},"2026-09-07",{"date":257,"score":153,"percentile":258},"2026-09-08",0.19288,{"date":260,"score":153,"percentile":261},"2026-09-09",0.19405,{"date":263,"score":153,"percentile":264},"2026-09-10",0.19404,{"date":266,"score":153,"percentile":267},"2026-09-11",0.19418,{"date":269,"score":153,"percentile":270},"2026-09-12",0.19524,{"date":272,"score":153,"percentile":273},"2026-09-13",0.1948,{"date":275,"score":153,"percentile":276},"2026-09-14",0.19496,{"date":278,"score":153,"percentile":196},"2026-09-15",{"date":280,"score":153,"percentile":281},"2026-09-16",0.19638,{"date":283,"score":153,"percentile":284},"2026-09-17",0.19678,{"date":286,"score":153,"percentile":287},"2026-09-18",0.19813,{"date":131,"score":92,"percentile":132},[290,295,297,299,301],{"source":96,"cvss_v2_0":9,"cvss_v3_0":291,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":94,"baseSeverity":292,"vectorString":97,"impactScore":293,"exploitabilityScore":294},"MEDIUM",6.7,4.6,{"source":102,"cvss_v2_0":9,"cvss_v3_0":296,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":94,"baseSeverity":292,"vectorString":97,"impactScore":293,"exploitabilityScore":294},{"source":109,"cvss_v2_0":9,"cvss_v3_0":298,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":94,"baseSeverity":9,"vectorString":97,"impactScore":293,"exploitabilityScore":294},{"source":103,"cvss_v2_0":9,"cvss_v3_0":300,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":94,"baseSeverity":9,"vectorString":97,"impactScore":293,"exploitabilityScore":294},{"source":127,"cvss_v2_0":9,"cvss_v3_0":302,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":94,"baseSeverity":9,"vectorString":97,"impactScore":293,"exploitabilityScore":294},[304,321,328,332,337,340,352,359],{"ecosystem":305,"name":306,"vendor":307,"product":306,"cpe_part":9,"purl_type":308,"purl_namespace":307,"purl_name":306,"source":9,"versions":309},"Alpine Linux","nodejs","alpine","apk",[310,316,317,320],{"version":311,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":314,"version_end_type":315,"fixed_in":9},"lt22_23_2_r0",true,"ecosystem","22.23.2-r0","excluding",{"version":311,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":314,"version_end_type":315,"fixed_in":9},{"version":318,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":319,"version_end_type":315,"fixed_in":9},"lt24_18_1_r0","24.18.1-r0",{"version":318,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":319,"version_end_type":315,"fixed_in":9},{"ecosystem":322,"name":323,"vendor":324,"product":323,"cpe_part":9,"purl_type":308,"purl_namespace":324,"purl_name":323,"source":9,"versions":325},"Chainguard","nodejs-20","chainguard",[326],{"version":327,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"ecosystem":322,"name":329,"vendor":324,"product":329,"cpe_part":9,"purl_type":308,"purl_namespace":324,"purl_name":329,"source":9,"versions":330},"nodejs-25",[331],{"version":327,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":333,"name":323,"vendor":334,"product":323,"cpe_part":9,"purl_type":308,"purl_namespace":334,"purl_name":323,"source":9,"versions":335},"Wolfi","wolfi",[336],{"version":327,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":333,"name":329,"vendor":334,"product":329,"cpe_part":9,"purl_type":308,"purl_namespace":334,"purl_name":329,"source":9,"versions":338},[339],{"version":327,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":341,"name":306,"vendor":342,"product":306,"cpe_part":9,"purl_type":343,"purl_namespace":342,"purl_name":306,"source":9,"versions":344},"Debian","debian","deb",[345,346,347,348,349],{"version":327,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":327,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":327,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":327,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":350,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":351,"version_end_type":315,"fixed_in":9},"lt24_19_0+dfsg+~cs24_13_3_1","24.19.0+dfsg+~cs24.13.3-1",{"ecosystem":353,"name":306,"vendor":354,"product":306,"cpe_part":9,"purl_type":343,"purl_namespace":354,"purl_name":306,"source":9,"versions":355},"Ubuntu","ubuntu",[356,357,358],{"version":327,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":327,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":327,"is_range":312,"range_type":313,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":360,"vendor":306,"product":360,"cpe_part":361,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":362},"node","a",[363,367,370],{"version":364,"is_range":312,"range_type":96,"version_start":365,"version_start_type":366,"version_end":365,"version_end_type":366,"fixed_in":9},">= 22.23.1, \u003C= 22.23.1","22.23.1","including",{"version":368,"is_range":312,"range_type":96,"version_start":369,"version_start_type":366,"version_end":369,"version_end_type":366,"fixed_in":9},">= 24.18.0, \u003C= 24.18.0","24.18.0",{"version":371,"is_range":312,"range_type":96,"version_start":372,"version_start_type":366,"version_end":372,"version_end_type":366,"fixed_in":9},">= 26.5.0, \u003C= 26.5.0","26.5.0"]