[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-58041":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":28,"aliases":29,"duplicate_of":9,"upstream":37,"downstream":38,"duplicates":57,"related":58,"reserved_at":9,"published_at":65,"modified_at":66,"state":67,"summary":68,"references_raw":77,"kevs":108,"epss":109,"epss_history":112,"metrics":254,"affected":268},"CVE-2026-58041","A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3_reset() directly, bypassing the iterator invalidation mechanism introduced for StatementSync in recent releases\r\n\r\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-367","Time-of-check Time-of-use (TOCTOU) Race Condition","The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.","weakness","Incomplete","Base","Medium",[20,24],{"id":21,"name":22,"techniques":23},"CAPEC-27","Leveraging Race Conditions via Symbolic Links",[],{"id":25,"name":26,"techniques":27},"CAPEC-29","Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions",[],[],[30,31,32,33,34,35,36],"ALPINE-CVE-2026-58041","UBUNTU-CVE-2026-58041","DEBIAN-CVE-2026-58041","CGA-2952-935m-xv93","CGA-9wvr-5vf8-r8hx","CGA-jh5r-g638-2q4p","CGA-rg6h-865r-9pj4",[],[39,41,43,45,47,49,51,53,55],{"_key":40},"SUSE-SU-2026:3520-1",{"_key":42},"OPENSUSE-SU-2026:11439-1",{"_key":44},"OPENSUSE-SU-2026:11440-1",{"_key":46},"OPENSUSE-SU-2026:21546-1",{"_key":48},"SUSE-SU-2026:23131-1",{"_key":50},"SUSE-SU-2026:23155-1",{"_key":52},"RHSA-2026:48305",{"_key":54},"RHSA-2026:48537",{"_key":56},"RHSA-2026:52990",[],[59,60,61,62,63,64],{"_key":40},{"_key":42},{"_key":44},{"_key":46},{"_key":48},{"_key":50},"2026-08-04T00:49:58.112Z","2026-08-04T15:04:06.975Z","Awaiting Analysis",{"cisa_kev":69,"cisa_ransomware":69,"cisa_vendor":9,"epss_severity":70,"epss_score":71,"severity":72,"severity_score":73,"severity_version":74,"severity_source":75,"severity_vector":76,"severity_status":67},false,"low",0.00253,"medium",5.3,"v3.0","cve.org","CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",[78,83,89,95,99,103],{"url":79,"sources":80,"tags":82},"https://nodejs.org/en/blog/vulnerability/july-2026-security-releases",[75,81],"nvd",[],{"url":84,"sources":85,"tags":87},"https://security.alpinelinux.org/vuln/CVE-2026-58041",[86],"osv_alpine",[88],"Advisory",{"url":90,"sources":91,"tags":93},"https://ubuntu.com/security/CVE-2026-58041",[92],"osv_ubuntu",[94],"REPORT",{"url":96,"sources":97,"tags":98},"https://www.cve.org/CVERecord?id=CVE-2026-58041",[92],[94],{"url":100,"sources":101,"tags":102},"https://nodejs.org/en/blog/vulnerability/july-2026-security-releases#nodesqlite-sqltagstore-iterator-replay-can-re-execute-writes-cve-2026-58041---medium",[92],[94],{"url":104,"sources":105,"tags":107},"https://security-tracker.debian.org/tracker/CVE-2026-58041",[106],"osv_debian",[88],[],{"date":110,"score":71,"percentile":111},"2026-09-19",0.17163,[113,117,120,123,126,129,133,136,139,142,145,148,151,154,157,160,163,166,169,172,175,178,181,184,187,190,193,196,199,202,205,208,211,214,217,220,223,226,229,232,235,238,241,244,247,250,253],{"date":114,"score":115,"percentile":116},"2026-08-04",0.00287,0.20917,{"date":118,"score":115,"percentile":119},"2026-08-05",0.20837,{"date":121,"score":115,"percentile":122},"2026-08-06",0.20846,{"date":124,"score":115,"percentile":125},"2026-08-07",0.2086,{"date":127,"score":115,"percentile":128},"2026-08-08",0.20863,{"date":130,"score":131,"percentile":132},"2026-08-09",0.0032,0.24406,{"date":134,"score":131,"percentile":135},"2026-08-10",0.24417,{"date":137,"score":131,"percentile":138},"2026-08-11",0.2451,{"date":140,"score":131,"percentile":141},"2026-08-12",0.24577,{"date":143,"score":131,"percentile":144},"2026-08-13",0.24609,{"date":146,"score":131,"percentile":147},"2026-08-14",0.24647,{"date":149,"score":131,"percentile":150},"2026-08-15",0.24791,{"date":152,"score":131,"percentile":153},"2026-08-16",0.24824,{"date":155,"score":131,"percentile":156},"2026-08-17",0.24739,{"date":158,"score":131,"percentile":159},"2026-08-18",0.2476,{"date":161,"score":131,"percentile":162},"2026-08-19",0.24867,{"date":164,"score":131,"percentile":165},"2026-08-20",0.24917,{"date":167,"score":131,"percentile":168},"2026-08-21",0.24947,{"date":170,"score":131,"percentile":171},"2026-08-22",0.24953,{"date":173,"score":131,"percentile":174},"2026-08-23",0.24898,{"date":176,"score":71,"percentile":177},"2026-08-24",0.16499,{"date":179,"score":71,"percentile":180},"2026-08-25",0.16513,{"date":182,"score":71,"percentile":183},"2026-08-26",0.1657,{"date":185,"score":71,"percentile":186},"2026-08-27",0.1656,{"date":188,"score":71,"percentile":189},"2026-08-28",0.16588,{"date":191,"score":71,"percentile":192},"2026-08-29",0.16598,{"date":194,"score":71,"percentile":195},"2026-08-30",0.16611,{"date":197,"score":71,"percentile":198},"2026-08-31",0.16603,{"date":200,"score":71,"percentile":201},"2026-09-01",0.1662,{"date":203,"score":71,"percentile":204},"2026-09-02",0.16631,{"date":206,"score":71,"percentile":207},"2026-09-03",0.16635,{"date":209,"score":71,"percentile":210},"2026-09-04",0.16647,{"date":212,"score":71,"percentile":213},"2026-09-05",0.1669,{"date":215,"score":71,"percentile":216},"2026-09-06",0.16705,{"date":218,"score":71,"percentile":219},"2026-09-07",0.16698,{"date":221,"score":71,"percentile":222},"2026-09-08",0.16708,{"date":224,"score":71,"percentile":225},"2026-09-09",0.16817,{"date":227,"score":71,"percentile":228},"2026-09-10",0.1681,{"date":230,"score":71,"percentile":231},"2026-09-11",0.16799,{"date":233,"score":71,"percentile":234},"2026-09-12",0.16906,{"date":236,"score":71,"percentile":237},"2026-09-13",0.1686,{"date":239,"score":71,"percentile":240},"2026-09-14",0.16877,{"date":242,"score":71,"percentile":243},"2026-09-15",0.16942,{"date":245,"score":71,"percentile":246},"2026-09-16",0.17005,{"date":248,"score":71,"percentile":249},"2026-09-17",0.17049,{"date":251,"score":71,"percentile":252},"2026-09-18",0.17189,{"date":110,"score":71,"percentile":111},[255,260,262,264,266],{"source":75,"cvss_v2_0":9,"cvss_v3_0":256,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":73,"baseSeverity":257,"vectorString":76,"impactScore":258,"exploitabilityScore":259},"MEDIUM",6,4.1,{"source":81,"cvss_v2_0":9,"cvss_v3_0":261,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":73,"baseSeverity":257,"vectorString":76,"impactScore":258,"exploitabilityScore":259},{"source":86,"cvss_v2_0":9,"cvss_v3_0":263,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":73,"baseSeverity":9,"vectorString":76,"impactScore":258,"exploitabilityScore":259},{"source":92,"cvss_v2_0":9,"cvss_v3_0":265,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":73,"baseSeverity":9,"vectorString":76,"impactScore":258,"exploitabilityScore":259},{"source":106,"cvss_v2_0":9,"cvss_v3_0":267,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":73,"baseSeverity":9,"vectorString":76,"impactScore":258,"exploitabilityScore":259},[269,282,289,293,298,301,313,320],{"ecosystem":270,"name":271,"vendor":272,"product":271,"cpe_part":9,"purl_type":273,"purl_namespace":272,"purl_name":271,"source":9,"versions":274},"Alpine Linux","nodejs","alpine","apk",[275,281],{"version":276,"is_range":277,"range_type":278,"version_start":9,"version_start_type":9,"version_end":279,"version_end_type":280,"fixed_in":9},"lt24_18_1_r0",true,"ecosystem","24.18.1-r0","excluding",{"version":276,"is_range":277,"range_type":278,"version_start":9,"version_start_type":9,"version_end":279,"version_end_type":280,"fixed_in":9},{"ecosystem":283,"name":284,"vendor":285,"product":284,"cpe_part":9,"purl_type":273,"purl_namespace":285,"purl_name":284,"source":9,"versions":286},"Chainguard","nodejs-20","chainguard",[287],{"version":288,"is_range":277,"range_type":278,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"ecosystem":283,"name":290,"vendor":285,"product":290,"cpe_part":9,"purl_type":273,"purl_namespace":285,"purl_name":290,"source":9,"versions":291},"nodejs-25",[292],{"version":288,"is_range":277,"range_type":278,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":294,"name":284,"vendor":295,"product":284,"cpe_part":9,"purl_type":273,"purl_namespace":295,"purl_name":284,"source":9,"versions":296},"Wolfi","wolfi",[297],{"version":288,"is_range":277,"range_type":278,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":294,"name":290,"vendor":295,"product":290,"cpe_part":9,"purl_type":273,"purl_namespace":295,"purl_name":290,"source":9,"versions":299},[300],{"version":288,"is_range":277,"range_type":278,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":302,"name":271,"vendor":303,"product":271,"cpe_part":9,"purl_type":304,"purl_namespace":303,"purl_name":271,"source":9,"versions":305},"Debian","debian","deb",[306,307,308,309,310],{"version":288,"is_range":277,"range_type":278,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":288,"is_range":277,"range_type":278,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":288,"is_range":277,"range_type":278,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":288,"is_range":277,"range_type":278,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":311,"is_range":277,"range_type":278,"version_start":9,"version_start_type":9,"version_end":312,"version_end_type":280,"fixed_in":9},"lt24_19_0+dfsg+~cs24_13_3_1","24.19.0+dfsg+~cs24.13.3-1",{"ecosystem":314,"name":271,"vendor":315,"product":271,"cpe_part":9,"purl_type":304,"purl_namespace":315,"purl_name":271,"source":9,"versions":316},"Ubuntu","ubuntu",[317,318,319],{"version":288,"is_range":277,"range_type":278,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":288,"is_range":277,"range_type":278,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":288,"is_range":277,"range_type":278,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":321,"vendor":271,"product":321,"cpe_part":322,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":323},"node","a",[324,328,331],{"version":325,"is_range":277,"range_type":75,"version_start":326,"version_start_type":327,"version_end":326,"version_end_type":327,"fixed_in":9},">= 22.23.1, \u003C= 22.23.1","22.23.1","including",{"version":329,"is_range":277,"range_type":75,"version_start":330,"version_start_type":327,"version_end":330,"version_end_type":327,"fixed_in":9},">= 24.18.0, \u003C= 24.18.0","24.18.0",{"version":332,"is_range":277,"range_type":75,"version_start":333,"version_start_type":327,"version_end":333,"version_end_type":327,"fixed_in":9},">= 26.5.0, \u003C= 26.5.0","26.5.0"]