[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-58042":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":86,"aliases":87,"duplicate_of":9,"upstream":95,"downstream":96,"duplicates":135,"related":136,"reserved_at":9,"published_at":152,"modified_at":153,"state":154,"summary":155,"references_raw":164,"kevs":195,"epss":196,"epss_history":199,"metrics":341,"affected":355},"CVE-2026-58042","A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records.\r\n\r\nRepeated triggering of this condition can lead to denial of service.\r\n\r\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-400","Uncontrolled Resource Consumption","The product does not properly control the allocation and maintenance of a limited resource.","weakness","Draft","Class","High",[20,24,82],{"id":21,"name":22,"techniques":23},"CAPEC-147","XML Ping of the Death",[],{"id":25,"name":26,"techniques":27},"CAPEC-227","Sustained Client Engagement",[28],{"id":29,"name":30,"tactics":31,"countermeasures":35},"T1499","Endpoint Denial of Service",[32],{"id":33,"name":34},"TA0105","Impact",[36,41,45,49,53,57,61,66,70,74,78],{"id":37,"name":38,"tactic":39},"D3-ISVA","Inbound Session Volume Analysis",{"name":40},"Detect",{"id":42,"name":43,"tactic":44},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":40},{"id":46,"name":47,"tactic":48},"D3-APCA","Application Protocol Command Analysis",{"name":40},{"id":50,"name":51,"tactic":52},"D3-NTCD","Network Traffic Community Deviation",{"name":40},{"id":54,"name":55,"tactic":56},"D3-RTSD","Remote Terminal Session Detection",{"name":40},{"id":58,"name":59,"tactic":60},"D3-CSPP","Client-server Payload Profiling",{"name":40},{"id":62,"name":63,"tactic":64},"D3-NTF","Network Traffic Filtering",{"name":65},"Isolate",{"id":67,"name":68,"tactic":69},"D3-ITF","Inbound Traffic Filtering",{"name":65},{"id":71,"name":72,"tactic":73},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":40},{"id":75,"name":76,"tactic":77},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":40},{"id":79,"name":80,"tactic":81},"D3-NTSA","Network Traffic Signature Analysis",{"name":40},{"id":83,"name":84,"techniques":85},"CAPEC-492","Regular Expression Exponential Blowup",[],[],[88,89,90,91,92,93,94],"ALPINE-CVE-2026-58042","UBUNTU-CVE-2026-58042","DEBIAN-CVE-2026-58042","CGA-6rpw-vcvw-6cgh","CGA-7wmp-2r95-9fj5","CGA-q823-8hrw-hghq","CGA-w9ch-89cj-3pmm",[],[97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133],{"_key":98},"SUSE-SU-2026:3520-1",{"_key":100},"SUSE-SU-2026:3521-1",{"_key":102},"SUSE-SU-2026:3557-1",{"_key":104},"OPENSUSE-SU-2026:11439-1",{"_key":106},"OPENSUSE-SU-2026:11440-1",{"_key":108},"OPENSUSE-SU-2026:21545-1",{"_key":110},"OPENSUSE-SU-2026:21546-1",{"_key":112},"SUSE-SU-2026:23130-1",{"_key":114},"SUSE-SU-2026:23131-1",{"_key":116},"SUSE-SU-2026:23154-1",{"_key":118},"SUSE-SU-2026:23155-1",{"_key":120},"MGASA-2026-0359",{"_key":122},"RHSA-2026:48305",{"_key":124},"RHSA-2026:48537",{"_key":126},"SUSE-SU-2026:3929-1",{"_key":128},"SUSE-SU-2026:3930-1",{"_key":130},"SUSE-SU-2026:4248-1",{"_key":132},"SUSE-SU-2026:4261-1",{"_key":134},"RHSA-2026:52990",[],[137,138,139,140,141,142,143,144,145,146,147,148,149,150,151],{"_key":98},{"_key":100},{"_key":102},{"_key":104},{"_key":106},{"_key":108},{"_key":110},{"_key":112},{"_key":114},{"_key":116},{"_key":118},{"_key":126},{"_key":128},{"_key":130},{"_key":132},"2026-08-04T00:49:58.362Z","2026-08-04T15:03:30.449Z","Awaiting Analysis",{"cisa_kev":156,"cisa_ransomware":156,"cisa_vendor":9,"epss_severity":157,"epss_score":158,"severity":159,"severity_score":160,"severity_version":161,"severity_source":162,"severity_vector":163,"severity_status":154},false,"low",0.00369,"medium",5.9,"v3.0","cve.org","CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",[165,170,176,182,186,190],{"url":166,"sources":167,"tags":169},"https://nodejs.org/en/blog/vulnerability/july-2026-security-releases",[162,168],"nvd",[],{"url":171,"sources":172,"tags":174},"https://security.alpinelinux.org/vuln/CVE-2026-58042",[173],"osv_alpine",[175],"Advisory",{"url":177,"sources":178,"tags":180},"https://ubuntu.com/security/CVE-2026-58042",[179],"osv_ubuntu",[181],"REPORT",{"url":183,"sources":184,"tags":185},"https://www.cve.org/CVERecord?id=CVE-2026-58042",[179],[181],{"url":187,"sources":188,"tags":189},"https://nodejs.org/en/blog/vulnerability/july-2026-security-releases#dnsresolveany-can-abort-on-dns-responses-with-many-a-records-cve-2026-58042---medium",[179],[181],{"url":191,"sources":192,"tags":194},"https://security-tracker.debian.org/tracker/CVE-2026-58042",[193],"osv_debian",[175],[],{"date":197,"score":158,"percentile":198},"2026-09-19",0.30813,[200,204,207,210,213,216,220,223,226,229,232,235,238,241,244,247,250,253,256,259,262,265,268,271,274,277,280,283,286,289,292,295,298,301,304,307,310,313,316,319,322,325,328,331,334,337,340],{"date":201,"score":202,"percentile":203},"2026-08-04",0.00405,0.33288,{"date":205,"score":202,"percentile":206},"2026-08-05",0.33258,{"date":208,"score":202,"percentile":209},"2026-08-06",0.33287,{"date":211,"score":202,"percentile":212},"2026-08-07",0.33327,{"date":214,"score":202,"percentile":215},"2026-08-08",0.3333,{"date":217,"score":218,"percentile":219},"2026-08-09",0.0046,0.37623,{"date":221,"score":218,"percentile":222},"2026-08-10",0.37627,{"date":224,"score":218,"percentile":225},"2026-08-11",0.37716,{"date":227,"score":218,"percentile":228},"2026-08-12",0.37806,{"date":230,"score":218,"percentile":231},"2026-08-13",0.37842,{"date":233,"score":218,"percentile":234},"2026-08-14",0.37905,{"date":236,"score":218,"percentile":237},"2026-08-15",0.38016,{"date":239,"score":218,"percentile":240},"2026-08-16",0.38043,{"date":242,"score":218,"percentile":243},"2026-08-17",0.38001,{"date":245,"score":218,"percentile":246},"2026-08-18",0.38024,{"date":248,"score":218,"percentile":249},"2026-08-19",0.38225,{"date":251,"score":218,"percentile":252},"2026-08-20",0.38273,{"date":254,"score":218,"percentile":255},"2026-08-21",0.38315,{"date":257,"score":218,"percentile":258},"2026-08-22",0.38328,{"date":260,"score":218,"percentile":261},"2026-08-23",0.38235,{"date":263,"score":158,"percentile":264},"2026-08-24",0.2963,{"date":266,"score":158,"percentile":267},"2026-08-25",0.29659,{"date":269,"score":158,"percentile":270},"2026-08-26",0.29745,{"date":272,"score":158,"percentile":273},"2026-08-27",0.2977,{"date":275,"score":158,"percentile":276},"2026-08-28",0.29712,{"date":278,"score":158,"percentile":279},"2026-08-29",0.29744,{"date":281,"score":158,"percentile":282},"2026-08-30",0.2985,{"date":284,"score":158,"percentile":285},"2026-08-31",0.29861,{"date":287,"score":158,"percentile":288},"2026-09-01",0.29887,{"date":290,"score":158,"percentile":291},"2026-09-02",0.29936,{"date":293,"score":158,"percentile":294},"2026-09-03",0.29958,{"date":296,"score":158,"percentile":297},"2026-09-04",0.29997,{"date":299,"score":158,"percentile":300},"2026-09-05",0.29947,{"date":302,"score":158,"percentile":303},"2026-09-06",0.3006,{"date":305,"score":158,"percentile":306},"2026-09-07",0.30065,{"date":308,"score":158,"percentile":309},"2026-09-08",0.3008,{"date":311,"score":158,"percentile":312},"2026-09-09",0.30233,{"date":314,"score":158,"percentile":315},"2026-09-10",0.30246,{"date":317,"score":158,"percentile":318},"2026-09-11",0.30272,{"date":320,"score":158,"percentile":321},"2026-09-12",0.30372,{"date":323,"score":158,"percentile":324},"2026-09-13",0.30331,{"date":326,"score":158,"percentile":327},"2026-09-14",0.30355,{"date":329,"score":158,"percentile":330},"2026-09-15",0.30425,{"date":332,"score":158,"percentile":333},"2026-09-16",0.30571,{"date":335,"score":158,"percentile":336},"2026-09-17",0.30632,{"date":338,"score":158,"percentile":339},"2026-09-18",0.30781,{"date":197,"score":158,"percentile":198},[342,347,349,351,353],{"source":162,"cvss_v2_0":9,"cvss_v3_0":343,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":160,"baseSeverity":344,"vectorString":163,"impactScore":345,"exploitabilityScore":346},"MEDIUM",6,5.6,{"source":168,"cvss_v2_0":9,"cvss_v3_0":348,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":160,"baseSeverity":344,"vectorString":163,"impactScore":345,"exploitabilityScore":346},{"source":173,"cvss_v2_0":9,"cvss_v3_0":350,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":160,"baseSeverity":9,"vectorString":163,"impactScore":345,"exploitabilityScore":346},{"source":179,"cvss_v2_0":9,"cvss_v3_0":352,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":160,"baseSeverity":9,"vectorString":163,"impactScore":345,"exploitabilityScore":346},{"source":193,"cvss_v2_0":9,"cvss_v3_0":354,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":160,"baseSeverity":9,"vectorString":163,"impactScore":345,"exploitabilityScore":346},[356,373,380,384,389,392,404,411],{"ecosystem":357,"name":358,"vendor":359,"product":358,"cpe_part":9,"purl_type":360,"purl_namespace":359,"purl_name":358,"source":9,"versions":361},"Alpine Linux","nodejs","alpine","apk",[362,368,369,372],{"version":363,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":366,"version_end_type":367,"fixed_in":9},"lt22_23_2_r0",true,"ecosystem","22.23.2-r0","excluding",{"version":363,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":366,"version_end_type":367,"fixed_in":9},{"version":370,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":371,"version_end_type":367,"fixed_in":9},"lt24_18_1_r0","24.18.1-r0",{"version":370,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":371,"version_end_type":367,"fixed_in":9},{"ecosystem":374,"name":375,"vendor":376,"product":375,"cpe_part":9,"purl_type":360,"purl_namespace":376,"purl_name":375,"source":9,"versions":377},"Chainguard","nodejs-20","chainguard",[378],{"version":379,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"ecosystem":374,"name":381,"vendor":376,"product":381,"cpe_part":9,"purl_type":360,"purl_namespace":376,"purl_name":381,"source":9,"versions":382},"nodejs-25",[383],{"version":379,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":385,"name":375,"vendor":386,"product":375,"cpe_part":9,"purl_type":360,"purl_namespace":386,"purl_name":375,"source":9,"versions":387},"Wolfi","wolfi",[388],{"version":379,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":385,"name":381,"vendor":386,"product":381,"cpe_part":9,"purl_type":360,"purl_namespace":386,"purl_name":381,"source":9,"versions":390},[391],{"version":379,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":393,"name":358,"vendor":394,"product":358,"cpe_part":9,"purl_type":395,"purl_namespace":394,"purl_name":358,"source":9,"versions":396},"Debian","debian","deb",[397,398,399,400,401],{"version":379,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":379,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":379,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":379,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":402,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":403,"version_end_type":367,"fixed_in":9},"lt24_19_0+dfsg+~cs24_13_3_1","24.19.0+dfsg+~cs24.13.3-1",{"ecosystem":405,"name":358,"vendor":406,"product":358,"cpe_part":9,"purl_type":395,"purl_namespace":406,"purl_name":358,"source":9,"versions":407},"Ubuntu","ubuntu",[408,409,410],{"version":379,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":379,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":379,"is_range":364,"range_type":365,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":412,"vendor":358,"product":412,"cpe_part":413,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":414},"node","a",[415,419,422],{"version":416,"is_range":364,"range_type":162,"version_start":417,"version_start_type":418,"version_end":417,"version_end_type":418,"fixed_in":9},">= 26.5.0, \u003C= 26.5.0","26.5.0","including",{"version":420,"is_range":364,"range_type":162,"version_start":421,"version_start_type":418,"version_end":421,"version_end_type":418,"fixed_in":9},">= 24.18.0, \u003C= 24.18.0","24.18.0",{"version":423,"is_range":364,"range_type":162,"version_start":424,"version_start_type":418,"version_end":424,"version_end_type":418,"fixed_in":9},">= 22.23.1, \u003C= 22.23.1","22.23.1"]