[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-58045":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":86,"aliases":87,"duplicate_of":9,"upstream":95,"downstream":96,"duplicates":135,"related":136,"reserved_at":9,"published_at":152,"modified_at":153,"state":154,"summary":155,"references_raw":164,"kevs":195,"epss":196,"epss_history":199,"metrics":340,"affected":354},"CVE-2026-58045","A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:zlib` APIs, causing the entire process to crash. All 11 synchronous zlib functions are affected.\r\n\r\nRepeated exploitation of this condition can result in a denial of service.\r\n\r\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-400","Uncontrolled Resource Consumption","The product does not properly control the allocation and maintenance of a limited resource.","weakness","Draft","Class","High",[20,24,82],{"id":21,"name":22,"techniques":23},"CAPEC-147","XML Ping of the Death",[],{"id":25,"name":26,"techniques":27},"CAPEC-227","Sustained Client Engagement",[28],{"id":29,"name":30,"tactics":31,"countermeasures":35},"T1499","Endpoint Denial of Service",[32],{"id":33,"name":34},"TA0105","Impact",[36,41,45,49,53,57,61,66,70,74,78],{"id":37,"name":38,"tactic":39},"D3-ISVA","Inbound Session Volume Analysis",{"name":40},"Detect",{"id":42,"name":43,"tactic":44},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":40},{"id":46,"name":47,"tactic":48},"D3-APCA","Application Protocol Command Analysis",{"name":40},{"id":50,"name":51,"tactic":52},"D3-NTCD","Network Traffic Community Deviation",{"name":40},{"id":54,"name":55,"tactic":56},"D3-RTSD","Remote Terminal Session Detection",{"name":40},{"id":58,"name":59,"tactic":60},"D3-CSPP","Client-server Payload Profiling",{"name":40},{"id":62,"name":63,"tactic":64},"D3-NTF","Network Traffic Filtering",{"name":65},"Isolate",{"id":67,"name":68,"tactic":69},"D3-ITF","Inbound Traffic Filtering",{"name":65},{"id":71,"name":72,"tactic":73},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":40},{"id":75,"name":76,"tactic":77},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":40},{"id":79,"name":80,"tactic":81},"D3-NTSA","Network Traffic Signature Analysis",{"name":40},{"id":83,"name":84,"techniques":85},"CAPEC-492","Regular Expression Exponential Blowup",[],[],[88,89,90,91,92,93,94],"ALPINE-CVE-2026-58045","UBUNTU-CVE-2026-58045","DEBIAN-CVE-2026-58045","CGA-f9qv-4jjh-8w3w","CGA-fqj5-8568-g5v9","CGA-gw63-9jw4-5h7q","CGA-w6f6-vj3h-2w63",[],[97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133],{"_key":98},"SUSE-SU-2026:3520-1",{"_key":100},"SUSE-SU-2026:3521-1",{"_key":102},"SUSE-SU-2026:3557-1",{"_key":104},"OPENSUSE-SU-2026:11439-1",{"_key":106},"OPENSUSE-SU-2026:11440-1",{"_key":108},"OPENSUSE-SU-2026:21545-1",{"_key":110},"OPENSUSE-SU-2026:21546-1",{"_key":112},"SUSE-SU-2026:23130-1",{"_key":114},"SUSE-SU-2026:23131-1",{"_key":116},"SUSE-SU-2026:23154-1",{"_key":118},"SUSE-SU-2026:23155-1",{"_key":120},"MGASA-2026-0359",{"_key":122},"RHSA-2026:48305",{"_key":124},"RHSA-2026:48537",{"_key":126},"SUSE-SU-2026:3929-1",{"_key":128},"SUSE-SU-2026:3930-1",{"_key":130},"SUSE-SU-2026:4248-1",{"_key":132},"SUSE-SU-2026:4261-1",{"_key":134},"RHSA-2026:52990",[],[137,138,139,140,141,142,143,144,145,146,147,148,149,150,151],{"_key":98},{"_key":100},{"_key":102},{"_key":104},{"_key":106},{"_key":108},{"_key":110},{"_key":112},{"_key":114},{"_key":116},{"_key":118},{"_key":126},{"_key":128},{"_key":130},{"_key":132},"2026-08-04T00:49:58.266Z","2026-08-04T15:03:57.326Z","Awaiting Analysis",{"cisa_kev":156,"cisa_ransomware":156,"cisa_vendor":9,"epss_severity":157,"epss_score":158,"severity":159,"severity_score":160,"severity_version":161,"severity_source":162,"severity_vector":163,"severity_status":154},false,"low",0.00166,"medium",6.2,"v3.0","cve.org","CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[165,170,176,182,186,190],{"url":166,"sources":167,"tags":169},"https://nodejs.org/en/blog/vulnerability/july-2026-security-releases",[162,168],"nvd",[],{"url":171,"sources":172,"tags":174},"https://security.alpinelinux.org/vuln/CVE-2026-58045",[173],"osv_alpine",[175],"Advisory",{"url":177,"sources":178,"tags":180},"https://ubuntu.com/security/CVE-2026-58045",[179],"osv_ubuntu",[181],"REPORT",{"url":183,"sources":184,"tags":185},"https://www.cve.org/CVERecord?id=CVE-2026-58045",[179],[181],{"url":187,"sources":188,"tags":189},"https://nodejs.org/en/blog/vulnerability/july-2026-security-releases#nodezlib-sync-apis-can-crash-on-spoofed-typedarray-length-cve-2026-58045---medium",[179],[181],{"url":191,"sources":192,"tags":194},"https://security-tracker.debian.org/tracker/CVE-2026-58045",[193],"osv_debian",[175],[],{"date":197,"score":158,"percentile":198},"2026-09-19",0.06261,[200,204,207,210,213,215,219,222,225,228,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,276,279,282,285,288,291,294,297,300,303,306,309,312,315,318,321,324,327,330,333,336,339],{"date":201,"score":202,"percentile":203},"2026-08-04",0.00189,0.08798,{"date":205,"score":202,"percentile":206},"2026-08-05",0.08772,{"date":208,"score":202,"percentile":209},"2026-08-06",0.08756,{"date":211,"score":202,"percentile":212},"2026-08-07",0.0875,{"date":214,"score":202,"percentile":212},"2026-08-08",{"date":216,"score":217,"percentile":218},"2026-08-09",0.00198,0.09781,{"date":220,"score":217,"percentile":221},"2026-08-10",0.09795,{"date":223,"score":217,"percentile":224},"2026-08-11",0.09854,{"date":226,"score":217,"percentile":227},"2026-08-12",0.09877,{"date":229,"score":217,"percentile":230},"2026-08-13",0.09873,{"date":232,"score":217,"percentile":233},"2026-08-14",0.09886,{"date":235,"score":217,"percentile":236},"2026-08-15",0.09939,{"date":238,"score":217,"percentile":239},"2026-08-16",0.09971,{"date":241,"score":217,"percentile":242},"2026-08-17",0.09962,{"date":244,"score":217,"percentile":245},"2026-08-18",0.09955,{"date":247,"score":217,"percentile":248},"2026-08-19",0.09993,{"date":250,"score":217,"percentile":251},"2026-08-20",0.0999,{"date":253,"score":217,"percentile":254},"2026-08-21",0.0998,{"date":256,"score":217,"percentile":257},"2026-08-22",0.09977,{"date":259,"score":217,"percentile":260},"2026-08-23",0.09921,{"date":262,"score":158,"percentile":263},"2026-08-24",0.05983,{"date":265,"score":158,"percentile":266},"2026-08-25",0.06009,{"date":268,"score":158,"percentile":269},"2026-08-26",0.06012,{"date":271,"score":158,"percentile":272},"2026-08-27",0.0606,{"date":274,"score":158,"percentile":275},"2026-08-28",0.06057,{"date":277,"score":158,"percentile":278},"2026-08-29",0.06062,{"date":280,"score":158,"percentile":281},"2026-08-30",0.06073,{"date":283,"score":158,"percentile":284},"2026-08-31",0.06074,{"date":286,"score":158,"percentile":287},"2026-09-01",0.06078,{"date":289,"score":158,"percentile":290},"2026-09-02",0.06077,{"date":292,"score":158,"percentile":293},"2026-09-03",0.06064,{"date":295,"score":158,"percentile":296},"2026-09-04",0.06082,{"date":298,"score":158,"percentile":299},"2026-09-05",0.06092,{"date":301,"score":158,"percentile":302},"2026-09-06",0.06108,{"date":304,"score":158,"percentile":305},"2026-09-07",0.06095,{"date":307,"score":158,"percentile":308},"2026-09-08",0.06085,{"date":310,"score":158,"percentile":311},"2026-09-09",0.06116,{"date":313,"score":158,"percentile":314},"2026-09-10",0.06107,{"date":316,"score":158,"percentile":317},"2026-09-11",0.06103,{"date":319,"score":158,"percentile":320},"2026-09-12",0.0611,{"date":322,"score":158,"percentile":323},"2026-09-13",0.06126,{"date":325,"score":158,"percentile":326},"2026-09-14",0.06138,{"date":328,"score":158,"percentile":329},"2026-09-15",0.06159,{"date":331,"score":158,"percentile":332},"2026-09-16",0.062,{"date":334,"score":158,"percentile":335},"2026-09-17",0.0623,{"date":337,"score":158,"percentile":338},"2026-09-18",0.06238,{"date":197,"score":158,"percentile":198},[341,346,348,350,352],{"source":162,"cvss_v2_0":9,"cvss_v3_0":342,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":160,"baseSeverity":343,"vectorString":163,"impactScore":344,"exploitabilityScore":345},"MEDIUM",6,6.4,{"source":168,"cvss_v2_0":9,"cvss_v3_0":347,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":160,"baseSeverity":343,"vectorString":163,"impactScore":344,"exploitabilityScore":345},{"source":173,"cvss_v2_0":9,"cvss_v3_0":349,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":160,"baseSeverity":9,"vectorString":163,"impactScore":344,"exploitabilityScore":345},{"source":179,"cvss_v2_0":9,"cvss_v3_0":351,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":160,"baseSeverity":9,"vectorString":163,"impactScore":344,"exploitabilityScore":345},{"source":193,"cvss_v2_0":9,"cvss_v3_0":353,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":160,"baseSeverity":9,"vectorString":163,"impactScore":344,"exploitabilityScore":345},[355,372,379,383,388,391,403,410],{"ecosystem":356,"name":357,"vendor":358,"product":357,"cpe_part":9,"purl_type":359,"purl_namespace":358,"purl_name":357,"source":9,"versions":360},"Alpine Linux","nodejs","alpine","apk",[361,367,368,371],{"version":362,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":365,"version_end_type":366,"fixed_in":9},"lt22_23_2_r0",true,"ecosystem","22.23.2-r0","excluding",{"version":362,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":365,"version_end_type":366,"fixed_in":9},{"version":369,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":370,"version_end_type":366,"fixed_in":9},"lt24_18_1_r0","24.18.1-r0",{"version":369,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":370,"version_end_type":366,"fixed_in":9},{"ecosystem":373,"name":374,"vendor":375,"product":374,"cpe_part":9,"purl_type":359,"purl_namespace":375,"purl_name":374,"source":9,"versions":376},"Chainguard","nodejs-20","chainguard",[377],{"version":378,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"ecosystem":373,"name":380,"vendor":375,"product":380,"cpe_part":9,"purl_type":359,"purl_namespace":375,"purl_name":380,"source":9,"versions":381},"nodejs-25",[382],{"version":378,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":384,"name":374,"vendor":385,"product":374,"cpe_part":9,"purl_type":359,"purl_namespace":385,"purl_name":374,"source":9,"versions":386},"Wolfi","wolfi",[387],{"version":378,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":384,"name":380,"vendor":385,"product":380,"cpe_part":9,"purl_type":359,"purl_namespace":385,"purl_name":380,"source":9,"versions":389},[390],{"version":378,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":392,"name":357,"vendor":393,"product":357,"cpe_part":9,"purl_type":394,"purl_namespace":393,"purl_name":357,"source":9,"versions":395},"Debian","debian","deb",[396,397,398,399,400],{"version":378,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":378,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":378,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":378,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":401,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":402,"version_end_type":366,"fixed_in":9},"lt24_19_0+dfsg+~cs24_13_3_1","24.19.0+dfsg+~cs24.13.3-1",{"ecosystem":404,"name":357,"vendor":405,"product":357,"cpe_part":9,"purl_type":394,"purl_namespace":405,"purl_name":357,"source":9,"versions":406},"Ubuntu","ubuntu",[407,408,409],{"version":378,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":378,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":378,"is_range":363,"range_type":364,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":411,"vendor":357,"product":411,"cpe_part":412,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":413},"node","a",[414,418,421],{"version":415,"is_range":363,"range_type":162,"version_start":416,"version_start_type":417,"version_end":416,"version_end_type":417,"fixed_in":9},">= 26.5.0, \u003C= 26.5.0","26.5.0","including",{"version":419,"is_range":363,"range_type":162,"version_start":420,"version_start_type":417,"version_end":420,"version_end_type":417,"fixed_in":9},">= 24.18.0, \u003C= 24.18.0","24.18.0",{"version":422,"is_range":363,"range_type":162,"version_start":423,"version_start_type":417,"version_end":423,"version_end_type":417,"fixed_in":9},">= 22.23.1, \u003C= 22.23.1","22.23.1"]