[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-MGASA-2026-0359":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":34,"duplicates":35,"related":36,"reserved_at":9,"published_at":37,"modified_at":38,"state":9,"summary":39,"references_raw":41,"kevs":62,"epss":9,"epss_history":63,"metrics":64,"affected":65},"MGASA-2026-0359","Updated nodejs packages fix security vulnerabilities\n\nhttp2: retain header memory in session accounting. (CVE-2026-56846)\nhttp2: defer rst stream while in scope. (CVE-2026-56848)\npermission: avoid granting radix split nodes. (CVE-2026-58043)\nhttps: distinguish PFX object-array agent keys. (CVE-2026-56850)\nhttps: bind identity checks to session reuse. (CVE-2026-58040)\ndns: handle large resolveAny address replies. (CVE-2026-58042)\nzlib: throw on out-of-bounds write buffers. (CVE-2026-58045)\npermission: enforce fs write permission for trace events.\n(CVE-2026-56847)\npermission: check final report output path. (CVE-2026-58039)\nhttp: reject requests exceeding max header count. (CVE-2026-58044)\n",null,[],[],[],[14,16,18,20,22,24,26,28,30,32],{"_key":15},"CVE-2026-56846",{"_key":17},"CVE-2026-56847",{"_key":19},"CVE-2026-56848",{"_key":21},"CVE-2026-56850",{"_key":23},"CVE-2026-58039",{"_key":25},"CVE-2026-58040",{"_key":27},"CVE-2026-58042",{"_key":29},"CVE-2026-58043",{"_key":31},"CVE-2026-58044",{"_key":33},"CVE-2026-58045",[],[],[],"2026-09-01T03:06:53Z","2026-09-01T03:26:20.543297656Z",{"cisa_kev":40,"cisa_ransomware":40,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[42,48,53,58],{"url":43,"sources":44,"tags":46},"https://advisories.mageia.org/MGASA-2026-0359.html",[45],"osv_mageia",[47],"Advisory",{"url":49,"sources":50,"tags":51},"https://bugs.mageia.org/show_bug.cgi?id=36201",[45],[52],"REPORT",{"url":54,"sources":55,"tags":56},"https://nodejs.org/en/blog/vulnerability/july-2026-security-releases",[45],[57],"WEB",{"url":59,"sources":60,"tags":61},"https://nodejs.org/en/blog/release/v22.23.2",[45],[57],[],[],[],[66,78],{"ecosystem":67,"name":68,"vendor":69,"product":68,"cpe_part":9,"purl_type":70,"purl_namespace":69,"purl_name":68,"source":9,"versions":71},"Mageia","nodejs","mageia","rpm",[72],{"version":73,"is_range":74,"range_type":75,"version_start":9,"version_start_type":9,"version_end":76,"version_end_type":77,"fixed_in":9},"lt22_23_2_1_mga10",true,"ecosystem","22.23.2-1.mga10","excluding",{"ecosystem":67,"name":68,"vendor":69,"product":68,"cpe_part":9,"purl_type":70,"purl_namespace":69,"purl_name":68,"source":9,"versions":79},[80],{"version":81,"is_range":74,"range_type":75,"version_start":9,"version_start_type":9,"version_end":82,"version_end_type":77,"fixed_in":9},"lt22_23_2_1_mga9","22.23.2-1.mga9"]