NH
Product
Node HealthCheck Operator
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 0Low 1
Watch
Add Node HealthCheck Operator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-29063 | 9.8 | Mar 6 | Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable Affected: All versions, or not specified |
| CVE-2026-33810 | 8.2 | Apr 8 | Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 Affected: All versions, or not specified |
| CVE-2026-48779 | 7.5 | Jun 16 | ws: Memory exhaustion DoS from tiny fragments and data chunks Affected: All versions, or not specified |
| CVE-2026-12143 | 7.5 | Jun 12 | form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection) Affected: All versions, or not specified |
| CVE-2026-45736 | 7.5 | May 15 | ws: Uninitialized memory disclosure Affected: All versions, or not specified |
| CVE-2026-33814 | 7.5 | May 7 | Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net Affected: All versions, or not specified |
| CVE-2025-69873 | 2.9 | Feb 11 | ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled Affected: All versions, or not specified |
Showing 7