THREATIST.IORead the docs Red Hat Developer Hub 1.10.6 release.
Released 2026-10-22 · Red Hat rating Important · View on Red Hat →
http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other…
source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values.
Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through.
proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips.
@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon.