TI-2026-32193 CVE-2026-44214 · GHSA-m9g3-3g99-mhpx
eventsource-encoder: SSE event injection via unsanitized event and id fields
Priority HIGH 65
eventsource-encoder encodes events as well-formed EventSource/Server Sent Event (SSE) messages.
rexxars
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
rexxars records in CISA KEVNo rexxars vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2026-32196 CVE-2026-44217 · GHSA-84hm-wfh8-c5pg
sse-channel: SSE Injection via unsanitized event fields
Priority LOW 36
sse-channel is an SSE-implementation which can be used to any node.js http request/response stream.