uhop

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

uhop records in CISA KEV

No uhop vulnerabilities are listed in CISA KEV.

Records

8 records

TI-2026-78913 CVE-2026-114129 · GHSA-jj87-hc4r-jwfw

Quadratic CPU use in stream-json FlexAssembler allows denial of service

MEDIUM 61

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00254 Published 2026-10-21 Partial fix · 3.7.0 CWE-407

TI-2026-65777 CVE-2026-104182 · GHSA-hqr4-qq8f-hg3x

stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk

MEDIUM 61

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00202 Published 2026-10-01 Partial fix · 3.6.0 CWE-407

TI-2026-50052 CVE-2026-71430 · GHSA-8hcv-x26h-mcgp

Reachable assertion in uhop node-re2

MEDIUM 61

node-re2 provides RE2 regular expression bindings for Node.js.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00157 Published 2026-08-06 Fixed in 1.25.1 CWE-617

TI-2026-50051 CVE-2026-71429 · GHSA-528h-pc64-c93x

stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small…

MEDIUM 61

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0016 Published 2026-09-03 Partial fix · 3.5.0 CWE-407

TI-2026-48273 CVE-2026-68499 · GHSA-6hxr-mr5r-9836

Infinite loop in uhop node-re2

MEDIUM 61

re2 provides Node.js bindings for Google's RE2 regular expression engine.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00184 Published 2026-07-30 Fixed in 1.25.2 CWE-835

TI-2026-47734 CVE-2026-67550 · GHSA-ff84-5f28-78qj

Out-of-bounds read in uhop node-re2

MEDIUM 59

re2 provides Node.js bindings for Google's RE2 regular expression engine.

CVSS 3.1MEDIUM 5.7 Local No auth No interaction EPSS 0.00161 Published 2026-07-30 Partial fix · 1.25.2 CWE-125

TI-2026-65778 CVE-2026-104183 · GHSA-mjw6-4jj6-33hc

stream-json: Prototype pollution: Assembler writes this.current[this.key] on plain objects

MEDIUM 56

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00195 Published 2026-10-01 Partial fix · 3.6.0 CWE-1321

TI-2026-50104 CVE-2026-71498 · GHSA-j4r3-hg7j-8chg

Out-of-bounds read in uhop node-re2

MEDIUM 56

node-re2 provides RE2 regular expression bindings for Node.js.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00174 Published 2026-08-06 Fixed in 1.26.1 CWE-125

Open these records in search →

Critical	0
High	0
Medium	8
Low	0
No CVSS	0