Vulnerabilities

TI-2026-40097 CVE-2026-55553 · GHSA-hq3h-g68c-hp78

urllib: Cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage

HIGH 72

urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0066 Published 2026-08-25 Fixed in 4.9.1, 2.44.1 CWE-200

TI-2026-29585 CVE-2026-40931 · GHSA-4c3q-x735-j3r5

HIGH 72

Compressing is a compressing and uncompressing lib for node.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00258 Published 2026-04-21 Fixed in 2.1.1, 1.10.5 CWE-59

TI-2026-20070 CVE-2026-24884 · GHSA-cc8f-xg8v-72m3

LOW 38

Compressing is a compressing and uncompressing lib for node.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00348 Published 2026-02-04 Fixed in 1.10.4, 2.0.1 CWE-59