Vulnerabilities

TI-2026-78913 CVE-2026-114129 · GHSA-jj87-hc4r-jwfw

Quadratic CPU use in stream-json FlexAssembler allows denial of service

MEDIUM 61

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00254 Published 2026-10-21 Partial fix · 3.7.0 CWE-407

TI-2026-65778 CVE-2026-104183 · GHSA-mjw6-4jj6-33hc

MEDIUM 56

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00195 Published 2026-10-01 Partial fix · 3.6.0 CWE-1321

TI-2026-65777 CVE-2026-104182 · GHSA-hqr4-qq8f-hg3x

MEDIUM 61

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00202 Published 2026-10-01 Partial fix · 3.6.0 CWE-407

TI-2026-50051 CVE-2026-71429 · GHSA-528h-pc64-c93x

MEDIUM 61

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0016 Published 2026-09-03 Partial fix · 3.5.0 CWE-407

TI-2026-50104 CVE-2026-71498 · GHSA-j4r3-hg7j-8chg

MEDIUM 56

node-re2 provides RE2 regular expression bindings for Node.js.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00174 Published 2026-08-06 Fixed in 1.26.1 CWE-125

TI-2026-50052 CVE-2026-71430 · GHSA-8hcv-x26h-mcgp

MEDIUM 61

node-re2 provides RE2 regular expression bindings for Node.js.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00157 Published 2026-08-06 Fixed in 1.25.1 CWE-617

TI-2026-48273 CVE-2026-68499 · GHSA-6hxr-mr5r-9836

MEDIUM 61

re2 provides Node.js bindings for Google's RE2 regular expression engine.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00184 Published 2026-07-30 Fixed in 1.25.2 CWE-835

TI-2026-47734 CVE-2026-67550 · GHSA-ff84-5f28-78qj

MEDIUM 59

re2 provides Node.js bindings for Google's RE2 regular expression engine.

CVSS 3.1MEDIUM 5.7 Local No auth No interaction EPSS 0.00161 Published 2026-07-30 Partial fix · 1.25.2 CWE-125