https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T17:53:44.832503+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-22918 CVE-2021-22918 2026-10-06T17:53:44.834877+00:00

Affected: NodeJS Node

Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII. The pointer p is read and increased without checking whether it is beyond pe, with the latter holding a pointer to the end of the buffer. This can lead to information disclosures or crashes. This function can be triggered via uv_getaddrinfo().

 https://vulnerability.circl.lu/vuln/usn-5007-1 USN-5007-1 — libuv1 vulnerability 2026-10-06T17:53:44.834989+00:00

Affected: Ubuntu:20.04:LTS: libuv1

Eric Sesterhenn discovered that libuv incorrectly handled certain strings. An attacker could possibly use this issue to access sensitive information or cause a crash.