CERT24rhsa-2026:68747 – multiple vulnerabilities in Node.js librariesLoading data…
CERT24Threat Observatory
Period

rhsa-2026:68747 – multiple vulnerabilities in Node.js libraries

The source describes 11 related vulnerabilities in the form-data, tmp, js-yaml, fast-uri, and qs libraries. Impacts include header or multipart-part injection, file creation outside the intended temporary directory, denial of service, SSRF, host and security-policy confusion, and information disclosure.

← Back to intelligence

rhsa-2026:68747 – multiple vulnerabilities in Node.js libraries

The source describes 11 related vulnerabilities in the form-data, tmp, js-yaml, fast-uri, and qs libraries. Impacts include header or multipart-part injection, file creation outside the intended temporary directory, denial of service, SSRF, host and security-policy confusion, and information disclosure.