Node.js
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on al…
For Developers
A CVE Feed for the Stacks You Build On
Pick your languages, frameworks and servers. Get the flaws that matter to them, not the whole firehose.
Free · No account · One-click unsubscribe
Why It Works
/ 01
No Firehose
Thousands of CVEs come out each month. You get the few in your stack, exploited first.
/ 02
Hear It First
Know about the flaw before your client reads about it.
/ 03
Every Stack in One Email
Languages, frameworks, servers and databases together, worst first.
The past month
What You'd Have Heard About
PHP
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request.
PHP
PHP has various global state that temporarily points into request memory.
React
React is a JavaScript library for building user interfaces.
Node.js
The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VOS a…
Bobble Solutions
Infrastructure for Software Teams ›
Need Someone on the Servers?
Bobble Solutions runs Linux infrastructure for software teams: patched, backed up and watched.
Questions
FAQ
Does it read my package.json?
No. You pick stacks, not packages. For npm or pip dependencies, use your package manager's audit as well.
Where does the data come from?
NVD, CISA's exploited list and vendor advisories, gathered by Bobble Pulse.
How is it scored?
By CVSS, with anything being exploited moved to the top. Try the score calculator to see how a score is built.