https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T09:17:18.942105+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cleanstart-2026-iq33916 CLEANSTART-2026-IQ33916 — compression is a Node 2026-10-01T09:17:18.976155+00:00

Affected: CleanStart: argo-workflows

Security vulnerability affects the argo-workflows package. compression is a Node.

 https://db.gcve.eu/vuln/fkie_cve-2026-87776 fkie_cve-2026-87776 2026-10-01T09:17:18.976226+00:00

compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destroyed, so each aborted compressed response leaks its native zlib memory. A remote unauthenticated attacker can repeatedly open requests and disconnect early, exhausting the available memory and crashing the server. All applications using compression are affected. The issue is fixed in compression 1.8.2, and users should upgrade to 1.8.2 or later.

 https://db.gcve.eu/vuln/msrc_cve-2026-87776 msrc_CVE-2026-87776 — compression vulnerable to Denial of Service via memory leak on premature response close 2026-10-01T09:17:18.976263+00:00 msrc_CVE-2026-87776 https://db.gcve.eu/vuln/rhsa-2026:69289 RHSA-2026:69289 — Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage 2026-10-01T09:17:18.976285+00:00

urllib3: urllib3: Denial of Service via decompression bomb bypass with Brotli support immutable-js: Immutable.js: Denial of Service due to mishandling of large index values in List operations sqlparse: sqlparse: Denial of Service via quadratic CPU consumption in comment grouping qs: qs: Denial of Service via improper validation in stringify function fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies compression: compression: Denial of Service via memory leak on premature response close

 https://db.gcve.eu/vuln/ubuntu-cve-2026-87776 UBUNTU-CVE-2026-87776 2026-10-01T09:17:18.976323+00:00

Affected: Ubuntu:16.04:LTS: node-compression, Ubuntu:18.04:LTS: node-compression, Ubuntu:20.04:LTS: node-compression, Ubuntu:22.04:LTS: node-compression, Ubuntu:24.04:LTS: node-compression, Ubuntu:26.04:LTS: node-compression

compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destroyed, so each aborted compressed response leaks its native zlib memory. A remote unauthenticated attacker can repeatedly open requests and disconnect early, exhausting the available memory and crashing the server. All applications using compression are affected. The issue is fixed in compression 1.8.2, and users should upgrade to 1.8.2 or later.