CPE

Cpe:2.3:a:devalue_project:devalue:::*:::node.js::

1 brief RSS

Information Disclosure via Improper Buffer Serialization in devalue

The devalue library improperly serializes Node.js Buffer objects, exposing up to 64 KB of process-wide memory to end users in SSR environments via CVE-2026-92708.

devalue information-disclosure supply-chain npm ssr

1c 1w ago

Cpe:2.3:a:devalue_project:devalue:*:*:*:*:*:node.js:*:*

Information Disclosure via Improper Buffer Serialization in devalue

Cpe:2.3:a:devalue_project:devalue:::*:::node.js::