Vendor
Denial of Service Vulnerability in Node.js
1 TTPA vulnerability in Node.js allows a remote, unauthenticated attacker to trigger a Denial of Service condition, impacting the availability of applications running on the affected environment.
Path Traversal in webpack-dev-middleware (CVE-2026-76844)
1 TTP 2 CVEsAn incomplete fix for CVE-2024-29180 in webpack-dev-middleware allows path traversal via crafted URL requests when publicPath lacks a trailing slash, potentially leading to arbitrary local file read.
Electron Sandboxed Iframe Popup Restriction Bypass
2 TTPs 1 CVEA vulnerability in Electron, identified as CVE-2026-70608, allows sandboxed iframes to bypass 'allow-popups' restrictions and open new windows via the OpenURL navigation path.
Information Disclosure and Denial of Service in Undici Cache Interceptor
1 CVEThe undici library is susceptible to cache poisoning leading to information disclosure and application crashes due to improper handling of malformed Cache-Control directives in the cache interceptor.
Suspicious Execution with NodeJS
3 rules 1 TTPThis rule detects suspicious Node.js execution patterns on Windows systems, including user-writable runtimes, preload arguments, and inline eval, decode, or child-process usage, indicating potential malicious activity.