TopVuln

High-risk vulnerability digests

CVE-2026-22036

  • MEDIUM

Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions

Details

CVSS v3
5.9
NVD published
2026-01-14 19:16:47
EPSS
<0.1% probability · 5.4th percentile — 2026-03-30
Affected versions
cpe:2.3:a:nodejs:undici:*:*:*:*:*:node.js:*:* cpe:2.3:a:nodejs:undici:*:*:*:*:*:node.js:*:*
Summary
Undici is an HTTP/1.1 client for Node.js. Prior to 7.18.0 and 6.23.0, the number of links in the decompression chain is unbounded and the default maxHeaderSize allows a malicious server to insert thousands compression steps leading to high CPU usage and excessive memory allocation. This vulnerability is fixed in 7.18.0 and 6.23.0.
Remediation
Not available in our cache.
Exploit info
Not available in our cache.

View on NVD

TopVuln sends digest emails with high-risk CVE picks across multiple authoritative sources—curated with EPSS and AI. Choose daily per-stream emails and optional weekly or monthly roundups.

Subscribe — free email digest or paid plan

Information is aggregated from multiple authoritative sources for convenience; verify with NVD and vendors before operational decisions.