[ Vendor · 1 CVEs ]
nodeca
CVEs affecting nodeca published in the last 30 days, plus any nodeca CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-104861 | 2 Oct 2026 | CVSS 7.5 | probe-image-size: Quadratic-time Denial of Service in the SVG Parserprobe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parse_sync/svg.js and lib/parse_stream/svg.js use the… | Fix |