[ Vendor · 3 CVEs ]
uhop
CVEs affecting uhop published in the last 30 days, plus any uhop CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114129 | 21 Oct 2026 | CVSS 6.2 | stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of servicestream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. From 2.0.0 until 3.7.0… | Fix |
| CVE-2026-104182 | 1 Oct 2026 | CVSS 6.2 | stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunkstream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, the JSONC parser… | Fix |
| CVE-2026-104183 | 1 Oct 2026 | CVSS 5.1 | stream-json has a prototype pollution issue: Assembler writes this.current[this.key] on plain objectsstream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, Assembler… | Fix |