NO
Product
Network Observability (NETOBSERV) 1.11.0
20
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 9Medium 5Low 1
Watch
Add Network Observability (NETOBSERV) 1.11.0 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24842 | 8.2 | Jan 28 | node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal Affected: All versions, or not specified |
| CVE-2026-42039 | 7.5 | Apr 24 | Axios: unbounded recursion in toFormData causes DoS via deeply nested request data Affected: All versions, or not specified |
| CVE-2026-40895 | 7.5 | Apr 21 | follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets Affected: All versions, or not specified |
| CVE-2026-32280 | 7.5 | Apr 8 | Unexpected work during chain building in crypto/x509 Affected: All versions, or not specified |
| CVE-2026-25679 | 7.5 | Mar 6 | Incorrect parsing of IPv6 host literals in net/url Affected: All versions, or not specified |
| CVE-2026-25639 | 7.5 | Feb 9 | Axios affected by Denial of Service via __proto__ Key in mergeConfig Affected: All versions, or not specified |
| CVE-2025-61726 | 7.5 | Jan 28 | Memory exhaustion in query parameter parsing in net/url Affected: All versions, or not specified |
| CVE-2026-21441 | 7.5 | Jan 7 | urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) Affected: All versions, or not specified |
| CVE-2026-42033 | 7.4 | Apr 24 | Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking Affected: All versions, or not specified |
Showing 9