NO
Product
Network Observability Operator
8
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 1Low 0
Watch
Add Network Observability Operator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-62718 | 9.9 | Apr 9 | Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF Affected: All versions, or not specified |
| CVE-2026-42044 | 9.1 | Apr 24 | Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver` Affected: All versions, or not specified |
| CVE-2026-13676 | 7.5 | Jun 29 | fast-uri vulnerable to host confusion via failed IDN canonicalization Affected: All versions, or not specified |
| CVE-2026-12143 | 7.5 | Jun 12 | form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection) Affected: All versions, or not specified |
| CVE-2026-33814 | 7.5 | May 7 | Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net Affected: All versions, or not specified |
| CVE-2026-6322 | 7.5 | May 5 | fast-uri vulnerable to host confusion via percent-encoded authority delimiters Affected: All versions, or not specified |
| CVE-2026-42039 | 7.5 | Apr 24 | Axios: unbounded recursion in toFormData causes DoS via deeply nested request data Affected: All versions, or not specified |
| CVE-2026-23950 | 5.9 | Jan 20 | node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS Affected: All versions, or not specified |
Showing 8