https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:40:32.528191+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-25050 cnvd-2018-25050 2026-10-03T22:40:32.594247+00:00 cnvd-2018-25050 https://cve.radiocsirt.org/vuln/euvd-2026-179527 EUVD-2026-179527 2026-10-03T22:40:32.594283+00:00 EUVD-2026-179527 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16025 fkie_cve-2017-16025 2026-10-03T22:40:32.594299+00:00

Nes is a websocket extension library for hapi. Hapi is a webserver framework. Versions below and including 6.4.0 have a denial of service vulnerability via an invalid Cookie header. This is only present when websocket authentication is set to `cookie`. Submitting an invalid cookie on the websocket upgrade request will cause the node process to error out.

 https://cve.radiocsirt.org/vuln/ghsa-3pwh-5mmc-mwrx GHSA-3pwh-5mmc-mwrx — Denial of Service in nes 2026-10-03T22:40:32.594342+00:00

Affected: npm: nes

Affected versions of `nes` are vulnerable to denial of service when given an invalid `cookie` header, and websocket authentication is set to `cookie`. Submitting an invalid cookie on the websocket upgrade request will cause the node process to throw and exit.

## Recommendation

Update to version 6.4.1 or later.

 https://cve.radiocsirt.org/vuln/gsd-2017-16025 gsd-2017-16025 2026-10-03T22:40:32.594369+00:00 gsd-2017-16025