Search vulnerabilities

Expected end of text, found ':' (at char 26), (line:1, col:27)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,824

CVE-2026-44902

opentelemetry-js: Prometheus exporter process crash via malformed HTTP request

opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 0.217.0, a single malformed HTTP request crashes any Node.js process running the OpenTelemetry JS Prometheus exporter. The metrics endpoint (default 0.0.0.0:9464) has no error handling around URL parsing, so a request with an invalid URI causes an uncaught TypeError that terminates the process. This vulnerability is fixed in 0.217.0.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Opentelemetry
Products
Auto-instrumentations-node Exporter-prometheus Opentelemetry-js and 4 more
CVE-2023-49720

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-49605

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-49601

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-49592

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-49116

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-48370

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-48337

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-47214

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-47208

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-47206

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-47205

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-47176

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-46710

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-46709

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-46703

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-46702

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-46684

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-46101

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-45848

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—