CWE-248

Everything Patch Observer has reported about CWE-248: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Node.js Services Face High-Severity DoS Risk from Unpatched adm-zip Versions Before 0.6.1

CVE-2026-114102 allows attackers to crash Node.js processes using corrupted ZIP data. Versions before 0.6.1 are vulnerable and require immediate review.

Oct 21, 2026

Vulnerabilities

Parse Server Crash Vulnerability Exposes Orgs to Denial of Service Attacks

Unhandled email errors crash Parse Server processes, allowing clients to force shutdowns until a fix is applied.

Oct 16, 2026