VYPR

moleculer

by Moleculerjs

CVEs (1)

  • CVE-2026-97705HigNov 4, 2026
    risk 0.42cvss 7.5epss —

    Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36 and 0.15.2, Parser._write in src/transporters/tcp/parser.js used Buffer.prototype.readInt32BE to read a signed packet length, so a remote unauthenticated peer could supply a negative value that…