Uhop

8 CVEs in 2 Uhop products, including Node-Re2, Stream-Json. Newest: CVE-2026-114129 (2026-10-21). Severity, EPSS and public exploits for each.

Uhop products with known CVEs

ProductCVEs
Node-Re24
Stream-Json4
Uhop CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-114129Medium6.22026-10-21stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. From 2.0.0 until 3.7.0, FlexAssembler compil…
CVE-2026-104183Medium5.12026-10-01stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, Assembler materializes objec…
CVE-2026-104182Medium6.22026-10-01stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, the JSONC parser at stream-j…
CVE-2026-71429Medium6.22026-09-03stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignor…
CVE-2026-71498Medium5.12026-08-06node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.26.1, passing a Buffer whose final bytes form a truncated (incomplete) multi-…
CVE-2026-71430Medium6.22026-08-06node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.25.1, the WrappedRE2::Replace function built its replacement result and passe…
CVE-2026-68499Medium6.22026-07-30re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2's String.prototype.match implementation with a global RE2 patter…
CVE-2026-67550Medium5.72026-07-30re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2 validates lastIndex against the UTF-8 byte length of a subject b…