Known Vulnerabilities for Http-signature by Joyent
Listed below are 1 of the newest known vulnerabilities associated with "Http-signature" by "Joyent".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-92595 json | Nodemailer (npm package `nodemailer`) versions 9.1.0 and earlier do not honor the `disableFileAccess` and `disableUrlAccess` ... | Not Provided | 2026-09-16 | 2026-09-19 |
| CVE-2026-90679 json | Forgejo 13.0.0 through 16.0.4, when "[federation] ENABLED = true" is set, has a spoofing issue that affects identity integrit... | Not Provided | 2026-09-13 | 2026-09-15 |
| CVE-2026-86080 json | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a web... | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-82180 json | In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, Ce... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-71277 json | rust-iot-platform's AuthToken request-guard implementation (api/src/main.rs) only checks whether the Authorization HTTP heade... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-66908 json | Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from ... | Not Provided | 2026-08-24 | 2026-08-25 |
| CVE-2026-63405 json | AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the Pusher-compa... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-63135 json | YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer h... | Not Provided | 2026-08-21 | 2026-08-26 |
| CVE-2026-61520 json | Simple Machines Forum 2.1 prior to commit 4bf35cf and 3.0 prior to commit b4d23df contains a server-side request forgery vuln... | Not Provided | 2026-07-14 | 2026-07-15 |
| CVE-2026-58593 json | NodeBB does not bind the claimed author of an inbound ActivityPub object to the authenticated remote actor. The inbound middl... | Not Provided | 2026-07-01 | 2026-07-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Joyent | Http-signature | 1.2.0 | |||
| Application | Joyent | Http-signature | 1.1.1 | |||
| Application | Joyent | Http-signature | 1.1.0 | |||
| Application | Joyent | Http-signature | 1.0.2 | |||
| Application | Joyent | Http-signature | 1.0.1 | |||
| Application | Joyent | Http-signature | 1.0.0 | |||
| Application | Joyent | Http-signature | 0.9.9 | |||
| Application | Joyent | Http-signature | 0.9.8 | |||
| Application | Joyent | Http-signature | 0.9.7 | |||
| Application | Joyent | Http-signature | 0.9.6 | |||
| Application | Joyent | Http-signature | 0.9.5 | |||
| Application | Joyent | Http-signature | 0.9.4 | |||
| Application | Joyent | Http-signature | 0.9.3 | |||
| Application | Joyent | Http-signature | 0.9.2 | |||
| Application | Joyent | Http-signature | 0.9.11 | |||
| Application | Joyent | Http-signature | 0.9.10 | |||
| Application | Joyent | Http-signature | 0.9.0 | |||
| Application | Joyent | Http-signature | 0.11.0 | |||
| Application | Joyent | Http-signature | 0.10.1 | |||
| Application | Joyent | Http-signature | 0.10.0 |