p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de nitro

Vulnerabilidades publicadas para nitro en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 2

  1. CVE-2026-44372

    Media · CVSS 5.3EPSS 0,28%Corrección disponible

    Nitro: Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules

    Nitro is a next generation server toolkit. Prior to 3.0.260429-beta, an attacker could turn a redirect route rule using wildcards rewrite into a cross-host redirect by sliding an extra slash in after the rule prefix. This vulnerability is fixed in 3.0.260429-beta.

    nitroNode.js
    • Actualiza a 3.0.260429-beta
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  2. CVE-2026-44373

    Media · CVSS 5.3EPSS 0,45%Corrección disponible

    Nitro: Proxy scope bypass via percent-encoded path traversal in `routeRules`

    Nitro is a next generation server toolkit. Prior to 3.0.260429-beta, an attacker could bypass a proxy route rule by sending percent-encoded path traversal (..%2f) in the URL, causing Nitro to forward a request that the upstream resolved outside the configured scope. This vulnerability is fixed in 3.0.260429-beta.

    nitroNode.js
    • Actualiza a 3.0.260429-beta
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →