moleculer vulnerabilities

CVEs whose affected-version data names the moleculer package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-97705High· 7.5

3d ago

Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser

Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36 and 0.15.2, Parser._write in src/transporters/tcp/parser.js used Buffer.prototype.readInt32BE to read a signed packet length, so a remote unauthenticated pe…

▾ Twilightmoleculerjs · moleculerEPSS 0.35%via CVEORG