Skip to content
OpenAdvisories
Medium WID-SEC-2026-2488 13 CVEs

IBM App Connect Enterprise: Mehrere Schwachstellen

Published Jul 22, 2026 · Updated Oct 4, 2026 · Revision 5 · de-DE

Vendor: IBM Vendor: Oracle Vendor: Red Hat Product: App Connect Enterprise Product: Enterprise Linux Product: Linux Product: QRadar SIEM Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 13

  • High 7.5
    CVE-2026-12143

    form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)

    form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage …

    form-data form-data langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Azure Linux Wolfi npm
  • High 7.5
    CVE-2026-12947

    IBM App Connect Enterprise is vulnerable to Confidentiality disclosure on Discovery Connector nodes

    IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive information in log files that could be read by a local user.

    IBM App Connect Enterprise
  • High 7.5
    CVE-2026-5079

    multer vulnerable to Denial of Service via deeply nested field names

    Impact: multer versions 1.0.0 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service via deeply nested field names in multipart form data. The append-field dependency parses bracket notation in field names with no limit on nesting depth, allowi…

    multer multer multer npm
  • High 7.1
    CVE-2026-54290

    Hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard

    Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, with credentials: true and no explicit origin (the default wildcard), the CORS Middleware reflects the request's Origin and sends Access-Control-Allow-Cred…

    honojs hono hono npm
  • Medium 6.9
    CVE-2026-53655

    node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)

    node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (node-tar) applies a PAX extended header's size= record (and other PAX overrides) to the next header entry of any type, including intermediary metadata headers such as a GNU long-name (L) or lo…

    isaacs node-tar katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm
  • Medium 6.5
    CVE-2026-54288

    Hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length`

    Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, the Body Limit Middleware trusts the request's Content-Length header to decide whether a body is within the limit. On AWS Lambda (API Gateway v1/v2, ALB, V…

    honojs hono hono npm
  • Medium 5.9
    CVE-2026-54286

    Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)

    Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on Windows hosts, an encoded backslash (%5C) in the request path decodes to \, which the Windows path resolver treats as a separator. serve-static then res…

    honojs hono hono npm
  • Medium 5.4
    CVE-2026-53606

    sanitize-html has an incomplete URI scheme validation that allows javascript: URIs through action, formaction, data, poster, and background attributes

    ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Versions of sanitize-html prior to 2.17.5 use `allowedSchemesAppliedToAttributes` (default: `['href', 'src', 'cite']`) to g…

    apostrophecms sanitize-html jupyter-base-notebook sanitize-html Wolfi npm
  • Medium 5.3
    CVE-2026-42338

    ip-address: XSS in Address6 HTML-emitting methods

    ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-controlled content before embedding it in the HTML strings they return, and AddressEr…

    beaugunderson ip-address langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Wolfi npm
  • Medium 5.3
    CVE-2026-5038

    multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads

    Impact: multer versions 2.0.0-alpha.1 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service when using diskStorage. Aborted or malformed multipart uploads leave orphaned partial files on disk because the Readable.pipe() call does not propagate…

    multer multer multer npm
  • Medium 5.3
    CVE-2026-54269

    protobufjs: Schema-derived names can shadow runtime-significant properties

    protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 8.6.0 and 7.6.3, protobufjs accepted certain schema-derived names that could collide with properties used by protobufjs runtime helpers. The known affected names are fields name…

    protobufjs protobuf.js langfuse-3-worker langfuse-3 Wolfi npm
  • Medium 5.3
    CVE-2026-54287

    Hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice

    Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on AWS Lambda, the ALB single-header response and the VPC Lattice v2 response join multiple Set-Cookie headers into one comma-separated value. Because comm…

    honojs hono hono npm
  • Medium 4.8
    CVE-2026-54289

    Hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest

    Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on AWS Lambda@Edge, CloudFront delivers a request header that appears more than once as several separate entries. The adapter writes each value with Header…

    honojs hono hono npm

Revision history

  1. #5

    Neue Updates von IBM aufgenommen

  2. #4

    Neue Updates von Red Hat aufgenommen

  3. #3

    Neue Updates von Oracle Linux aufgenommen

  4. #2

    Referenz(en) aufgenommen: EUVD-2026-51146

  5. #1

    Initiale Fassung

References