Skip to content
OpenAdvisories

Package · npm

moleculer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-97705

    Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser

    Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36 and 0.15.2, Parser._write in src/transporters/tcp/parser.js used Buffer.prototype.readInt32BE to read a signed packet length, so a remote unauthenticated peer could supply a nega…

    moleculerjs moleculer moleculer npm