Cloudanix VulnDB

GHSA-378v-28hj-76wf

Medium · 5.3

CVSS

5.3

EPSS

—

Published

Feb 20, 2026

CISA due date

—

The record

bn.js affected by an infinite loop

Affected packages

Ecosystem Package Introduced Fixed
npm bn.js 0 4.12.3
npm bn.js 5.0.0 5.2.3
Chainguard kibana-8.17 0 8.17.10-r10
Chainguard kibana-8.17-iamguarded 0 8.17.10-r10
Chainguard kibana-8.18 0 8.18.8-r11
Chainguard kibana-8.18-bitnami 0 8.18.8-r11
Chainguard kibana-8.18-iamguarded 0 8.18.8-r11
Chainguard kibana-8.19 0 8.19.11-r1
Chainguard kibana-8.19-bitnami 0 8.19.11-r1
Chainguard kibana-8.19-iamguarded 0 8.19.11-r1
Chainguard kibana-9.0 0 9.0.8-r12
Chainguard kibana-9.0-bitnami 0 9.0.8-r12
Chainguard kibana-9.0-iamguarded 0 9.0.8-r12
Chainguard kibana-9.1 0 9.1.10-r6
Chainguard kibana-9.1-iamguarded 0 9.1.10-r6
Chainguard kibana-9.2 0 9.2.5-r5
Chainguard kibana-9.2-iamguarded 0 9.2.5-r5
Chainguard kibana-9.3 0 9.3.0-r2
Chainguard kibana-9.3-iamguarded 0 9.3.0-r2
Chainguard librechat 0 0.8.2-r6
Chainguard opensearch-dashboards-2 0 2.19.4-r13
Chainguard opensearch-dashboards-2-fips 0 2.19.4-r11
Chainguard opensearch-dashboards-3 0 3.5.0-r5
Chainguard opensearch-dashboards-3-fips 0 3.5.0-r3
Chainguard sqlpad 0 7.5.7-r10
Wolfi opensearch-dashboards-2 0 2.19.4-r13
Wolfi opensearch-dashboards-3 0 3.5.0-r5
Wolfi sqlpad 0 7.5.7-r10

Related vulnerabilities