CVSS 8.7

Everything Patch Herald has reported about CVSS 8.7: 2 stories, newest first. Part of our Vulnerabilities coverage.

CVSS 8.7 Flaw in Picomatch Through 4.0.7 Blocks Node.js Event Loops

A high-severity regular expression denial of service vulnerability in the Picomatch library allows attackers to freeze Node.js applications using specific glob patterns.

Oct 19, 2026

Vulnerabilities

Fleet Before 4.89.0 Has High-Severity Crash Flaw CVE-2026-111923

Unauthenticated attackers can crash Fleet servers by sending small crafted payloads to enrollment endpoints, risking service disruption.

Oct 17, 2026