{"schema_version":"1.0","report_date":"2026-10-22","generated_at":"2026-10-22T15:11:23.434409+09:00","quality":"OK","source_count":13,"observed_total":5541,"catalog_total":250,"filtered_total":1,"page":1,"limit":20,"has_next":false,"items":[{"cves":[],"epss":null,"id":"CVE-2026-114102","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"HIGH","source":"NVD","sources":["NVD"],"summary":"adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash the Node.js process via a malformed ZIP file, because inflateAsync in methods/inflater.js lacks a zlib stream error listener. Attackers can supply a ZIP with corrupted DEFLATE data processe","technologies":[{"group":"runtime","id":"nodejs","label":"Node.js"}],"title":"adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash the Node.js process via a malformed ZIP file","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114102"}],"caution":"Only the verified public snapshot's current item set is provided. This endpoint is not an exhaustive CVE archive."}