Node-convict (Mozilla) - vulnerabilities (CVEs)

1 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-06. Vendor: Mozilla.

CVEs of Node-convict

• CVE-2026-106550 - CVSS 7.5 (high), 2026-10-06: Mozilla's Node-convict (version 6.2.2 and later) is vulnerable to a Denial of Service vulnerability caused by incomplete prototype‑pollution protections in…