Ghostwire

CVE-2026-104150: AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity

MEDIUM CVSS 0.0 Exploit Available

Published: October 15, 2026 | Last Modified: October 15, 2026

Description

AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity

Ghostwire Analysis — What This Means Practically

Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References

github.com/adonisjs/http-server/security/advisories/GHSA-524c-h47v-m3h8
github.com/adonisjs/http-server/commit/86af38ca861528f673dcac6a4806197de038d1f7
github.com/adonisjs/http-server/commit/d8c749aa9f66d5d214bad1cad727264aef4be727
github.com/adonisjs/http-server/releases/tag/v8.2.2
github.com/adonisjs/http-server/releases/tag/v9.1.1
github.com/advisories/GHSA-524c-h47v-m3h8
www.tenable.com/cve/CVE-2026-104150
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-104150