Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
H3 is a minimal H(TTP) framework. In versions prior to 1.15.6 and between 2.0.0 through 2.0.1-rc.14, createEventStream is vulnerable to Server-Sent Events (SSE) injection due to missing newline sanitization in formatEventStreamMessage() and formatEventStreamComment(). An attacker who controls any part of an SSE message field (id, event, data, or comment) can inject arbitrary SSE events to connected clients. This issue is fixed in versions 1.15.6 and 2.0.1-rc.15.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-20 | 2 | General2 |
| 2026-03-22 | 1 | Disclosure1 |
beautiful women named CVE-2026-33128 messaging me
Post summary
The text merely references a CVE number in an unrelated, nonsensical phrase, providing no actionable or technical information.
CVE-2026-33128 H3 is a minimal H(TTP) framework. In versions prior to 1.15.6 and between 2.0.0 through 2.0.1-rc.14, createEventStream is vulnerable to Server-Sent Events (SSE) injec… https://www.cve.org/CVERecord?id=CVE-2026-33128
Post summary
The message discloses technical details of CVE‑2026‑33128, outlining affected versions and the Server‑Sent Events injection vulnerability, but does not mention exploitation, patches, or a PoC.
CVE-2026-33128 Server-Sent Events Injection Vulnerability in H3 HTTP Fra... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33128 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
A short tweet references CVE-2026-33128 and links to a Vulmon details page, but offers no additional technical, exploitation, or mitigation information.
15 of 15 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | h3 | h3 | - | node.js | - |
| App | h3 | h3 | 2.0.0 | node.js | - |
| App | h3 | h3 | 2.0.1 | node.js | - |
| App | h3 | h3 | 2.0.1 | node.js | - |
| App | h3 | h3 | 2.0.1 | node.js | - |
| App | h3 | h3 | 2.0.1 | node.js | - |
| App | h3 | h3 | 2.0.1 | node.js | - |
| App | h3 | h3 | 2.0.1 | node.js | - |
| App | h3 | h3 | 2.0.1 | node.js | - |
| App | h3 | h3 | 2.0.1 | node.js | - |
| App | h3 | h3 | 2.0.1 | node.js | - |
| App | h3 | h3 | 2.0.1 | node.js | - |
| App | h3 | h3 | 2.0.1 | node.js | - |
| App | h3 | h3 | 2.0.1 | node.js | - |
| App | h3 | h3 | 2.0.1 | node.js | - |