Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
srvx is a universal server based on web standards. Prior to version 0.11.13, a pathname parsing discrepancy in srvx's `FastURL` allows middleware bypass on the Node.js adapter when a raw HTTP request uses an absolute URI with a non-standard scheme (e.g. `file://`). Starting in version 0.11.13, the `FastURL` constructor now deopts to native `URL` for any string not starting with `/`, ensuring consistent pathname resolution.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-33732 srvx is a universal server based on web standards. Prior to version 0.11.13, a pathname parsing discrepancy in srvx's `FastURL` allows middleware bypass on the Node.j… https://www.cve.org/CVERecord?id=CVE-2026-33732
Post summary
The CVE-2026-33732 disclosure reveals a pathname parsing flaw in srvx’s FastURL that permits middleware bypass before version 0.11.13; no PoC, exploit, patch, or exploitation evidence is provided.
🚨*CVE* CVE-2026-33732 srvx is a universal server based on web standards. Prior to version 0.11.13, a pathname parsing discrepancy in srvx's `FastURL` allows middleware bypass on the Node.j… https://www.cve.org/CVERecord?id=CVE-2026-33732 ----- Traducción: CVE-2026-33732 srv… http://infoflow.cloud`
Post summary
The tweet announces a pathname parsing flaw in srvx's FastURL that permits middleware bypass, but offers no PoC, exploit code, or patch information.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-33732 - srvx is vulnerable to middleware bypass via absolute URI in request line Intel Report: https://ift.tt/oQpjiJH
Post summary
The tweet alerts about CVE-2026-33732, describing a middleware bypass vulnerability in srvx due to absolute URI handling.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | h3 | srvx | - | node.js | - |