Files
PoC-in-GitHub/2026/CVE-2026-93687.json

108 lines
4.0 KiB
JSON

[
{
"id": 1386203613,
"name": "braces-fork",
"full_name": "scastillo-jp\/braces-fork",
"owner": {
"login": "scastillo-jp",
"id": 12575632,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12575632?v=4",
"html_url": "https:\/\/github.com\/scastillo-jp",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/scastillo-jp\/braces-fork",
"description": "Temporary fork of braces with a minimal security patch for CVE-2026-93687, created only to validate dependency override behavior and Fortify\/FoD detection before moving the fix to an official Bentobox-owned source.",
"fork": false,
"created_at": "2026-09-24T18:59:25Z",
"updated_at": "2026-09-29T21:59:42Z",
"pushed_at": "2026-09-24T22:15:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1412722632,
"name": "braces-security-backport",
"full_name": "BernydotJar\/braces-security-backport",
"owner": {
"login": "BernydotJar",
"id": 16258017,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16258017?v=4",
"html_url": "https:\/\/github.com\/BernydotJar",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BernydotJar\/braces-security-backport",
"description": "MIT-licensed braces 3.0.3 with reviewed CVE-2026-93687 depth backport; pinned consumption only",
"fork": false,
"created_at": "2026-10-10T03:48:28Z",
"updated_at": "2026-10-10T03:54:00Z",
"pushed_at": "2026-10-10T03:53:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430430508,
"name": "cve-2026-93687-braces",
"full_name": "canmenzo\/cve-2026-93687-braces",
"owner": {
"login": "canmenzo",
"id": 21162557,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/21162557?v=4",
"html_url": "https:\/\/github.com\/canmenzo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/canmenzo\/cve-2026-93687-braces",
"description": "Independent, measured check of CVE-2026-93687 (braces stack exhaustion): reproducible cold-process crash under the default 10000 maxLength, and what actually mitigates it.",
"fork": false,
"created_at": "2026-10-23T00:57:42Z",
"updated_at": "2026-10-23T01:36:33Z",
"pushed_at": "2026-10-23T01:36:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"braces",
"cve",
"denial-of-service",
"nodejs",
"security",
"vulnerability-research"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]