NULL Pointer Dereference The advisory has been revoked - it doesn't affect any version of package node-problem-detector-0.8  (opens in a new tab)


Threat Intelligence

EPSS
0.63% (51st percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-WOLFILATEST-NODEPROBLEMDETECTOR08-16701231
  • published15 May 2026
  • disclosed7 May 2026

Introduced: 7 May 2026

CVE-2026-39836  (opens in a new tab)
CWE-476  (opens in a new tab)

Amendment

The Wolfi security team deemed this advisory irrelevant for Wolfi:latest.

NVD Description

Note: Versions mentioned in the description apply only to the upstream node-problem-detector-0.8 package and not the node-problem-detector-0.8 package as distributed by Wolfi.

The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).