GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
2917
Downloads
3.6M
Verified
2917
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
2 rules matched. Showing 2 loaded rules.
Publish rule
CVE-2026-47139: Bypass Node Internal Modules Filtercve-2026-47139-bypass-node-internal-modules-filter

Filtering Node.js builtin modules by ignoring 'internal/' does not sufficiently block all internal modules. Undocumented underscored modules like `_http_client` and `_http_server` bypass this filter and expose low-level network primitives. To securely restrict builtins, ensure underscored modules are also excluded (e.g., `!s.startsWith('_')`).

JSNode.jsCVE-2026-47139GHSA-R9PM-GXMW-WV6PCWE-184
by Provallyupdated 2026-06-12Apache-2.0
5130 direct513 via packs
77
CVE-2026-47139: Node Builtin Modules Underscore Bypasscve-2026-47139-node-builtin-modules-underscore-bypass

Filtering Node.js builtin modules without excluding undocumented underscored modules (e.g., `_http_client`, `_http_server`) can allow sandbox bypasses. Underscored modules expose underlying network or system primitives directly and often circumvent restrictions placed on public modules. Ensure that elements starting with `_` are also filtered out.

JSCVE-2026-47139CWE-693CWE-913
by Provallyupdated 2026-06-23Apache-2.0
8600 direct860 via packs
73
All matching rules loaded.