Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
fedoraFedoraFEDORA:57226209E89E
HistoryFeb 28, 2024 - 1:41 a.m.

[SECURITY] Fedora 38 Update: yarnpkg-1.22.21-2.fc38

2024-02-2801:41:33
lists.fedoraproject.org
5
fedora 38
update
yarnpkg
1.22.21-2.fc38
fast
reliable
secure
dependency management
unix

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

64.8%

JSON

Fast, reliable, and secure dependency management.

OSVersionArchitecturePackageVersionFilename
Fedora38anyyarnpkg< 1.22.21UNKNOWN

Related

openvas 6
nessus 13
fedora 1
osv 9
prion 3
veracode 3
debian 3
debiancve 3
github 3
redhatcve 3
cvelist 3
ibm 31
ubuntucve 3
cve 3
cgr 1
mageia 1
redhat 13
redos 1
openvas
openvas
Fedora: Security Advisory for yarnpkg (FEDORA-2024-5ecc250449)
2024-02-28 00:00:00
Fedora: Security Advisory for yarnpkg (FEDORA-2024-28fc0c2ef4)
2024-02-28 00:00:00
Debian: Security Advisory (DSA-5539-1)
2023-10-31 00:00:00
nessus
nessus
Fedora 38 : yarnpkg (2024-5ecc250449)
2024-02-28 00:00:00
Fedora 39 : yarnpkg (2024-28fc0c2ef4)
2024-02-28 00:00:00
Debian DLA-3635-1 : node-browserify-sign - LTS security update
2023-10-29 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: yarnpkg-1.22.21-2.fc39
2024-02-28 01:10:55
osv
osv
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)
2022-10-12 12:00:27
CVE-2023-46234
2023-10-26 15:15:09
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack
2023-10-26 20:53:21
prion
prion
Out-of-bounds
2023-10-26 15:15:00
Denial of service
2022-10-11 19:15:00
Code injection
2023-07-01 05:15:00
veracode
veracode
Improper Verification Of Cryptographic Signature
2023-10-27 08:50:35
Regular Expression Denial Of Service (ReDoS)
2022-10-12 02:12:19
Prototype Pollution
2023-07-11 07:35:18
debian
debian
[SECURITY] [DSA 5539-1] node-browserify-sign security update
2023-10-30 16:25:53
[SECURITY] [DLA 3635-1] node-browserify-sign security update
2023-10-29 04:34:11
[SECURITY] [DLA 3488-1] node-tough-cookie security update
2023-07-10 20:35:55
debiancve
debiancve
CVE-2023-46234
2023-10-26 15:15:09
CVE-2022-37599
2022-10-11 19:15:00
CVE-2023-26136
2023-07-01 05:15:16
github
github
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack
2023-10-26 20:53:21
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)
2022-10-12 12:00:27
tough-cookie Prototype Pollution vulnerability
2023-07-01 06:30:16
redhatcve
redhatcve
CVE-2023-46234
2023-10-27 06:27:16
CVE-2022-37599
2023-05-23 10:40:04
CVE-2023-26136
2023-07-06 05:57:18
cvelist
cvelist
browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack
2023-10-26 14:31:35
CVE-2022-37599
2022-10-11 00:00:00
CVE-2023-26136
2023-07-01 05:00:01
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container Dashboard operands that use S3 storage are vulnerable to security restrictions bypass due to [CVE-2023-46234]
2023-12-14 10:45:03
Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to denial of service due to loader-utils CVE-2022-37599
2023-01-03 09:16:42
Security Bulletin: Open Source Dependency Vulnerability
2023-05-15 18:46:35
ubuntucve
ubuntucve
CVE-2023-46234
2023-10-26 00:00:00
CVE-2022-37599
2022-10-11 00:00:00
CVE-2023-26136
2023-07-01 00:00:00
cve
cve
CVE-2023-46234
2023-10-26 15:15:09
CVE-2022-37599
2022-10-11 19:15:00
CVE-2023-26136
2023-07-01 05:15:16
cgr
cgr
CVE-2023-26136 vulnerabilities
2024-05-13 09:06:52
mageia
mageia
Updated nodejs-tough-cookie packages fix security vulnerability
2024-03-22 03:19:51
redhat
redhat
(RHSA-2023:6180) Important: Red Hat OpenShift distributed tracing 2.9.0 containers security update
2023-10-30 12:51:55
(RHSA-2023:5488) Important: Red Hat JBoss Enterprise Application Platform 7.4.13 security update
2023-10-05 20:16:39
(RHSA-2023:5484) Important: Red Hat JBoss Enterprise Application Platform 7.4.13 security update on RHEL 7
2023-10-05 20:11:22
redos
redos
ROS-20240418-08
2024-04-18 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

64.8%

JSON
Related for FEDORA:57226209E89E
openvas6nessus13fedora1osv9prion3veracode3debian3debiancve3github3redhatcve3cvelist3ibm31ubuntucve3cve3cgr1mageia1redhat13redos1