Lucene search
FedoraFEDORA:57226209E89EHistoryFeb 28, 2024 - 1:41 a.m.
[SECURITY] Fedora 38 Update: yarnpkg-1.22.21-2.fc38
2024-02-2801:41:33
lists.fedoraproject.org
13
fedora 38
update
yarnpkg
1.22.21-2.fc38
fast
reliable
secure
dependency management
unix
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
Low
EPSS
0.003
Percentile
70.0%
Fast, reliable, and secure dependency management.
Related
openvas
openvas
Fedora: Security Advisory for yarnpkg (FEDORA-2024-5ecc250449)
2024-02-28 00:00:00
Fedora: Security Advisory for yarnpkg (FEDORA-2024-28fc0c2ef4)
2024-02-28 00:00:00
Debian: Security Advisory (DSA-5539-1)
2023-10-31 00:00:00
nessus
nessus
Fedora 38 : yarnpkg (2024-5ecc250449)
2024-02-28 00:00:00
Fedora 39 : yarnpkg (2024-28fc0c2ef4)
2024-02-28 00:00:00
Debian DLA-3635-1 : node-browserify-sign - LTS security update
2023-10-29 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: yarnpkg-1.22.21-2.fc39
2024-02-28 01:10:55
osv
osv
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)
2022-10-12 12:00:27
CVE-2023-46234
2023-10-26 15:15:09
node-browserify-sign vulnerability
2024-05-30 10:12:04
nvd
nvd
cvelist
cvelist
CVE-2022-37599
2022-10-11 00:00:00
CVE-2023-46234 browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack
2023-10-26 14:31:35
CVE-2023-26136
2023-07-01 05:00:01
github
github
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)
2022-10-12 12:00:27
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack
2023-10-26 20:53:21
tough-cookie Prototype Pollution vulnerability
2023-07-01 06:30:16
cve
cve
debian
debian
[SECURITY] [DSA 5539-1] node-browserify-sign security update
2023-10-30 16:25:31
[SECURITY] [DLA 3635-1] node-browserify-sign security update
2023-10-29 04:33:32
[SECURITY] [DLA 3488-1] node-tough-cookie security update
2023-07-10 20:35:36
prion
prion
Out-of-bounds
2023-10-26 15:15:00
Denial of service
2022-10-11 19:15:00
Code injection
2023-07-01 05:15:00
veracode
veracode
Improper Verification Of Cryptographic Signature
2023-10-27 08:50:35
Regular Expression Denial Of Service (ReDoS)
2022-10-12 02:12:19
Prototype Pollution
2023-07-11 07:35:18
redhatcve
redhatcve
debiancve
debiancve
cbl_mariner
cbl_mariner
CVE-2023-46234 affecting package reaper for versions less than 3.1.1-9
2024-06-06 19:53:22
ubuntu
ubuntu
browserify-sign vulnerability
2024-05-30 00:00:00
ubuntucve
ubuntucve
ibm
ibm
githubexploit
githubexploit
Exploit for Prototype Pollution in Salesforce Tough-Cookie
2024-09-02 18:50:53
Exploit for Prototype Pollution in Salesforce Tough-Cookie
2024-05-06 17:32:10
Exploit for Prototype Pollution in Salesforce Tough-Cookie
2023-12-04 13:01:29
mageia
mageia
Updated nodejs-tough-cookie packages fix security vulnerability
2024-03-22 03:19:51
cgr
cgr
CVE-2023-26136 vulnerabilities
2024-05-19 03:07:16
ics
ics
Subnet Solutions PowerSYSTEM Center
2024-07-18 12:00:00
redhat
redhat
redos
redos
ROS-20240704-07
2024-07-04 00:00:00
ROS-20240418-08
2024-04-18 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
Low
EPSS
0.003
Percentile
70.0%
Related for FEDORA:57226209E89E