Lucene search
FedoraFEDORA:66AB9203CD52HistoryFeb 28, 2024 - 1:10 a.m.
[SECURITY] Fedora 39 Update: yarnpkg-1.22.21-2.fc39
2024-02-2801:10:55
lists.fedoraproject.org
8
fedora 39
yarnpkg update
dependency management
unix
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.3 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.0%
Fast, reliable, and secure dependency management.
Related
nessus
nessus
Fedora 38 : yarnpkg (2024-5ecc250449)
2024-02-28 00:00:00
Fedora 39 : yarnpkg (2024-28fc0c2ef4)
2024-02-28 00:00:00
RHEL 6 : browserify-sign (Unpatched Vulnerability)
2024-05-11 00:00:00
openvas
openvas
Fedora: Security Advisory for yarnpkg (FEDORA-2024-28fc0c2ef4)
2024-02-28 00:00:00
Fedora: Security Advisory for yarnpkg (FEDORA-2024-5ecc250449)
2024-02-28 00:00:00
Ubuntu: Security Advisory (USN-6800-1)
2024-05-30 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: yarnpkg-1.22.21-2.fc38
2024-02-28 01:41:33
debian
debian
[SECURITY] [DLA 3635-1] node-browserify-sign security update
2023-10-29 04:33:32
[SECURITY] [DSA 5539-1] node-browserify-sign security update
2023-10-30 16:25:31
[SECURITY] [DLA 3488-1] node-tough-cookie security update
2023-07-10 20:35:36
cvelist
cvelist
CVE-2023-46234 browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack
2023-10-26 14:31:35
CVE-2022-37599
2022-10-11 00:00:00
CVE-2023-26136
2023-07-01 05:00:01
redhatcve
redhatcve
osv
osv
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)
2022-10-12 12:00:27
node-browserify-sign vulnerability
2024-05-30 10:12:04
CVE-2022-37599
2022-10-11 19:15:11
nvd
nvd
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2022-10-12 02:12:19
Prototype Pollution
2023-07-11 07:35:18
Improper Verification Of Cryptographic Signature
2023-10-27 08:50:35
debiancve
debiancve
ubuntucve
ubuntucve
prion
prion
Denial of service
2022-10-11 19:15:00
Out-of-bounds
2023-10-26 15:15:00
Code injection
2023-07-01 05:15:00
ibm
ibm
cve
cve
ubuntu
ubuntu
browserify-sign vulnerability
2024-05-30 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-46234 affecting package reaper for versions less than 3.1.1-9
2024-06-06 19:53:22
github
github
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack
2023-10-26 20:53:21
tough-cookie Prototype Pollution vulnerability
2023-07-01 06:30:16
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)
2022-10-12 12:00:27
mageia
mageia
Updated nodejs-tough-cookie packages fix security vulnerability
2024-03-22 03:19:51
cgr
cgr
CVE-2023-26136 vulnerabilities
2024-05-19 03:07:16
redhat
redhat
redos
redos
ROS-20240418-08
2024-04-18 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.3 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.0%
Related for FEDORA:66AB9203CD52