Lucene search

K
mageiaGentoo FoundationMGASA-2024-0110
HistoryApr 05, 2024 - 9:24 p.m.

Updated nodejs packages fix security vulnerabilities

2024-04-0521:24:25
Gentoo Foundation
advisories.mageia.org
20
nodejs
security vulnerabilities
cve
http/2
server
fix
release
unix
content length
obfuscation
assertion failed
http request smuggling

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.1%

Nodejs 20.12.1 release fixes 2 CVE: * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High) * CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchnodejs< 20.12.1-1nodejs-20.12.1-1.mga9