267850 matches found
CVE-2026-54722
DSSRF (Node.js library) has a vulnerability in is_url_safe prior to version 1.0.4. The bug arises because is_url_safe strips the @ userinfo delimiter via remove_at_symbol_in_string before parsing URLs, allowing an attacker-controlled URL to bypass internal-IP validation and cause a client using t...
Malicious Package
Overview logform-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2026-56850
A flaw was found in Node.js. The HTTPS Agent, responsible for managing secure connections, can incorrectly reuse client identities across different requests. This occurs due to a technical issue with PFX object-array key collisions during connection reuse. As a result, a client's identity,...
Malware in js-client-node
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious Package
Overview js-client-node is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
nodejs-nodemon security update
An update is available for nodejs-nodemon. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Simple monitor script for use during development of a node.js app. Fo...
axios: axios: Information disclosure via Prototype Pollution in Node HTTP adapter
A flaw was found in axios when used in a Node.js deployment with the HTTP adapter. This vulnerability, known as Prototype Pollution, occurs because request interceptors can revert hardened request configurations, allowing an attacker to manipulate the Object.prototype.proxy property. If...
CLEANSTART-2026-RM44589 Security fixes in prometheus-node-exporter-fips 1.8.2-r0
Package prometheus-node-exporter-fips version 1.8.2-r0 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...
CLEANSTART-2026-QO08875 Security fixes in kubernetes-dns-node-cache-fips 1.26.7-r1
Package kubernetes-dns-node-cache-fips version 1.26.7-r1 fixes 3 vulnerabilities: ghsa-c9v3-4pv7-87pr, ghsa-h75p-j8xm-m278, ghsa-9h8m-3fm2-qjrq...
CLEANSTART-2026-MJ00253 Security fixes in npm 11.14.0-r0
Package npm version 11.14.0-r0 fixes 2 vulnerabilities: CVE-2026-45149, ghsa-jxxr-4gwj-5jf2...
CLEANSTART-2026-IT30103 Security fixes in prometheus-node-exporter 1.10.2-r1
Package prometheus-node-exporter version 1.10.2-r1 fixes 1 vulnerabilities: CVE-2026-42504...
CLEANSTART-2026-ZQ36354 Security fixes in kubernetes-dns-node-cache 1.26.7-r1
Package kubernetes-dns-node-cache version 1.26.7-r1 fixes 6 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, ghsa-c9v3-4pv7-87pr, ghsa-h75p-j8xm-m278...
CLEANSTART-2026-HA69693 Security fixes in kubernetes-dns-node-cache 1.26.8-r5
Package kubernetes-dns-node-cache version 1.26.8-r5 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...
CLEANSTART-2026-BG21646 Security fixes in kubernetes-dns-node-cache 1.25.0-r5
Package kubernetes-dns-node-cache version 1.25.0-r5 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-27145, CVE-2026-42507...
CLEANSTART-2026-CB11602 Security fixes in npm 11.18.0-r0
Package npm version 11.18.0-r0 fixes 1 vulnerabilities: CVE-2026-13149...
CLEANSTART-2026-RZ36238 Security fixes in azure-functions-node 4.1052.200-r0
Package azure-functions-node version 4.1052.200-r0 fixes 22 vulnerabilities: CVE-2026-41907, CVE-2026-48068, CVE-2026-48069, CVE-2024-37168, CVE-2024-4068...
CLEANSTART-2026-IG79399 Security fixes in kubernetes-csi-node-driver-registrar 2.13.0-r1
Package kubernetes-csi-node-driver-registrar version 2.13.0-r1 fixes 6 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...
CLEANSTART-2026-HV42449 Security fixes in prometheus-node-exporter-fips 1.6.1-r0
Package prometheus-node-exporter-fips version 1.6.1-r0 fixes 2 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-8r3f-844c-mc37...