EUVD-2021-1724

Malware in sbrugna...

EUVD-2021-1513

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-39134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - @npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarante...

Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Rational Application Developer for WebSphere Software included in Rational Developer for i

Summary Vulnerabilities detected in Node.js versions before v14.16.2 that affect the Cordova platform packaged with Rational Developer for i Software. Vulnerability Details CVEID: CVE-2021-3712 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an...

Remote Code Execution (RCE)

@npmcli/arborist is vulnerable to remote code execution. The vulnerability exists due to a symlink dependency where an attacker is able to create arbitrary contents to be written to any location on the filesystem...

Remote Code Execution (RCE)

@npmcli/arboristis vulnerable to Remote Code Execution RCE. The vulnerability exists due to the lack of sanitization of the symlink and the assigned dependency in the root level...

CVE-2021-39134

@npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into the expected folder...

CVE-2021-39134

@npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into the expected folder...

@pkgjs/support (>=0.0.3, <=0.0.6), detect-node-support (1.4.1) +7 more potentially affected by CVE-2021-39135 via @npmcli/arborist (>=0.0.0, <=1.0.14)

@npmcli/arborist NPM version =0.0.0, =0.0.3, =1.0.0, =0.0.0, =0.3.4, =0.1.12, =2.1.0, =0.8.0-0, =1.0.3, =1.1.0 Source cves: CVE-2021-39135 Source advisory: MEND:CVE-2021-39135...

CVE-2021-39135

"@npmcli/arborist", the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into the expected...

CVE-2021-39134

"@npmcli/arborist", the library that calculates dependency trees and manages the "nodemodules" folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into the expected...

@pkgjs/support (>=0.0.3, <=0.0.6), detect-node-support (1.4.1) +7 more potentially affected by CVE-2021-39134 via @npmcli/arborist (>=0.0.0, <=1.0.14)

@npmcli/arborist NPM version =0.0.0, =0.0.3, =1.0.0, =0.0.0, =0.3.4, =0.1.12, =2.1.0, =0.8.0-0, =1.0.3, =1.1.0 Source cves: CVE-2021-39134 Source advisory: MEND:CVE-2021-39134...

PT-2021-5676

Name of the Vulnerable Software and Affected Versions @npmcli/arborist versions prior to 2.8.2 npm versions prior to 7.20.7 Description The issue is related to the @npmcli/arborist library, which calculates dependency trees and manages the node modules folder hierarchy for the npm command line...

CVE-2021-39135: UNIX Symbolic Link (Symlink) Following

@npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into the expected folder...

CVE-2021-39134: UNIX Symbolic Link (Symlink) Following

@npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into the expected folder...