Security Bulletin: Vulnerabilities in Node.js and packages affect IBM Voice Gateway

Summary Security Vulnerabilities in Node.js and packages affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-31206 DESCRIPTION: Node.js dectalk-tts module could allow a remote attacker to obtain sensitive information, caused by the use of...

CVE-2024-24750

CVE-2024-24750 affects Undici, the HTTP/1.1 client used with Node.js. The vulnerability causes a memory leak when calling fetch(url) and not consuming the incoming body (or consuming it very slowly). The issue has been fixed in Undici version 6.6.1 . Remediation: upgrade to 6.6.1 or ensure the in...

@angular-devkit/build-angular (>=17.1.0-next.1, <=17.2.0-next.1), @directus/api (15.0.0) +16 more potentially affected by CVE-2024-24750 via undici (>=6.0.0, <=6.5.0)

undici NPM version =6.0.0, =17.1.0-next.1, =1.0.0, =17.0.0, =1.0.5, =5.3.0, =4.1.0, =4.2.0 - directus 10.8.3 and more Source cves: CVE-2024-24750 Source advisory: OSV:GHSA-9F24-JQHM-JFCW...