CVE-2024-37890 Denial of service when handling a request with many HTTP headers in ws

ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in [email protected] e55e510 and backported to [email protected] 22c2876, [email protected] eeb76d3, and [email protected]...

CVE-2024-37890 Denial of service when handling a request with many HTTP headers in ws

ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in [email protected] e55e510 and backported to [email protected] 22c2876, [email protected] eeb76d3, and [email protected]...

Security Bulletin: IBM Maximo Application Suite uses jose-2.0.6.tgz which is vulnerable to CVE-2024-28176.

Summary Security Bulletin: IBM Maximo Application Suite uses jose-2.0.6.tgz which is vulnerable to CVE-2024-28176. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-28176 DESCRIPTION: Node.js jose module is vulnerable to a denial ...

Security Bulletin: IBM Maximo Application Suite uses follow-redirects-1.15.4.tgz which is vulnerable to CVE-2024-28849

Summary IBM Maximo Application Suite uses follow-redirects-1.15.4.tgz which is vulnerable to CVE-2024-28849. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-28849 DESCRIPTION: Node.js follow-redirects module could allow a remote...

CVE-2024-37890: NULL Pointer Dereference

ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in [email protected] e55e510 and backported to [email protected] 22c2876, [email protected] eeb76d3, and [email protected]...

OPENSUSE-SU-2024:13020-1 nodejs-electron-22.3.14-1.1 on GA media

These are all security issues fixed in the nodejs-electron-22.3.14-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13532-1 nodejs-electron-27.2.0-1.1 on GA media

These are all security issues fixed in the nodejs-electron-27.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13560-1 nodejs-electron-27.2.1-1.1 on GA media

These are all security issues fixed in the nodejs-electron-27.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13924-1 nodejs-electron-29.3.2~20240430g19f0abd6-1.1 on GA media

These are all security issues fixed in the nodejs-electron-29.3.220240430g19f0abd6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11095-1 nodejs-underscore-1.13.1-1.3 on GA media

These are all security issues fixed in the nodejs-underscore-1.13.1-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12291-1 nodejs-electron-19.0.14-1.1 on GA media

These are all security issues fixed in the nodejs-electron-19.0.14-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12869-1 nodejs-electron-22.3.6-1.1 on GA media

These are all security issues fixed in the nodejs-electron-22.3.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12818-1 nodejs-electron-22.3.3-2.1 on GA media

These are all security issues fixed in the nodejs-electron-22.3.3-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12312-1 nodejs-electron-19.0.14-1.2 on GA media

These are all security issues fixed in the nodejs-electron-19.0.14-1.2 package on the GA media of openSUSE Tumbleweed...

RLSA-2024:2853 Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: c-ares: Out of bounds read in aresreadline CVE-2024-25629 nghttp2: CONTINUATION frames DoS CVE-2024-28182 nodejs: using the fetch function to...

nodejs:20 security update

An update is available for module.nodejs-nodemon, nodejs-packaging, module.nodejs-packaging, nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list...

Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to Node.js micromatch & braces modules (CVE-2024-4067 & CVE-2024-4068)

Summary IBM App Connect Enterprise is vulnerable to a denial of service due to Node.js micromatch & braces modules. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2024-4067 DESCRIPTION: Node.js micromatch module is vulnerable to a denial o...

Security Bulletin: Multiple vulnerabilities in Node.js affects IBM Rational® Application Developer for WebSphere® Software (CVE-2024-27982, CVE-2024-27983)

Summary Node.js is used as runtime and SDK for Apache Cordova applications within IBM Rational® Application Developer for WebSphere® Software. Information about security vulnerabilities affecting Node.js has been published in a security bulletin. Vulnerability Details CVEID:CVE-2024-27982...

curl: Unicode-to-ASCII conversion on Windows can lead to argument injection and more

Vulnerability description not provided...

Security Bulletin: Vulnerabilities in axios affect IBM Voice Gateway

Summary Security Vulnerabilities in axios affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details IBM X-Force ID: 294242 DESCRIPTION: Node.js Axios module is vulnerable to a denial of service, caused by a prototype pollution in the formDataToJSON function. By addi...