nodejs:18 security update

An update is available for module.nodejs-packaging, nodejs-nodemon, nodejs-packaging, module.nodejs-nodemon, nodejs, module.nodejs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

RLSA-2025:1611 Important: nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: undici: Undici Uses Insufficiently Random Values CVE-2025-22150 nodejs: Node.js Worker Thread Exposure via Diagnostics Channel CVE-2025-23083...

RLSA-2025:1582 Moderate: nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: undici: Undici Uses Insufficiently Random Values CVE-2025-22150 nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap CVE-2025-23085 For mor...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in Node.js jose module

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of Node.js jose module Vulnerability Details CVEID:CVE-2024-28176 DESCRIPTION: Node.js jose module is vulnerable to a denial of service, caused by a flaw during JWE Decryption operations. By sending a specially crafted reques...

CVE-2025-27146 Matrix IRC Bridge allows IRC command injection to own puppeted user

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user. The vulnerability h...

CVE-2025-27146 Matrix IRC Bridge allows IRC command injection to own puppeted user

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user. The vulnerability h...

GHSA-WV7P-RJF3-9FR5 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-CWRJ-J635-2M7W vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-5VVM-WQC8-R5M8 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-9M48-R3W4-X35V vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-G526-X7VJ-CFV6 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-9CCP-4GJG-264G vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-FM6V-WMJP-5RXQ vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-QV9X-C8C9-RPR8 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-FM6V-WMJP-5RXQ vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-WV7P-RJF3-9FR5 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-9CCP-4GJG-264G vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-JPGC-8HRM-HVWJ vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-5VVM-WQC8-R5M8 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-QV9X-C8C9-RPR8 vulnerabilities

Vulnerabilities for packages: nodejs...