136 matches found
Node.js: Multiple Vulnerabilities
Background Node.js is a JavaScript runtime built on Chrome’s V8 JavaScript engine. Description Multiple vulnerabilities have been discovered in Node.js. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround Ther...
Alibaba Cloud Linux 3 : 0056: nodejs:14 (ALINUX3-SA-2021:0056)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0056 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-22918: Node.js before 16.4.1,...
Alibaba Cloud Linux 3 : 0072: nodejs:14 (ALINUX3-SA-2021:0072)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0072 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-22930: RESERVED This candidate ha...
Alibaba Cloud Linux 3 : 0022: nodejs:14 (ALINUX3-SA-2021:0022)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0022 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-10531: An issue was discovered in...
Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to Node.js
Summary Vulnerabilities in Node.js such as remote attacker bypass security restrictions may affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2023-30581 DESCRIPTION: Node.js could allow a remote attacker to bypass security restrictions, caused by the use of proto in...
GHSA-M27W-WVC9-V4MQ vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-M27W-WVC9-V4MQ vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-F9JC-68CV-WP63 vulnerabilities
Vulnerabilities for packages: nodejs...
Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java and Node.js
Summary There are multiple vulnerabilities in Java and Node.js used by IBM Cloud Transformation Advisor CVE-2019-20916, CVE-2021-37714, CVE-2016-2175, CVE-2025-26791, CVE-2025-1470, CVE-2025-1471. Vulnerability Details CVEID:CVE-2019-20916 DESCRIPTION: pypa pip package for python could allow a...
Security Bulletin: Multiple vulnerabilities in nodejs affect IBM Business Automation Workflow Configuration Editor (nodejs January security release)
Summary IBM Business Automation Workflow Configuration Editor repackages a nodejs runtime and multiple application level models. Vulnerabilities have been reported for the runtime and some modules.. Vulnerability Details CVEID:CVE-2025-23083 DESCRIPTION: With the aid of the diagnosticschannel...
Updates on CVE for End-of-Life Versions
Updates on CVE for End-of-Life Versions Update on the issuance of CVEs to mark End-of-Life Node.js Versions TL;DR: CVE-2025-23087, CVE-2025-23088, and CVE-2025-23089 issued to tag EOL versions have been rejected by the CVE Program. The Node.js team has, therefore, decided to update previous...
Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js (CVE-2025-23085, CVE-2025-23084 & CVE-2025-22150)
Summary IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js. Vulnerability Details CVEID:CVE-2025-23085 DESCRIPTION: A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header wa...
GHSA-CWRJ-J635-2M7W vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-9CCP-4GJG-264G vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-WV7P-RJF3-9FR5 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-5VVM-WQC8-R5M8 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-FM6V-WMJP-5RXQ vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-QV9X-C8C9-RPR8 vulnerabilities
Vulnerabilities for packages: nodejs...