258 matches found
MiracleLinux 7 : rh-nodejs8-nodejs-8.11.4-1.el7 (AXSA:2019-3540:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3540:01 advisory. nodejs: Out of bounds OOB write via UCS-2 encoding CVE-2018-12115 Tenable has extracted the preceding description block directly from the MiracleLin...
GHSA-P2WW-P57H-W5M7 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2025-23084 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-F27J-4F6G-JP27 vulnerabilities
Vulnerabilities for packages: nodejs...
Malicious code in ddos-gacor-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32622783fe9401d4c567f638a03e43b4559383e7f853ff0457f7f301420f95e9 The package ddos-gacor-v2 was found to contain malicious code. Source: ghsa-malware 3192709ec1aa7bcf745ab018eb8d6a537ace33453acda64299ef30193f8d64a9...
Malicious code in aps-simple-viewer-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a3d18d7c64f1636f4922e13d1cc9768c1516be07e755001ed729faff0a63c29 The package aps-simple-viewer-nodejs was found to contain malicious code...
AZL-70610 CVE-2025-13226 affecting package nodejs for versions less than 24.14.1-3
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
EUVD-2025-178115
Malicious code in levels-event-bionics-nodejs npm...
EUVD-2025-178236
Malicious code in jwt-jwt-nodejs-publish npm...
EUVD-2025-177558
Malicious code in nodejs-cosmicweb-chakra-ui-vortex npm...
EUVD-2025-177634
Malicious code in neutronstar-bootstrap-nodejs-paleomagnetism npm...
EUVD-2025-178405
Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus npm...
EUVD-2025-177556
Malicious code in nodejs-hyperion-quito-start npm...
Malicious code in cache-norma-protractor-superflare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e22a028f41addc99f22b1226c3465d0e27a43c7438538f39b0d1e19d26e153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177370
Malicious code in paleoclimatology-jsonp-troposphere-nodejs npm...
EUVD-2025-137901
Malicious code in flights-lutuiog-adifagilo npm...
EUVD-2025-133471
Malicious code in teate-thy-sonic-bupha npm...
EUVD-2025-142808
Malicious code in buta-fs0boiuna-gaif npm...