5826 matches found
Important: nodejs20
Issue Overview: A flaw in Node.js HTTP request handling causes an uncaught TypeError when a request is received with a header named proto and the application accesses req.headersDistinct. When this occurs, dest"proto" resolves to Object.prototype rather than undefined, causing .push to be called ...
Important: nodejs24
Issue Overview: A flaw in Node.js HTTP request handling causes an uncaught TypeError when a request is received with a header named proto and the application accesses req.headersDistinct. When this occurs, dest"proto" resolves to Object.prototype rather than undefined, causing .push to be called ...
RHEL 8 : nodejs:24 (RHSA-2026:7670)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:7670 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...
RHEL 10 : nodejs24 (RHSA-2026:7675)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:7675 advisory. Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an...
nodejs:24 security update
nodejs 1:24.14.1-2 - Update bundled nghttp2 to 1.68.1 Related: RHEL-151374 1:24.14.1-1 - Update to 24.14.0 Resolves: RHEL-151374 nodejs-nodemon 3.0.3-1 - Initial import into nodejs:24 module nodejs-packaging 2021.06-6 - Properly handle @group/package deps in nodejs-symlink-deps Resolves:...
RockyLinux 9 : nodejs:20 (RLSA-2026:7896)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:7896 advisory. minimatch: minimatch: Denial of Service via specially crafted glob patterns CVE-2026-26996 minimatch: Minimatch: Denial of Service via catastrophic...
OESA-2026-1835 nodejs-brace-expansion security update
Brace expansion as known from sh/bash Security Fixes: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13, a brace pattern with a zero step value e.g., 1..2..0 causes the sequence generation loop to run...
CVE-2026-21715 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-21717 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-22VJ-V4R3-878V vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-21716 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-8JGR-5CGV-G667 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-CFR8-F5Q7-84WQ vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-326M-34V3-GV5P vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-21713 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-21710 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-21714 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-21713 vulnerabilities
Vulnerabilities for packages: nodejs...