4730 matches found
RHSA-2026:52394 Red Hat Security Advisory: nodejs-nodemon security update
Bulletin has no description...
Astra Linux – Vulnerability in Node.js
A flaw in Node.js’s buffer allocation logic can expose uninitialized memory when allocations are interrupted, especially when using the vm module with the timeout option. Under certain timing conditions, buffers allocated using Buffer.alloc and other TypedArray instances like Uint8Array may conta...
Astra Linux – Vulnerability in Node.js
A malformed HTTP/2 HEADERS frame with oversized, invalid HPACK data can cause Node.js to crash by triggering an unhandled TLSSocket error ECONNRESET. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not...
Important: Red Hat Security Advisory: nodejs:22 security update
An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Important: Red Hat Security Advisory: nodejs-nodemon security update
An update for nodejs-nodemon is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RHEL 10 : nodejs-nodemon (RHSA-2026:52394)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:52394 advisory. Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch th...
Photon OS 5.0: Nodejs PHSA-2024-5.0-91-0213
An update of the nodejs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0213. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
RHEL 9 : nodejs:22 (RHSA-2026:52399)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:52399 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...
RHEL 10 : nodejs-nodemon (RHSA-2026:52841)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:52841 advisory. Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch th...
Photon OS 5.0: Nodejs PHSA-2023-5.0-91-0132
An update of the nodejs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0132. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-56850 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-58043 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-56847 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-777R-4CWX-G26V vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-QRQ2-C54W-WGQM vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-56847 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-56850 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-QRQ2-C54W-WGQM vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-HW7R-7V27-7388 vulnerabilities
Vulnerabilities for packages: nodejs...
SUSE SLES15 Security Update : nodejs24 (SUSE-SU-2026:3520-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3520-1 advisory. Update to 24.18.1. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF an...