Malicious code in remote-pay-cloud-nodejs-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c79c9016072594f69c2e51638411a976697aac06304e1d9a0ce7a430fe8d188 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5743 Malicious code in remote-pay-cloud-nodejs-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c79c9016072594f69c2e51638411a976697aac06304e1d9a0ce7a430fe8d188 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in courier-plugin-sdk-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 014002d316a160561d5ca8a30a271023a3de0d8d96de4c938aa0da0a1bdac3b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2216 Malicious code in courier-plugin-sdk-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 014002d316a160561d5ca8a30a271023a3de0d8d96de4c938aa0da0a1bdac3b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodejs-gcloud-pubsub-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40eb63d0a4ed52650bf16d9a4d3a4cc2a9e305ba71dadfa7f7276be2f36ab743 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slint-config-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71844446cca16e4b3f681a871d4c858e2a3222aa3c2dc8a0eb5fd6f97c1aaf1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6166 Malicious code in slint-config-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71844446cca16e4b3f681a871d4c858e2a3222aa3c2dc8a0eb5fd6f97c1aaf1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4904 Malicious code in nodejs-driver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4ceaf6a066fdce9ab350306c61d927c0ca99cc7d77b8eefe29c778fdfd8758 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4568 Malicious code in metadata-api-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea84c6a9316d39ddaee318d62563bf1137cb78cce3403ef4d78100a9e5770ecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodejs-driver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4ceaf6a066fdce9ab350306c61d927c0ca99cc7d77b8eefe29c778fdfd8758 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metadata-api-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea84c6a9316d39ddaee318d62563bf1137cb78cce3403ef4d78100a9e5770ecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-PFRX-2Q88-QQ97 vulnerabilities

Vulnerabilities for packages: pgadmin4...

CVE-2022-33987

The got package before 12.1.0 also fixed in 11.8.5 for Node.js allows a redirect to a UNIX socket...

CVE-2022-33987 vulnerabilities

Vulnerabilities for packages: pgadmin4...

UBUNTU-CVE-2022-33987

The got package before 12.1.0 also fixed in 11.8.5 for Node.js allows a redirect to a UNIX socket...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.5 security updates, images, and bug fixes

Red Hat Advanced Cluster Management for Kubernetes 2.5.0 is now generally available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: RHV Appliance (rhvm-appliance) security update [ovirt-4.5.0]

Updated RHV-M Appliance packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

nodejs: Improper handling of URI Subject Alternative Names

A flaw was found in node.js where it accepted a certificate's Subject Alternative Names SAN entry, as opposed to what is specified by the HTTPS protocol. This flaw allows an active person-in-the-middle to forge a certificate and impersonate a trusted host...

Important: Red Hat Enhancement Advisory: nodejs:12 bug fix and enhancement update

An update for the nodejs:12 module is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Bug Fixes and Enhancements:...

nodejs: Certificate Verification Bypass via String Injection

It was found that node.js did not safely read the x509 certificate generalName format properly, resulting in data injection. A certificate could use a specially crafted extension in order to be successfully validated, permitting an attacker to impersonate a trusted host...