4680 matches found
[SECURITY] Fedora 24 Update: nodejs-mapnik-3.5.6-2.fc24
Bindings to Mapnik tile rendering library for Node.js...
[SECURITY] Fedora 24 Update: nodejs-node-expat-2.3.11-8.fc24
Fast libexpat XML SAX parser binding for Node.js...
[SECURITY] Fedora 24 Update: nodejs-zipfile-0.5.9-7.fc24
Bindings to libzip for handling zipfile archives in Node.js...
Warning about NPM modules | Cloud Foundry
Warning about NPM modules Advisory Vendor Node Package Manager NPM Versions Affected Cloud Foundry NodeJS Buildpack Description If your app developers deploy Node applications, we’d like to alert you to recent developments with NPM and module ownership in the Node community. A blog post was...
SOL95463126 - OpenSSL vulnerabilities CVE-2016-0703 and CVE-2016-0704
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
Fedora 22 : nodejs-handlebars-4.0.5-1.fc22 (2015-8b6882339c)
Security fix for nodejs-handlebars: mustache: handlebars: Quoteless Attributes in Templates can lead to Content Injection ---- New upstream release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...
Fedora 23 : nodejs-handlebars-4.0.5-1.fc23 (2015-a7cbc13699)
Security fix for nodejs-handlebars: mustache: handlebars: Quoteless Attributes in Templates can lead to Content Injection Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
Fedora 23 : nodejs-is-my-json-valid-2.12.4-1.fc23 (2016-25ab518a58)
Security fix for Regular expression DoS using utc-millisec format Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 22 : nodejs-ws-1.0.1-1.fc22 (2016-a6f02951a2)
Update to 1.0.1 - Security Fix - 1295717,1295718,1295719 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...
Fedora 23 : nodejs-0.10.42-4.fc23 (2016-3102c11757)
Security fix for CVE-2016-2216, CVE-2016-2086 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 23 : nodejs-ws-1.0.1-1.fc23 (2016-3509d27585)
Update to 1.0.1 - Security Fix - 1295717,1295718,1295719 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...
Fedora 22 : nodejs-0.10.42-4.fc22 (2016-8925b6119f)
Security fix for CVE-2016-2216, CVE-2016-2086 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 22 : nodejs-is-my-json-valid-2.12.4-1.fc22 (2016-3441e9da2f)
Security fix for Regular expression DoS using utc-millisec format Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
openSUSE Security Update : nodejs (openSUSE-2016-283)
This update for nodejs fixes the following issues : - CVE-2016-2216: Response splitting vulnerability using Unicode characters boo966076 - CVE-2016-2086: Request smuggling vulnerability boo966077 Node.js was updated to the 4.3.1 LTS version, containing all upstream bug fixes and improvements...
Joyent Node.js is-my-json-valid Denial of Service Vulnerability
Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform. is-my-json-valid is one of the JSONSchema describing the JSON data format validation package. A security vulnerability exists in Joyent Node.js is-my-json-vali...
Drupal Nodejs Module Access Bypass Vulnerability
Drupal is a free, open-source content management system developed in the PHP language maintained by the Drupal community.Node.js is one of the modules that provides real-time push updates. An access bypass vulnerability exists in the Drupal Nodejs module. This vulnerability allows attackers to...
Joyent Node.js HTTP Response Splitting Attack Vulnerability
Joyent Node.js is a suite of web application platforms built on top of Google's V8 JavaScript engine. Joyent Node.js suffers from an HTTP response splitting attack, which allows remote attackers to exploit the vulnerability to affect or tamper with the serving, caching, or parsing of web content...
Fedora Update for nodejs FEDORA-2016-8925
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for nodejs FEDORA-2016-3102
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for nodejs-is-my-json-valid FEDORA-2016-3441
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...