5840 matches found
Fedora 43 : nodejs22 (2026-8663c5f961)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8663c5f961 advisory. Update to version 22.22.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 43 : nodejs24 (2026-5cd409edfa)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5cd409edfa advisory. Update to version 24.13.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 42 : nodejs22 (2026-b7ad50870e)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b7ad50870e advisory. Update to version 22.22.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 42 : nodejs20 (2026-fb4878551d)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fb4878551d advisory. Update to version 20.20.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
CLEANSTART-2026-WI75198 vulnerability has been identified in Node
Multiple security vulnerabilities affect the nodejs package. A vulnerability has been identified in Node. See references for individual vulnerability details...
Node.js: Memory leak in Node.js HTTP/2 server via WINDOW_UPDATE on stream 0 leads to resource exhaustion
Vulnerability description not provided...
Node.js Module vm2 < 3.10.2 Sandbox Breakout
The version of the Node.js module vm2 installed on the remote host is prior to 3.10.2. It is, therefore affected by a sandbox breakout vulnerability due to a flaw with the Promise.prototype.then and Promise.prototype.catch callback sanitization. An unauthenticated, remote attacker can exploit thi...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nodejs-form-data (UTSA-2026-005212)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005212 advisory. Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files...
Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution
A critical sandbox escape vulnerability has been disclosed in the popular vm2 Node.js library that, if successfully exploited, could allow attackers to run arbitrary code on the underlying operating system. The vulnerability, tracked as CVE-2026-22709 , carries a CVSS score of 9.8 out of 10.0 on...
CVE-2023-39333 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-J65R-8HRG-QC6X vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-PRHJ-8562-P8GJ vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-WJ24-GWH6-MGH8 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-XFGW-QCMV-354J vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-XP28-3FV9-33C6 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2023-46809 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2024-27982 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2024-27983 vulnerabilities
Vulnerabilities for packages: nodejs...