4775 matches found
nodejs: Remotely trigger an assertion on a TLS server with a malformed certificate string
An encoding error flaw exists in the Node.js code that is used to read a peer certificate in the TLS client authentication. An attacker can use this flaw to crash the process used to handle TLS client authentication...
Important: Red Hat Security Advisory: nodejs:10 security update
An update for the nodejs:10 module is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
nodejs: HTTP request smuggling using malformed Transfer-Encoding header
A flaw was found in the Node.js code where a specially crafted HTTPs request sent to a Node.js server failed to properly process the HTTPs headers, resulting in a request smuggling attack. An attacker can use this flaw to alter a request sent as an authenticated user if the Node.js server is...
Fedora 30 : 1:nodejs / http-parser (2020-830d8a1a92)
Update to 10.19.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...
Critical Photon OS Security Update - PHSA-2020-0060
Updates of 'nodejs' packages of Photon OS have been released...
Fedora: Security Advisory for nodejs (FEDORA-2020-830d8a1a92)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Critical Photon OS Security Update - PHSA-2020-3.0-0060
Updates of 'nodejs' packages of Photon OS have been released...
Node.js third-party modules: [utils-extend] Prototype pollution
NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! I would like to report prototype poluti...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0210
An update of 'nodejs' packages of Photon OS has been released...
AZL-44064 CVE-2019-10795 affecting package nodejs-nodemon 2.0.3-5
undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a proto payload...
Important: Red Hat Security Advisory: Red Hat Quay v3.2.1 security update
An update is now available for Red Hat Quay 3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
Fedora 31 : nodejs-mixin-deep (2020-f80e5c0d65)
Update to upstream 1.3.2 release for CVE-2019-10746 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 31 : 1:libuv / 1:nodejs / nghttp2 (2020-3838c8ea98)
Update to Node.js 12.15.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...
Fedora 31 : nodejs-yarn (2020-766ce5adae)
Update to 1.21.1 - Provides /usr/bin/yarn - Resolves CVE-2019-10773 - Rename nodejs-yarn binary package to yarnpkg similar to other distros - Use nodejs macros consistently throughout spec - Make the tests fail the build if the tests fail Note that Tenable Network Security has extracted the...
Fedora 30 : nodejs-mixin-deep (2020-4a8f110332)
Update to upstream 1.3.2 release for CVE-2019-10746 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 30 : nodejs-yarn (2020-7525beefa1)
Update to 1.21.1 - Resolves CVE-2019-10773 - Rename nodejs-yarn binary package to yarnpkg similar to other distros - Use nodejs macros consistently throughout spec - Make the tests fail the build if the tests fail Note that Tenable Network Security has extracted the preceding description block...
Fedora 31 : nodejs-set-value (2020-582515fa8a)
Update to upstream 2.0.1 release for CVE-2019-10747 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 30 : nodejs-set-value (2020-1f1c94907b)
Update to upstream 2.0.1 release for CVE-2019-10747 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora: Security Advisory for nodejs (FEDORA-2020-3838c8ea98)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
