Important: Red Hat Security Advisory: nodejs-nodemon security update

An update for nodejs-nodemon is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 10 : nodejs-nodemon (RHSA-2026:52394)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:52394 advisory. Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch th...

Photon OS 5.0: Nodejs PHSA-2024-5.0-91-0213

An update of the nodejs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0213. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 10 : nodejs-nodemon (RHSA-2026:52841)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:52841 advisory. Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch th...

RHEL 9 : nodejs:22 (RHSA-2026:52399)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:52399 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

Photon OS 5.0: Nodejs PHSA-2023-5.0-91-0132

An update of the nodejs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0132. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-56850 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-58043 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-777R-4CWX-G26V vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-QRQ2-C54W-WGQM vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-56847 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-56847 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-56850 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-QRQ2-C54W-WGQM vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-HW7R-7V27-7388 vulnerabilities

Vulnerabilities for packages: nodejs...

SUSE SLES15 Security Update : nodejs24 (SUSE-SU-2026:3520-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3520-1 advisory. Update to 24.18.1. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF an...

Linux Distros Unpatched Vulnerability : CVE-2020-36732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string 0. with an integer, which makes the output more predictable...

CVE-2026-71430

node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.25.1, the WrappedRE2::Replace function built its replacement result and passed it to V8 using ToLocalChecked without checking for the empty MaybeLocal that V8 returns when the resulting string or buffer exceeds V8's...

Security update for nodejs22

This update for nodejs22 fixes the following issues: Update to 22.23.2. CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks bsc1272882. CVE-2026-56846: HTTP/2 retained headers can bypass maxSessionMemory limits...

SUSE-SU-2026:3521-1 Security update for nodejs22

This update for nodejs22 fixes the following issues: Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks bsc1272882. - CVE-2026-56846: HTTP/2 retained headers can bypass maxSessionMemory limits...