81 matches found
RHSA-2026:61374 Red Hat Security Advisory: nodejs-nodemon security update
Bulletin has no description...
Important: Red Hat Security Advisory: nodejs-nodemon security update
An update for nodejs-nodemon is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RHEL 10 : nodejs-nodemon (RHSA-2026:61374)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:61374 advisory. Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch th...
AZL-98334 CVE-2026-82417 affecting package nodejs-nodemon 2.0.3-5
Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. utils.isBuffer duck-types buffers by calling obj.constructor.isBufferobj after checking only that the property is truthy, so a value such as constructor:...
nodejs-nodemon security update
An update is available for nodejs-nodemon. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Simple monitor script for use during development of a node.js app. Fo...
RHSA-2026:52841 Red Hat Security Advisory: nodejs-nodemon security update
Bulletin has no description...
RockyLinux 10 : nodejs-nodemon (RLSA-2026:52841)
The remote RockyLinux 10 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:52841 advisory. brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays CVE-2026-69152 Tenable has extracted the preceding description block...
Important: Red Hat Security Advisory: nodejs-nodemon security update
An update for nodejs-nodemon is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
RHSA-2026:52394 Red Hat Security Advisory: nodejs-nodemon security update
Bulletin has no description...
Important: Red Hat Security Advisory: nodejs-nodemon security update
An update for nodejs-nodemon is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RHEL 10 : nodejs-nodemon (RHSA-2026:52394)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:52394 advisory. Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch th...
RHEL 10 : nodejs-nodemon (RHSA-2026:52841)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:52841 advisory. Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch th...
Oracle Linux 10 : nodejs-nodemon (ELSA-2026-48032)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-48032 advisory. 3.1.14-2 - Regenerete sources. 3.1.14-1 - Update to version 3.1.14 3.0.3-7 - revert of ce0df1a 3.0.3-6 - deps: revert letting nodemon work with any node Tenab...
AZL-94532 CVE-2026-69152 affecting package nodejs-nodemon 2.0.3-5
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memo...
RHSA-2026:48032 Red Hat Security Advisory: nodejs-nodemon security update
Bulletin has no description...
RockyLinux 10 : nodejs-nodemon (RLSA-2026:48032)
The remote RockyLinux 10 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:48032 advisory. brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 Tenable has extracted the preceding description block...
Important: Red Hat Security Advisory: nodejs-nodemon security update
An update for nodejs-nodemon is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
AZL-94535 CVE-2026-14257 affecting package nodejs-nodemon 2.0.3-5
brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand function limits the number of results with a max option default 100,000 but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count und...
Oracle Linux 8 : nodejs:24 (ELSA-2026-39868)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-39868 advisory. nodejs 1:24.18.0-1 - Update to version 24.18.0 Resolves: RHEL-168744 nodejs-nodemon 3.0.3-1 - Initial import into nodejs:24 module nodejs-packaging...
Oracle Linux 9 : nodejs:24 (ELSA-2026-35891)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-35891 advisory. nodejs 1:24.18.0-1 - Update to version 24.18.0 nodejs-nodemon 3.0.3-3 - Keep BR on just npm 3.0.3-2 - Fix BR for nodejs-npm nodejs-packaging 2021.06-6...