107 matches found
nodejs:12 security update
nodejs 1:12.16.1-1 - Resolves: RHBZ1800393, RHBZ1800394, RHBZ1800380 - Rebase to 12.16.1 nodejs-nodemon nodejs-packaging...
AZL-44064 CVE-2019-10795 affecting package nodejs-nodemon 2.0.3-5
undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a proto payload...
12 enhancement update
An update is available for nodejs-nodemon, nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The following packages have been upgraded to a later...
AZL-44412 CVE-2016-1000236 affecting package nodejs-nodemon 2.0.3-5
Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used...
AZL-43819 CVE-2017-16137 affecting package nodejs-nodemon 2.0.3-4
The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue...
AZL-45075 CVE-2017-1000048 affecting package nodejs-nodemon 2.0.3-5
the web framework using ljharb's qs module older than v6.3.2, v6.2.3, v6.1.2, and v6.0.4 is vulnerable to a DoS. A malicious user can send a evil request to cause the web framework crash...