4742 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-22930
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change...
Linux Distros Unpatched Vulnerability : CVE-2021-44533
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Node.js 12.22.9, 14.18.3, 16.13.2, and 17.3.1 did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects...
Linux Distros Unpatched Vulnerability : CVE-2019-14939
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the mysql aka mysqljs module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default. CVE-2019-14939 Note that Nessu...
Linux Distros Unpatched Vulnerability : CVE-2021-33587
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input...
Medium: nodejs22
Issue Overview: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. CVE-2025-6965 Affected Packages: nodejs2...
Linux Distros Unpatched Vulnerability : CVE-2020-13822
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This could...
Linux Distros Unpatched Vulnerability : CVE-2017-18869
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via...
Malicious code in lynx-elara-antd-nodejs (npm)
The package lynx-elara-antd-nodejs was found to contain malicious code...
Malicious code in @zalastax/nolb-nodejsr (npm)
The package @zalastax/nolb-nodejsr was found to contain malicious code...
Malicious code in ynodejs_i13n (npm)
The package ynodejsi13n was found to contain malicious code...
Malicious code in rts-sdk-api-nodejs (npm)
The package rts-sdk-api-nodejs was found to contain malicious code...
Malicious code in nodejs-prettier-plugin-markdown-terraforming-websockets (npm)
The package nodejs-prettier-plugin-markdown-terraforming-websockets was found to contain malicious code...
Malicious code in nodejs-hydra-astrochemistry-nightmare (npm)
The package nodejs-hydra-astrochemistry-nightmare was found to contain malicious code...
Malicious code in jdevice-nodejs-sdk (npm)
The package jdevice-nodejs-sdk was found to contain malicious code...
Malicious code in pavo-init-sass-loader-nodejs (npm)
The package pavo-init-sass-loader-nodejs was found to contain malicious code...
Malicious code in karma-gatsby-nodejs-europa (npm)
The package karma-gatsby-nodejs-europa was found to contain malicious code...
Malicious code in stratosphere-nodejs-gatsby-cosmogenic (npm)
The package stratosphere-nodejs-gatsby-cosmogenic was found to contain malicious code...
Malicious code in hereaccount-nodejs (npm)
The package hereaccount-nodejs was found to contain malicious code...
