5532 matches found
EUVD-2020-27131
Malware in sbrugna...
Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680626)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680626 advisory. Due to the formatting logic of the console.table function it was not safe to allow user controlled input to be passed to the properties parameter while simultaneousl...
Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680625)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680625 advisory. Accepting arbitrary Subject Alternative Name SAN types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained...
CVE-2025-61687 FlowiseAI/Flosise has File Upload vulnerability
Flowise is a drag & drop user interface to build a customized large language model flow. A file upload vulnerability in version 3.0.7 of FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web...
RockyLinux 10 : nodejs22 (RLSA-2025:8493)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:8493 advisory. nodejs: Remote Crash via SignTraits::DeriveBits in Node.js CVE-2025-23166 Tenable has extracted the preceding description block directly from the...
The vulnerability of the Node.js software platform, related to its dependence on machine-dependent data representations, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Node.js software platform is related to its dependence on machine-dependent data representation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...
ROS-20251006-11
A vulnerability in the permissions model of the Node.js software platform is related to flaws in the processing of HTTP requests. Exploitation of the vulnerability could allow a remote attacker to bypass existing security restrictions and send unauthorized requests. existing security restrictions...
EUVD-2025-22388
Malicious code in bioql PyPI...
EUVD-2023-3097
Malicious code in bioql PyPI...
EUVD-2022-29923
Malicious code in bioql PyPI...
EUVD-2023-2077
Malicious code in bioql PyPI...
EUVD-2023-2419
Malicious code in bioql PyPI...
EUVD-2023-38212
Malicious code in bioql PyPI...
EUVD-2025-0209
Malicious code in bioql PyPI...
EUVD-2025-22265
Malicious code in bioql PyPI...
EUVD-2023-2191
Malicious code in bioql PyPI...
EUVD-2025-26139
Malicious code in bioql PyPI...
EUVD-2025-12598
Malicious code in bioql PyPI...