OPENSUSE-SU-2024:14410-1 nodejs-electron-31.7.1-1.1 on GA media

These are all security issues fixed in the nodejs-electron-31.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in middleware-sdk-sqs (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2024-48949

The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits "sig.S.gtesig.eddsa.curve.n || sig.S.isNeg" validation...

RHSA-2019:2925 Red Hat Security Advisory: nodejs:10 security update

Bulletin has no description...

AZL-50094 CVE-2024-47764 affecting package nodejs-nodemon 2.0.3-4

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to...

AZL-50067 CVE-2024-47764 affecting package nodejs-nodemon 2.0.3-5

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to...

@saltcorn/plugins-loader unsanitized plugin name leads to a remote code execution (RCE) vulnerability when creating plugins using git source

Summary When creating a new plugin using the git source, the user-controlled value req.body.name is used to build the plugin directory where the location will be cloned. The API used to execute the git clone command with the user-controlled data is childprocess.execSync. Since the user-controlled...

RHSA-2024:1438 Red Hat Security Advisory: nodejs security update

Bulletin has no description...

RHSA-2024:1424 Red Hat Security Advisory: nodejs security update

Bulletin has no description...

RHSA-2023:1744 Red Hat Security Advisory: rh-nodejs14-nodejs security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2022:0041 Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update

Bulletin has no description...

RHSA-2023:5764 Red Hat Security Advisory: nodejs security update

Bulletin has no description...

RHSA-2023:5765 Red Hat Security Advisory: nodejs security update

Bulletin has no description...

RHSA-2023:5533 Red Hat Security Advisory: nodejs security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2023:2655 Red Hat Security Advisory: nodejs and nodejs-nodemon security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2023:0321 Red Hat Security Advisory: nodejs and nodejs-nodemon security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2022:7044 Red Hat Security Advisory: rh-nodejs14-nodejs security update

Bulletin has no description...

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0314-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0314-1 advisory. Chromium 129.0.6668.70 stable released 2024-09-24 boo1230964 CVE-2024-9120: Use after free in Dawn CVE-2024-9121: Inappropriate implementation in...

OESA-2024-2174 nodejs security update

Node.js is an open-source, cross-platform, JavaScript runtime environment, it executes JavaScript code outside of a browser. Security Fixes: The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request...

OPENSUSE-SU-2024:0314-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 129.0.6668.70 stable released 2024-09-24 boo1230964 CVE-2024-9120: Use after free in Dawn CVE-2024-9121: Inappropriate implementation in V8 CVE-2024-9122: Type Confusion in V8 CVE-2024-9123: Integer overflow in Skia - bump BR for nodej...