CVE-2018-0734 affecting package nodejs 8.11.4-7

CVE-2018-0734 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CVE-2020-8174 affecting package nodejs 8.11.4-7

CVE-2020-8174 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CVE-2021-22918 affecting package nodejs 14.17.0-1

CVE-2021-22918 affecting package nodejs 14.17.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-12116 affecting package nodejs 8.11.4-7

CVE-2018-12116 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CVE-2018-12121 affecting package nodejs 8.11.4-7

CVE-2018-12121 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CVE-2018-7164 affecting package nodejs 8.11.4-7

CVE-2018-7164 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CVE-2018-7167 affecting package nodejs 8.11.4-7

CVE-2018-7167 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CentOS 8 : nodejs:12 (CESA-2021:3073)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3073 advisory. - libuv: out-of-bounds read in uvidnatoascii can lead to information disclosures or crashes CVE-2021-22918 - nodejs-hosted-git-info: Regular Expression...

Photon OS 4.0: Nodejs PHSA-2021-4.0-0074

An update of the nodejs package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0074. The text itself is copyright C VMware, Inc...

SUSE-SU-2021:2620-1 Security update for nodejs8

This update for nodejs8 fixes the following issues: - update to npm 6.14.13 - CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. bsc1187976 - CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service bsc1187977 - CVE-2021-22884: DNS rebinding in --inspect bsc1182620...

CVE-2021-3664

An input validation flaw was found in the nodejs url-parse library, which incorrectly parses a URL that contains backslashes. This flaw allows an attacker to specify a relative URL and cause the browser to redirect to a malicious website. The highest threat from this vulnerability is to integrity...

Moderate Photon OS Security Update - PHSA-2021-4.0-0074

Updates of 'nodejs' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-0074

Updates of 'nodejs' packages of Photon OS have been released...

Security Bulletin: Vulnerability in npm affects IBM VM Recovery Manager HA

Summary There is vulnerability in npm which affects IBM VM Recovery Manager HA Vulnerability Details CVEID: CVE-2019-16775 DESCRIPTION: npm CLI could allow a local attacker to bypass security restrictions, caused by an arbitrary file overwrite vulnerability. An attacker could exploit this...

Denial Of Service (DoS)

nodejs is vulnerable to Denial Of Service DoS. A use-after-free allows an attacker to corrupt memory that would cause an application crash and potentially allow arbitrary code execution...

CVE-2021-32796

A flaw was found in nodejs-xmldom. The xmldom library is an open-source pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Xmldom does not correctly escape special characters when serializing elements removed from their ancestor. This flaw may lead to...

nodejs-ssri: Regular expression DoS (ReDoS) when parsing malicious SRI in strict mode

A flaw was found in ssri package. A malicious string provided by an attacker may lead to Regular Expression Denial of Service ReDoS. This issue only affects consumers using the strict option. The highest threat from this vulnerability is to availability...

nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl()

A regular expression denial of service vulnerability was found in hosted-git-info. If an application allows user input into the affected regular expression regexp function, shortcutMatch or fromUrl, then an attacker could craft a regexp which takes an ever increasing amount of time to process,...

nodejs-normalize-url: ReDoS for data URLs

A flaw was found in normalize-url. Node.js has a ReDoS regular expression denial of service issue because it has exponential performance for data...

RHEL 7 : rh-nodejs12-nodejs and rh-nodejs12-nodejs-nodemon (RHSA-2021:2931)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2931 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...