5590 matches found
MAL-2022-6166 Malicious code in slint-config-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71844446cca16e4b3f681a871d4c858e2a3222aa3c2dc8a0eb5fd6f97c1aaf1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in nodejs-driver (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4ceaf6a066fdce9ab350306c61d927c0ca99cc7d77b8eefe29c778fdfd8758 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in metadata-api-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea84c6a9316d39ddaee318d62563bf1137cb78cce3403ef4d78100a9e5770ecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4904 Malicious code in nodejs-driver (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4ceaf6a066fdce9ab350306c61d927c0ca99cc7d77b8eefe29c778fdfd8758 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4568 Malicious code in metadata-api-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea84c6a9316d39ddaee318d62563bf1137cb78cce3403ef4d78100a9e5770ecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-PFRX-2Q88-QQ97 vulnerabilities
Vulnerabilities for packages: pgadmin4...
CVE-2022-33987 vulnerabilities
Vulnerabilities for packages: pgadmin4...
CVE-2022-33987
The got package before 12.1.0 also fixed in 11.8.5 for Node.js allows a redirect to a UNIX socket...
UBUNTU-CVE-2022-33987
The got package before 12.1.0 also fixed in 11.8.5 for Node.js allows a redirect to a UNIX socket...
Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.5 security updates, images, and bug fixes
Red Hat Advanced Cluster Management for Kubernetes 2.5.0 is now generally available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Moderate: Red Hat Security Advisory: RHV Appliance (rhvm-appliance) security update [ovirt-4.5.0]
Updated RHV-M Appliance packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...
nodejs: Certificate Verification Bypass via String Injection
It was found that node.js did not safely read the x509 certificate generalName format properly, resulting in data injection. A certificate could use a specially crafted extension in order to be successfully validated, permitting an attacker to impersonate a trusted host...
nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite
A flaw was found in the npm package "tar" aka node-tar. Extracting tar files that contain two directories and a symlink with names containing Unicode values that normalize to the same value on Windows systems made it possible to bypass node-tar symlink checks on directories. This allows an...
nodejs: Improper handling of URI Subject Alternative Names
A flaw was found in node.js where it accepted a certificate's Subject Alternative Names SAN entry, as opposed to what is specified by the HTTPS protocol. This flaw allows an active person-in-the-middle to forge a certificate and impersonate a trusted host...
Important: Red Hat Enhancement Advisory: nodejs:12 bug fix and enhancement update
An update for the nodejs:12 module is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Bug Fixes and Enhancements:...
RHEL 7 : rh-nodejs12-nodejs (RHSA-2022:4914)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4914 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
AlmaLinux 8 : nodejs:16 (ALSA-2022:4796)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:4796 advisory. npm: npm ci succeeds when package-lock.json doesn't match package.json CVE-2021-43616 Tenable has extracted the preceding description block directly from the...
CVE-2021-34084
OS command injection vulnerability in Turistforeningen node-s3-uploader through 2.0.3 for Node.js allows attackers to execute arbitrary commands via the metadata function...
Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.6.5 security and bug fix update
The Migration Toolkit for Containers MTC 1.6.5 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
nodejs:16 security update
An update is available for nodejs-nodemon, nodejs, nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Node.js is a software development platform f...