5590 matches found
nodejs:16 security update
nodejs 1:16.14.0-4 - Apply lock file validation fixes - Resolves CVE-2021-43616 - Resolves: RHBZ2070012...
Oracle Linux 8 : nodejs:16 (ELSA-2022-4796)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4796 advisory. - Resolves CVE-2021-43616 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not teste...
nodejs-trim-off-newlines: ReDoS via string processing
A flaw was found in nodejs-trim-off-newlines. All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service ReDoS via string processing. The highest threat from this vulnerability is to system availability...
nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes
A regular expression denial of service ReDoS vulnerability was found in nodejs-ansi-regex. This could possibly cause an application using ansi-regex to use an excessive amount of CPU time when matching crafted ANSI escape codes...
nodejs-normalize-url: ReDoS for data URLs
A flaw was found in normalize-url. Node.js has a ReDoS regular expression denial of service issue because it has exponential performance for data...
org.jenkins-ci.plugins:nodejs (>=1.2.2, <=1.2.4), org.jenkins-ci.plugins:pipeline-maven (>=3.0.0-beta-1, <=3.5.12) +1 more potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.16.0)
org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.2, =3.0.0-beta-1, =3.5.12 -...
org.jenkins-ci.plugins:nodejs (>=1.2.5, <=1.2.6) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.16.4)
org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.5, =1.2.6 Source cves: CVE-2021-21643...
org.jenkins-ci.plugins:nodejs (>=1.0, <=1.2.1) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.15.5)
org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.0, =1.2.1 Source cves: CVE-2021-21643...
org.jenkins-ci.plugins:nodejs (>=1.2.5, <=1.2.6) potentially affected by CVE-2021-21645 via org.jenkins-ci.plugins:config-file-provider (2.16.4)
org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.5, =1.2.6 Source cves: CVE-2021-21645...
org.jenkins-ci.plugins:nodejs (>=1.0, <=1.2.1) potentially affected by CVE-2021-21642 via org.jenkins-ci.plugins:config-file-provider (2.15.5)
org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.0, =1.2.1 Source cves: CVE-2021-21642...
org.jenkins-ci.plugins:nodejs (>=1.2.5, <=1.2.6) potentially affected by CVE-2021-21642 via org.jenkins-ci.plugins:config-file-provider (2.16.4)
org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.5, =1.2.6 Source cves: CVE-2021-21642...
org.jenkins-ci.plugins:nodejs (>=1.2.5, <=1.2.6) potentially affected by CVE-2021-21644 via org.jenkins-ci.plugins:config-file-provider (2.16.4)
org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.5, =1.2.6 Source cves: CVE-2021-21644...
org.jenkins-ci.plugins:nodejs (>=1.0, <=1.2.1) potentially affected by CVE-2021-21644 via org.jenkins-ci.plugins:config-file-provider (2.15.5)
org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.0, =1.2.1 Source cves: CVE-2021-21644...
GHSA-F478-XWV9-P93Q Duplicate Advisory: Kerberos for NodeJS allows DLL Injection
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-m2mx-rfpw-jghv. This link is maintained to preserve external references. Original Description The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection ...
CVE-2022-24434
This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodejs service. An attacker could sent the payload again and again so that the service continuously crashes...
CVE-2022-24434
This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodejs service. An attacker could sent the payload again and again so that the service continuously crashes...
CVE-2022-24434 Denial of Service (DoS)
This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodejs service. An attacker could sent the payload again and again so that the service continuously crashes...
CVE-2022-24434
CVE-2022-24434 affects all versions of the Node.js package dicer . A malicious actor can send a modified form to the server, triggering a crash in the nodejs service. Repeated payloads can cause continuous crashes. The connected IBM bulletin confirms the CVE and description but does not provide a...
CVE-2022-24434
This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodejs service. An attacker could sent the payload again and again so that the service continuously crashes...
CVE-2022-24434
This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodejs service. An attacker could sent the payload again and again so that the service continuously crashes...