5461 matches found
GHSA-PX8P-9VWX-VF98 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee, tileserver-gl-fips, librechat, langfuse-fips, tileserver-gl, langfuse, commercial-gitlab-rails-ee-fips, lambda-nodejs...
CVE-2026-45820 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee, tileserver-gl-fips, librechat, langfuse-fips, tileserver-gl, langfuse, commercial-gitlab-rails-ee-fips, lambda-nodejs...
CVE-2026-15157 affecting package nodejs for versions less than 24.20.0-1
CVE-2026-15157 affecting package nodejs for versions less than 24.20.0-1. An upgraded version of the package is available that resolves this issue...
RHSA-2026:62583 Red Hat Security Advisory: nodejs:24 security update
Bulletin has no description...
RHSA-2026:62416 Red Hat Security Advisory: nodejs:22 security update
Bulletin has no description...
Oracle Linux 8 : ELSA-2026-62219-0: / nodejs:22 (ELSA-2026-622190)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622190 advisory. - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-235693 RHEL-235688 RHEL-235662 nodejs-nodemon - Rebase...
Oracle Linux 8 : ELSA-2026-62583-0: / nodejs:24 (ELSA-2026-625830)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-625830 advisory. - deps: update npm/brace-expansion to 5.9.0 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223388 RHEL-223907 RHEL-223792 -...
Important: Red Hat Security Advisory: nodejs:24 security update
An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Malicious Package
Overview cminhouse-api-gateway-nodejs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
RHSA-2026:62219 Red Hat Security Advisory: nodejs:22 security update
Bulletin has no description...
Important: Red Hat Security Advisory: nodejs:22 security update
An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Malicious code in cminhouse-api-gateway-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42971bbb30a4cb0a1da27be3953339fdbda449e4d10e997aac72212df0a8b1d index.js is wired as the package's postinstall script and also runs on require via main. After skipping CI/test/Docker environments guards on...
MAL-2026-15815 Malicious code in cminhouse-api-gateway-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42971bbb30a4cb0a1da27be3953339fdbda449e4d10e997aac72212df0a8b1d index.js is wired as the package's postinstall script and also runs on require via main. After skipping CI/test/Docker environments guards on...
RockyLinux 8 : nodejs:22 (RLSA-2026:62219)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62219 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...
Oracle Linux 9 : ELSA-2026-61383-0: / nodejs:22 (ELSA-2026-613830)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613830 advisory. - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 nodejs-nodemon Tenable...
MiracleLinux 9 : nodejs:22 (AXSA:2026-1738:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1738:01 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion vi...
Oracle Linux 9 : ELSA-2026-61386-0: / nodejs:24 (ELSA-2026-613860)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613860 advisory. - Fix CVE-2026-69152 - brace-expansion Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...
Important: Red Hat Security Advisory: nodejs:22 security update
An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...