AZL-49123 CVE-2024-43799 affecting package reaper for versions less than 3.1.1-13

Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect which executes untrusted code. This issue is patched in send 0.19.0...

AZL-49117 CVE-2024-45296 affecting package reaper for versions less than 3.1.1-13

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event...

CVE-2024-42460 affecting package reaper for versions less than 3.1.1-11

CVE-2024-42460 affecting package reaper for versions less than 3.1.1-11. A patched version of the package is available...

CVE-2024-42461 affecting package reaper for versions less than 3.1.1-11

CVE-2024-42461 affecting package reaper for versions less than 3.1.1-11. A patched version of the package is available...

CVE-2024-42459 affecting package reaper for versions less than 3.1.1-11

CVE-2024-42459 affecting package reaper for versions less than 3.1.1-11. A patched version of the package is available...

AZL-47430 CVE-2024-42460 affecting package reaper for versions less than 3.1.1-11

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whether the leading bit of r and s is zero...

AZL-47421 CVE-2024-42459 affecting package reaper for versions less than 3.1.1-11

In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended...

AZL-47425 CVE-2024-42461 affecting package reaper for versions less than 3.1.1-11

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-37890)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-37890 advisory. - ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding...

CBL Mariner 2.0 Security Update: reaper (CVE-2017-18214)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-18214 advisory. - The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted...

CVE-2024-37890 affecting package reaper for versions less than 3.1.1-10

CVE-2024-37890 affecting package reaper for versions less than 3.1.1-10. A patched version of the package is available...

CVE-2017-18214 affecting package reaper for versions less than 3.1.1-10

CVE-2017-18214 affecting package reaper for versions less than 3.1.1-10. A patched version of the package is available...

CVE-2023-42282 affecting package reaper for versions less than 3.1.1-10

CVE-2023-42282 affecting package reaper for versions less than 3.1.1-10. A patched version of the package is available...

AZL-71317 CVE-2024-6485 affecting package reaper for versions less than 3.1.1-22

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-4068)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-4068 advisory. - The NPM package braces, versions prior to 3.0.3, fails to limit the number of characters it can handle, which...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-28849)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-28849 advisory. - follow-redirects is an open source, drop-in replacement for Node's http and https modules that automatically...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-29041)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29041 advisory. - Express.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alp...

CVE-2018-14040 affecting package reaper for versions less than 3.1.1-1

CVE-2018-14040 affecting package reaper for versions less than 3.1.1-1. This CVE either no longer is or was never applicable...

CVE-2024-4067 affecting package reaper for versions less than 3.1.1-9

CVE-2024-4067 affecting package reaper for versions less than 3.1.1-9. A patched version of the package is available...

CVE-2024-4068 affecting package reaper for versions less than 3.1.1-9

CVE-2024-4068 affecting package reaper for versions less than 3.1.1-9. An upgraded version of the package is available that resolves this issue...