CLSA-2026-1793097555 TuxCare security update for ajv (1 CVE)

TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.5.2-tuxcare.2...

CLSA-2026-1793046415 TuxCare security update for ajv (1 CVE)

TuxCare rebuilt ajv to address 1 CVE. Fixed in 8.1.0-tuxcare.1...

CLSA-2026-1792766110 TuxCare security update for ajv (1 CVE)

TuxCare rebuilt ajv to address 1 CVE. Fixed in 8.17.1-tuxcare.4...

CLSA-2026-1792488470 TuxCare security update for ajv (1 CVE)

TuxCare rebuilt ajv to address 1 CVE. Fixed in 8.11.2-tuxcare.1...

CLSA-2026-1792163462 TuxCare security update for ajv (1 CVE)

TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.5.2-tuxcare.1...

PT-2026-124671

TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.5.2-tuxcare.1...

Astra Linux – Vulnerability in node-ajv

The ajv Another JSON Schema Validator before version 8.18.0 is vulnerable to Regular Expression Denial of Service ReDoS when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax $data reference, which is passed directly to the JavaScript RegExp constructor...

Rocky Linux 8 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging Multiple Vulnerabilities (crlsa-2020_5499)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20205499 advisory. nodejs-y18n: prototype pollution vulnerability CVE-2020-7774 c-ares: aresparsea,aaaareply insufficient naddrttls validation DoS CVE-2020-8277 nodejs-ajv:...

Rocky Linux 8 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging Multiple Vulnerabilities (crlsa-2021_0551)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20210551 advisory. nodejs-npm-user-validate: improper input validation when validating user emails leads to ReDoS CVE-2020-7754 nodejs-y18n: prototype pollution vulnerability...

EUVD-2026-70984

fastify vulnerable to request body replacement via an async validation result collision...

CLSA-2026-1790763286 TuxCare security update for ajv (1 CVE)

TuxCare rebuilt ajv to address 1 CVE. Fixed in 8.6.3-tuxcare.1...

PT-2026-109684

TuxCare rebuilt ajv to address 1 CVE. Fixed in 8.6.3-tuxcare.1...

CLEANSTART-2026-LI51874 ajv (Another JSON Schema Validator) before 8

Security vulnerability affects the argo-workflows package. ajv Another JSON Schema Validator before 8...

PT-2026-108459

Security vulnerability affects the argo-workflows package. ajv Another JSON Schema Validator before 8...

CLSA-2026-1790161390 TuxCare security update for ajv (1 CVE)

TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.10.2-tuxcare.2...

PT-2026-105379

TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.10.2-tuxcare.2...

CLSA-2026-1789034358 TuxCare security update for ajv (1 CVE)

TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.10.2-tuxcare.1...

PT-2026-95987

TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.10.2-tuxcare.1...

CVE-2026-84504

fastify versions before 5.12.2 treat the object resolved by a successful Ajv async validator as the value result protocol used by custom validator compilers. If a request that passes its route schema contains a property named value at the root, fastify replaces the entire request body with that...

CVE-2026-84504

A flaw was found in fastify. An authenticated low-privilege caller can exploit a vulnerability where the framework incorrectly processes the result of an Ajv asynchronous async validator. If a request body contains a root-level property named 'value', fastify replaces the entire request body with...