Astra Linux – Vulnerability in node-browserify-sign

“browserify-sign” is a package that duplicates the functionality of Node’s crypto public key functions. Much of this functionality is based on Fedor Indutny’s work on “indutny/tls.js”. There is a issue with upper-bound checking in the “dsaVerify” function, which allows an attacker to create...

bud-live-server (>=0.0.0, <=0.0.5), just-a-browserify-server (>=0.0.0, <=1.0.0) potentially affected by unknown CVE via just-a-server (>=0.0.0, <=0.0.1)

just-a-server NPM version =0.0.0, =0.0.0, =0.0.0, =1.0.0 Source cves: unknown CVE Source advisory: GHSA-HGJM-MPF2-R47F...

ROOT-APP-NPM-CVE-2023-46234 CVE-2023-46234 in browserify-sign - Patched by Root

Root has patched CVE-2023-46234 in the browserify-sign package for Root:npm. Multiple fixed versions available...

CLSA-2026-1782521956 TuxCare security update for browserify-sign (1 CVE)

TuxCare rebuilt browserify-sign to address 1 CVE. Fixed in 4.2.1-tuxcare.1...

CLSA-2026-1782521955 TuxCare security update for browserify-sign (1 CVE)

TuxCare rebuilt browserify-sign to address 1 CVE. Fixed in 4.0.4-tuxcare.1...

PT-2026-75182

TuxCare rebuilt browserify-sign to address 1 CVE. Fixed in 4.0.4-tuxcare.1...

PT-2026-75183

TuxCare rebuilt browserify-sign to address 1 CVE. Fixed in 4.2.1-tuxcare.1...

Malicious Package

Overview hermes-development-browserify-framework is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...

CVE-2022-37621

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

EUVD-2025-179965

Malicious code in browserify-sedna-apollo-airbnb npm...

EUVD-2025-176291

Malicious code in solarnebula-browserify-lightyear-nextjs npm...

EUVD-2025-178942

Malicious code in farout-hydrogeology-juno-browserify npm...

EUVD-2025-180253

Malicious code in atlas-browserify-rigel-mira npm...

EUVD-2025-179964

Malicious code in browserify-seismology-vega-quito npm...

EUVD-2025-178063

Malicious code in lithosphere-browserify-express-spectron npm...

EUVD-2025-179969

Malicious code in browserify-cosmiconfig-testcafe-await npm...

EUVD-2025-179019

Malicious code in ethology-zephyr-dorado-browserify npm...

Malicious code in redis-browserify-nuxtjs-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711d716900670192f72189f880361a7e02ddd5ee99dcbecd1465b28f95bee624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-concurrently-outercore-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffa621761675fd2e3ec7b468f01d71eee4ac950beb2e51f7e89d5533a0a6b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...