Lucene search
+L

6 matches found

Tenable Nessus
Tenable Nessus
added 2026/07/29 12:0 a.m.6 views

TencentOS Server 4: nodejs20 (TSSA-2026:0665)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0665 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

7.5CVSS6.5AI score0.00789EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.4 views

Amazon Linux 2023 : nodejs22, nodejs22-devel, nodejs22-full-i18n (ALAS2023-2026-1981)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1981 advisory. A use-after-free / double-free in c-ares' query-completion handling. Thesame flaw -- a query's callback being invoked while the query is stilllinked in the channel's internal lookup structures -- is...

5.4AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/05/27 12:0 a.m.19 views

RHEL 9 : nodejs:22 (RHSA-2025:7433)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7433 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

9.8CVSS7.5AI score0.00771EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2025/05/05 11:28 a.m.14 views

Moderate: Red Hat Security Advisory: nodejs:20 security update

An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.3CVSS6.7AI score0.00577EPSS
SaveExploits0References3
AlmaLinux
AlmaLinux
added 2025/05/05 12:0 a.m.12 views

Moderate: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: c-ares: c-ares has a use-after-free in readanswers CVE-2025-31498 For more details about the security issues, including the impact, a CVSS score,...

8.3CVSS6.5AI score0.00577EPSS
SaveExploits0References4
OSV
OSV
added 2023/05/25 10:15 p.m.12 views

AZL-26874 CVE-2023-31147 affecting package nodejs for versions less than 16.20.1-2

c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom are unavailable, c-ares uses rand to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand so will generate predictable output. Input from the random number generator i...

6.5CVSS6.7AI score0.00905EPSS
SaveExploits0References1
Rows per page
Query Builder