CLEANSTART-2026-JD77118 Versions of the package cross-spawn before 6

Security vulnerability affects the argo-workflows package. Versions of the package cross-spawn before 6...

CLSA-2026-1780620667 TuxCare security update for cross-spawn (1 CVE)

TuxCare rebuilt cross-spawn to address 1 CVE. Fixed in 6.0.5-tuxcare.1...

CLSA-2026-1780620678 TuxCare security update for cross-spawn (1 CVE)

TuxCare rebuilt cross-spawn to address 1 CVE. Fixed in 7.0.3-tuxcare.1...

CLSA-2026-1776818188 TuxCare security update for cross-spawn (1 CVE)

TuxCare rebuilt cross-spawn to address 1 CVE. Fixed in 3.0.1-tuxcare.1...

CLSA-2026-1773793042 TuxCare security update for cross-spawn (1 CVE)

TuxCare rebuilt cross-spawn to address 1 CVE. Fixed in 0.2.9-tuxcare.1...

CLSA-2026-1773965919 TuxCare security update for cross-spawn (1 CVE)

TuxCare rebuilt cross-spawn to address 1 CVE. Fixed in 5.1.0-tuxcare.1...

PT-2026-74952

TuxCare rebuilt cross-spawn to address 1 CVE. Fixed in 7.0.3-tuxcare.1...

PT-2026-74947

TuxCare rebuilt cross-spawn to address 1 CVE. Fixed in 6.0.5-tuxcare.1...

PT-2026-74514

TuxCare rebuilt cross-spawn to address 1 CVE. Fixed in 3.0.1-tuxcare.1...

PT-2026-74005

TuxCare rebuilt cross-spawn to address 1 CVE. Fixed in 0.2.9-tuxcare.1...

PT-2026-74040

TuxCare rebuilt cross-spawn to address 1 CVE. Fixed in 5.1.0-tuxcare.1...

ROOT-APP-NPM-CVE-2024-21538 CVE-2024-21538 in @rootio/cross-spawn - Patched by Root

Root has patched CVE-2024-21538 in the @rootio/cross-spawn package for Root:npm. Multiple fixed versions available...

Atlassian Jira Service Management Data Center and Server 10.3.0 < 10.3.16 (JSDSERVER-16497)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16497 advisory. - Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to...

Security Bulletin: IBM watsonx Orchestrate Developer Edition is vulnerable to Regular Expression Denial of Service (ReDoS) due to cross-spawn

Summary cross-spawn is used by IBM watsonx Orchestrate Developer Edition as part of image: tools-runtime Vulnerability Details CVEID:CVE-2024-21538 DESCRIPTION: Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service ReD...

DoS (Denial of Service) cross-spawn Dependency in Jira Software Data Center and Server

This High severity DoS Denial of Service vulnerability was introduced in versions 6.0.5 and 10.3.0 of Jira Software Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 7.7 and a CVSS Vector of code:java...

Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.

Summary IBM Maximo Application Suite uses "form-data 4.0.0, org.apache.cxfcxf-core 3.6.7 , net/http/internal v1.24.1, braces 3.0.2 , cross-spawn 7.0.3 , crypto/x509 1.24.1 1.24.3 , github.com/golang-jwt/jwt/v4 github.com/golang-jwt/jwt/v5 v4.5.0 v5.2.1 , httpd 2.4.37 , setuptools 78.0.2 75.8.0 ,...

Security Bulletin: IBM Maximo Application Suite - Manage Component uses cross-spawn-6.0.5.tgz which is vulnerable to CVE-2024-21538

Summary Security Bulletin: IBM Maximo Application Suite - Manage Component uses cross-spawn-6.0.5.tgz which is vulnerable to CVE-2024-21538. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-21538 DESCRIPTION: Versions of the...

NewStart CGSL MAIN 7.02 : nodejs Vulnerability (NS-SA-2025-0245)

The remote NewStart CGSL host, running version MAIN 7.02, has nodejs packages installed that are affected by a vulnerability: - Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service ReDoS due to improper input...

EUVD-2024-3189

Malicious code in bioql PyPI...

Security Bulletin: IBM OpenPages fixes cross-spawn package vulnerability

Summary Vulnerability in the cross-spawn package with IBM OpenPages has been addressed in the latest IBM OpenPages fix packs for both 9.0 and 8.3 versions. Vulnerability Details CVEID:CVE-2024-21538 DESCRIPTION: Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are...