9 matches found
RHEL 7 : rh-nodejs8-nodejs (RHSA-2020:2625)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2625 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
Moderate: Red Hat Security Advisory: rh-nodejs8-nodejs security update
An update for rh-nodejs8-nodejs is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2017-18077
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service ReDoS attacks, as demonstrated by an expand argument containing many comma characters...
CVE-2017-18077
creationtimestamp| type| source ---|---|--- 2018-01-29 15:50:46+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-832h-xg76-4gv6...
enfscopy (>=0.0.3, <=0.1.0), enfsensure (>=0.0.1, <=0.1.0) +7 more potentially affected by CVE-2017-18077 via brace-expansion (>=1.1.0, <=1.1.5)
brace-expansion NPM version =1.1.0, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =1.0.9, =0.0.1, =0.0.3 - thehelp-project 3.5.1 - zero.lib 0.0.2 Source cves: CVE-2017-18077 Source advisory: OSV:GHSA-832H-XG76-4GV6...
CVE-2017-18077
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service ReDoS attacks, as demonstrated by an expand argument containing many comma characters...
CVE-2017-18077
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service ReDoS attacks, as demonstrated by an expand argument containing many comma characters...
CVE-2017-18077
CVE-2017-18077 : The brace-expansion package’s index.js is vulnerable to a Regular Expression Denial of Service (ReDoS) when given an expand argument with many comma characters. Affected: brace-expansion prior to 1.1.7. Impact and exploit details are documented in the connected sources. Remediati...
