ROOT-APP-NPM-CVE-2024-56332 CVE-2024-56332 in next - Patched by Root

Root has patched CVE-2024-56332 in the next package for Root:npm. Multiple fixed versions available...

Security Bulletin: IBM Rhapsody Systems Engineering is using next-14.2.15.tgz which is vulnerable to CVE-2024-56332

Summary A security vulnerability was identified in the Next.js package used in our product. We have resolved the issue by updating to a non-vulnerable patched version to ensure the continued security and reliability of our application. Following IBM® Engineering Lifecycle Engineering product is...

Security Bulletin: Multiple Vulnerabilities in IBM Event Processing

Summary IBM Event Processing was affected by multiple vulnerabilities. These are affecting the operator and frontend components. Vulnerability Details CVEID:CVE-2024-55565 DESCRIPTION: nanoid aka Nano ID before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version. CWE:CWE-835: Loop...

CVE-2024-56332 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu...

CVE-2024-56332

creationtimestamp| type| source ---|---|--- 2025-01-03 20:27:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113766304946558973 2025-01-03 22:52:26+00:00| seen| https://t.me/cvedetector/14244 2025-01-05 15:31:04+00:00| seen| https://bsky.app/profile/nuke86.rfeed.it/post/3leywtkrizn2m...

@abuaiman/abujunainah (1.1.4), @abuaiman/spy (1.1.4) +300 more potentially affected by CVE-2024-56332 via next (>=15.0.0, <=15.1.1)

next NPM version =15.0.0, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =1.0.19, =0.1.0, =0.0.4, =0.1.0, =0.1.11, =1.0.0, =0.0.1-alpha, =0.0.4-alpha - @benimaru/ahgas 1.1.4 - @benimaru/asduq 1.1.4 - @benimaru/balon 1.1.4 and more Source cves: CVE-2024-56332 Source advisory...

1ocalendar (1.0.0), 24social-ui (>=1.0.0, <=1.0.5) +2610 more potentially affected by CVE-2024-56332 via next (>=13.0.0, <=13.5.7-canary.37)

next NPM version =13.0.0, =1.0.0, =1.0.51, =1.6.1, =0.5.5, =0.1.23, =2.0.0-rc19, =0.2.47, =0.4.37, =1.3.2, =0.0.2, =1.0.0, =0.0.1, =0.0.6 and more Source cves: CVE-2024-56332 Source advisory: OSV:GHSA-7M27-7GHC-44W9...