Fedora 31 : 1:libuv / 1:nodejs (2020-595ce5e3cc)

Update to 12.14.1 Add new subpackage nodejs-full-i18n to provide non-English locale and Unicode support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as...

@magento/upward-spec (>=2.0.0-rc.19, <=3.0.0), @nowtilus/nemo-lib (>=0.3.0, <=0.3.3) +18 more potentially affected by CVE-2019-17592 via csv-parse (>=4.0.0, <=4.4.5)

csv-parse NPM version =4.0.0, =2.0.0-rc.19, =0.3.0, =5.4.0, =0.3.0, =3.3.1, =5.4.0-RC1, =1.0.35, =0.6.2, =2.1.0-beta.2939, =4.2.3, =0.0.1, =0.1.4, =0.44.1, =0.48.7 and more Source cves: CVE-2019-17592 Source advisory: OSV:GHSA-582F-P4PG-XC74...

CVE-2019-17592

CVE-2019-17592 affects Node.js csv-parse prior to 4.4.6, where a malformed regular expression in the __isInt() function under the cast option enables a Denial of Service with crafted input. The vulnerability is tied to the csv-parse module, with CVSS v3.1 base score 7.5 (high) and CVSS v2 base sc...