Ubuntu 18.04 LTS / 20.04 LTS : thenify vulnerability (USN-6016-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6016-1 advisory. It was discovered that thenify incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted inpu...

Fedora: Security Advisory for yarnpkg (FEDORA-2023-18fd476362)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 36 : yarnpkg (2023-18fd476362)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-18fd476362 advisory. Add patches for CVE-2021-43138, CVE-2022-3517, CVE-2020-7677 Tenable has extracted the preceding description block directly from the Fedora security...

Debian dla-3128 : node-thenify - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3128 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3128-1 [email protected] https://www.debian.org/lts/security/...

CVE-2020-7677

This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is provided to the eval function without any sanitization...

CVE-2020-7677

This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is provided to the eval function without any sanitization...

CVE-2020-7677 Arbitrary Code Execution

This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is provided to the eval function without any sanitization...