Security Bulletin: IBM Maximo Application Suite uses grpc-js-1.8.21.tgz which is vulnerable to CVE-2024-37168

Summary IBM Maximo Application Suite uses grpc-js-1.8.21.tgz which is vulnerable to CVE-2024-37168. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-37168 DESCRIPTION: gRPC on Node.js is vulnerable to a denial of service, caused ...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to denial of service vulnerability in gRPC on Node.js [CVE-2024-37168]

Summary Potential denial of service vulnerability in gRPC on Node.js CVE-2024-37168 have been identified that could affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-3716...

CVE-2024-37168 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard...

CVE-2024-37168 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard...

-temp-electron-manager-somiibo (=0.0.200), 0.extends.wechat (>=1.0.51 <=1.0.65) +20094 more potentially affected by CVE-2024-37168 via @grpc/grpc-js (>=0.1.0 <=1.8.21)

@grpc/grpc-js NPM version =0.1.0, =1.0.51, =0.1.0, =0.1.0, =5.0.0, =0.0.2, =0.0.1, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.2 - 84447xe5t8 =1.0.0 and more Source cves: CVE-2024-37168 Source advisory: OSV:GHSA-7V5V-9H63-CJ86...

@a11ywatch/core (=0.8.13), @a11ywatch/mav (>=0.7.17 <=0.7.27) +55 more potentially affected by CVE-2024-37168 via @grpc/grpc-js (>=1.9.0 <=1.9.14)

@grpc/grpc-js NPM version =1.9.0, =0.7.17, =0.61.0, =1.61.0, =0.0.5, =0.0.6, =0.0.8, =0.0.11, =0.0.5, =1.0.1, =0.6.0, =0.1.11, =0.1.21 and more Source cves: CVE-2024-37168 Source advisory: OSV:GHSA-7V5V-9H63-CJ86...