944 matches found
glob-parent: Regular Expression Denial of Service
A vulnerability was found in the glob-parent package. Affected versions of this package are vulnerable to Regular expression Denial of Service ReDoS attacks, affecting system availability...
MAL-2023-744 Malicious code in reload-glob (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9d76cc19bc57eec19d1d25f5033ac97363240cb901ec32959baf06e1c1fe3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in reload-glob (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9d76cc19bc57eec19d1d25f5033ac97363240cb901ec32959baf06e1c1fe3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RHEL 7 : rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon (RHSA-2023:0612)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0612 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
Rocky Linux 9 : nodejs and nodejs-nodemon (RLSA-2022:6595)
The remote Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2022:6595 advisory. - npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace or with a workspace flag ie. --workspaces,...
DEBIAN-CVE-2023-0341
A stack buffer overflow exists in the ecglob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution. editorconfig-core-c v0.12.6 resolved this vulnerability by bound checking all write operations over th...
golang: path/filepath: stack exhaustion in Glob
A flaw was found in golang. Calling Glob on a path that contains a large number of path separators can cause a panic issue due to stack exhaustion. This can cause an attacker to impact availability...
golang: io/fs: stack exhaustion in Glob
A flaw was found in the golang standard library, io/fs. Calling Glob on a path that contains a large number of path separators can cause a panic issue due to stack exhaustion. This could allow an attacker to impact availability...
PT-2023-16194 · Unknown +3 · Editorconfig-Core-C +3
Name of the Vulnerable Software and Affected Versions: editorconfig-core-c versions prior to 0.12.6 Description: A stack buffer overflow exists in the ec glob function, allowing an attacker to arbitrarily write to the stack and possibly enabling remote code execution. This issue is resolved in...
[SECURITY] [DLA 3271-1] node-minimatch security update
Debian LTS Advisory DLA-3271-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 15, 2023 https://wiki.debian.org/LTS Package : node-minimatch Version : 3.0.4-3+deb10u1 CVE ID : CVE-2022-3517 A Regular Expression Denial of Service ReDoS vulnerability was foun...
CVE-2021-35065
A vulnerability was found in the glob-parent package. Affected versions of this package are vulnerable to Regular expression Denial of Service ReDoS attacks, affecting system availability...
DEBIAN-CVE-2021-35065
The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...
CVE-2021-35065
The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...
CVE-2021-35065
The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...
UBUNTU-CVE-2021-35065
The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...
CVE-2021-35065
The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...
Code injection
The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...
CVE-2021-35065
The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...
CVE-2021-35065
CVE-2021-35065 : The glob-parent package for Node.js is vulnerable to a Regular Expression Denial of Service (ReDoS) in the enclosure regex, affecting versions before 6.0.1. This can cause an impact to availability under network access with low attacker effort. A remediation is to upgrade glob-pa...
