CLEANSTART-2026-OH78893 implementation of realpath in libuv < 10

Security vulnerability affects the nodejs-24 package. The implementation of realpath in libuv 10...

Astra Linux – Vulnerability in Node.js

Certain build processes for libuv and Node.js for 32-bit systems, such as the nodejs binary package through nodejs20.19.0+dfsg-2i386.deb for Debian GNU/Linux, have inconsistent offt size settings. For example, when building on the i386 architecture for Debian GNU/Linux, FILEOFFSETBITS=64 is alway...

ttyd

ttyd - Comparte tu terminal a través de la web ttyd es una herramienta simple de línea de comandos para compartir la terminal a través de la web. Características Construido sobre libuv y WebGL2 para velocidad Terminal completamente funcional con soporte para CJK e IME Soporte de transferencia de...

[SECURITY] Fedora 45 Update: ocaml-luv-0.5.14-12.fc45

Luv is a binding to libuv, the cross-platform C library that does asynchronous I/O in Node.js and runs its main loop. Besides asynchronous I/O, libuv also supports multiprocessing and multithreading. Multiple event loops can be run in different threads. Libuv also exposes a lot of other...

Astra Linux – Vulnerability in libuv1

libuv is a multi-platform support library that focuses on asynchronous I/O operations. The uvgetaddrinfo function in src/unix/getaddrinfo.c and its Windows counterpart src/win/getaddrinfo.c truncates hostnames to 256 characters before calling getaddrinfo. This behavior can be exploited to generat...

Rocky Linux 8.8 [CIQ] Security Update: libuv / libuv-debuginfo / libuv-debugsource / libuv-devel (ciqsa-2026_0345)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260345 advisory. This advisory aggregates security fixes for the libuv SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-24806. Tenable has extracted the preceding description blo...

Rocky Linux 9 [CIQ] Security Update: libuv / libuv-debuginfo / libuv-debugsource / libuv-devel (crlsa-2024_4756)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20244756 advisory. libuv: Improper Domain Lookup that potentially leads to SSRF attacks CVE-2024-24806 Tenable has extracted the preceding description block directly from the CIQ...

AlmaLinux 9.2 [TuxCare] Security Update: libuv / libuv-devel / libuv-static (ALMALINUX9.2:CLSA-2025:1762363908)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762363908 advisory. - libuv is a multi-platform support library with a focus on asynchronous I/O. The uvgetaddrinfo function in src/unix/getaddrinfo.c and its...

Rocky Linux 8 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2021_3073)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20213073 advisory. nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl CVE-2021-23362 nodejs-ssri: Regular expression DoS ReDoS when...

Rocky Linux 8 [CIQ] Security Update: libuv / libuv-debuginfo / libuv-debugsource / libuv-devel (crlsa-2024_4247)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20244247 advisory. libuv: Improper Domain Lookup that potentially leads to SSRF attacks CVE-2024-24806 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: libuv / libuv-debuginfo / libuv-debugsource / libuv-devel (crlsa-2021_3075)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20213075 advisory. libuv: out-of-bounds read in uvidnatoascii can lead to information disclosures or crashes CVE-2021-22918 Tenable has extracted the preceding description block...

Rocky Linux 8 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2021_3074)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20213074 advisory. nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl CVE-2021-23362 nodejs-ssri: Regular expression DoS ReDoS when...

Rocky Linux 8.6 [CIQ] Security Update: libuv / libuv-debuginfo / libuv-debugsource / libuv-devel Multiple Vulnerabilities (ciqsa-2026_0094)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260094 advisory. This advisory aggregates security fixes for the libuv SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2024-24806, CVE-2020-8252. Tenable has extracted the...

Photon OS 5.0: Libuv PHSA-2024-5.0-91-0213

An update of the libuv package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0213. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libuv PHSA-2024-5.0-92-0213

An update of the libuv package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-92-0213. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libuv PHSA-2024-5.0-90-0213

An update of the libuv package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-90-0213. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 10 : nodejs24 (ELSA-2026-35841)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-35841 advisory. 1:24.18.0-1.0.1 - Update upstream references 1:24.18.0-1 - Update to version 24.18.0 1:24.14.1-3 - De-bundle c-ares and libuv Tenable has extracted t...

CVE-2026-32766 vulnerabilities

Vulnerabilities for packages: uv, wasmcloud, mise, pixi...

MiracleLinux 8 : nodejs:14 (AXSA:2021-2343:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2343:01 advisory. nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl CVE-2021-23362 nodejs-ssri: Regular expression DoS ReDoS...

MiracleLinux 8 : libuv-1.41.1-1.el8 (AXSA:2021-2313:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-2313:02 advisory. libuv: out-of-bounds read in uvidnatoascii can lead to information disclosures or crashes CVE-2021-22918 Tenable has extracted the preceding description bloc...