37 matches found
CLSA-2026-1788553383 TuxCare security update for log4js (1 CVE)
TuxCare rebuilt log4js to address 1 CVE. Fixed in 3.0.3-tuxcare.1...
PT-2026-91815
TuxCare rebuilt log4js to address 1 CVE. Fixed in 3.0.3-tuxcare.1...
CLSA-2026-1772583203 TuxCare security update for log4js (1 CVE)
TuxCare rebuilt log4js to address 1 CVE. Fixed in 4.5.1-tuxcare.1...
PT-2026-73856
TuxCare rebuilt log4js to address 2 CVEs. Fixed in 4.5.1-tuxcare.1...
EUVD-2022-0513
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-21704
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders are...
MAL-2025-25523 Malicious code in log4js-vue-log-bus (npm)
The package log4js-vue-log-bus was found to contain malicious code...
Malicious code in log4js-vue-log-bus (npm)
The package log4js-vue-log-bus was found to contain malicious code...
CVE-2022-21704
log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders are world-readable in unix. This could cause problems if log files contain sensitive information. This would affect any users that have not...
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
Summary Multiple vulnerabilities were fixed in IBM Cloud Pak for Watson AIOps version 3.6.2 Vulnerability Details CVEID:CVE-2022-25901 DESCRIPTION: Node.js cookiejar module is vulnerable to a denial of service, caused by an insecure regular expression in the Cookie.parse function. A remote attack...
Debian dla-3229 : node-log4js - security update
The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3229 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3229-1 [email protected] https://www.debian.org/lts/security/...
Debian: Security Advisory (DLA-3229-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-3229-1 node-log4js - security update
Bulletin has no description...
[SECURITY] [DLA 3229-1] node-log4js security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-3229-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 07, 2022 https://wiki.debian.org/LTS -...
Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to log4js-node CVE-2022-21704
Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to log4js-node CVE-2022-21704 with details below Vulnerability Details CVEID: CVE-2022-21704 DESCRIPTION: log4js-node module for Node.js could allow a local authenticated attacker to obtain sensitive...
log4js-node Information Disclosure
The vulnerability of the log4js-node logging library is related to deficiencies in access control for directories. Exploiting this vulnerability could allow attackers to gain access to confidential information stored in logs generated by the file, fileSync, and dateFile applications...
@adobe/pdftools-extract-node-sdk (>=0.5.0-beta, <=0.6.0-beta), @adrian.insua/release-notes-generator (>=1.0.0, <=2.6.2) +136 more potentially affected by CVE-2022-21704 via log4js (>=6.0.0, <=6.3.0)
log4js NPM version =6.0.0, =0.5.0-beta, =1.0.0, =0.1.3, =0.0.1-beta.0, =0.0.1-beta.0, =4.0.2, =0.0.1, =1.0.4, =8.0.1, =0.0.46, =0.1.7 and more Source cves: CVE-2022-21704 Source advisory: OSV:GHSA-82V2-MX6X-WQ7Q...
GHSA-82V2-MX6X-WQ7Q Incorrect Default Permissions in log4js
Impact Default file permissions for log files created by the file, fileSync and dateFile appenders are world-readable in unix. This could cause problems if log files contain sensitive information. This would affect any users that have not supplied their own permissions for the files via the mode...
@adobe/pdftools-extract-node-sdk (>=0.5.0-beta, <=0.6.0-beta), @adrian.insua/release-notes-generator (>=1.0.0, <=2.6.2) +136 more potentially affected by CVE-2022-21704 via log4js (>=6.0.0, <=6.3.0)
log4js NPM version =6.0.0, =0.5.0-beta, =1.0.0, =0.1.3, =0.0.1-beta.0, =0.0.1-beta.0, =4.0.2, =0.0.1, =1.0.4, =8.0.1, =0.0.46, =0.1.7 and more Source cves: CVE-2022-21704 Source advisory: GHSA-82V2-MX6X-WQ7Q...
Incorrect Default Permissions in log4js
Impact Default file permissions for log files created by the file, fileSync and dateFile appenders are world-readable in unix. This could cause problems if log files contain sensitive information. This would affect any users that have not supplied their own permissions for the files via the mode...