Lucene search
+L

2 matches found

OSV
OSV
added 2024/08/28 5:11 p.m.18 views

MGASA-2024-0282 Updated nodejs & yarnpkg packages fix security vulnerabilities

Nodejs 22 is the new active LTS branch and 5 CVE are fixed. CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 High CVE-2024-22020 - Bypass network import restriction via data URL Medium CVE-2024-22018 - fs.lstat bypasses permission model Low CVE-2024-36137 - fs.fchown/fchmod bypasses...

8.1CVSS5.7AI score0.01104EPSS
SaveExploits0References11
Mageia
Mageia
added 2024/02/14 11:2 p.m.28 views

Updated mbedtls packages fix security vulnerabilities

This update brings the mbedtls packages from 2.28.3 to the latest 2.28.7 release in the LTS branch, fixing a number of bugs as well the following security vulnerabilities: - Buffer overread in TLS stream cipher suites. - Timing side channel in private key RSA operations. - Buffer overflow in...

7.8AI score
SaveExploits0References9
Rows per page
Query Builder