Lucene search
+L

378 matches found

OSV
OSV
added 2023/01/15 12:0 a.m.40 views

DLA-3271-1 node-minimatch - security update

Bulletin has no description...

7.5CVSS8.2AI score0.01674EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/01/15 12:0 a.m.34 views

Debian dla-3271 : node-minimatch - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3271 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3271-1 [email protected] https://www.debian.org/lts/security/...

7.5CVSS7.5AI score0.01674EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/01/09 2:55 p.m.7 views

nodejs-minimatch: ReDoS via the braceExpand function

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS7.1AI score0.01674EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2022/12/19 12:0 a.m.42 views

RHEL 8 : nodejs:16 (RHSA-2022:9073)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:9073 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

9.8CVSS7.2AI score0.21514EPSS
Exploits3References18
RedHat Linux
RedHat Linux
added 2022/12/15 4:20 p.m.6 views

nodejs-minimatch: ReDoS via the braceExpand function

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS7.1AI score0.01674EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2022/12/15 12:0 a.m.48 views

CentOS 8 : nodejs:16 (CESA-2022:9073)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:9073 advisory. - nodejs: Improper handling of URI Subject Alternative Names CVE-2021-44531 - nodejs: Certificate Verification Bypass via String Injection CVE-2021-445...

9.8CVSS7AI score0.21514EPSS
Exploits3References8
Tenable Nessus
Tenable Nessus
added 2022/12/09 12:0 a.m.52 views

Oracle Linux 9 : 18 (ELSA-2022-8832)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8832 advisory. nodejs 1:18.12.1-1 - Rebase + CVEs - Resolves: 2142809 - Resolves: 2142830, 2142856 nodejs-nodemon 2.0.20-1 - Rebase to 2.0.20 Resolves: CVE-2022-3517...

8.1CVSS7.3AI score0.14024EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2022/12/08 12:0 a.m.49 views

Oracle Linux 8 : nodejs:18 (ELSA-2022-8833)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8833 advisory. - Rebase to version 18.12.1 Resolves: rhbz2125580 CVE-2022-43548 CVE-2022-3517 - Rebase to version 18.9.1 Resolves: CVE-2022-35255 CVE-2022-35256...

9.1CVSS7.8AI score0.14024EPSS
Exploits2References3
IBM Security Bulletins
IBM Security Bulletins
added 2022/12/07 8:26 p.m.42 views

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to minimatch denial of service (CVE-2022-3517)

Summary Potential denial of service vulnerability in minimatch, CVE-2022-3517 has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2022-3517 DESCRIPTION: minimatch is vulnerable to a denia...

7.5CVSS8.3AI score0.01674EPSS
Exploits0Affected Software1
RedHat Linux
RedHat Linux
added 2022/12/06 3:39 p.m.7 views

nodejs-minimatch: ReDoS via the braceExpand function

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS7.1AI score0.01674EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/12/06 3:35 p.m.5 views

nodejs-minimatch: ReDoS via the braceExpand function

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS7.1AI score0.01674EPSS
Exploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2022/11/30 11:2 p.m.96 views

Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data and Db2 Warehouse® on Cloud Pak for Data

Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse® on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. Vulnerability Details CVEID:CVE-2016-1000023 DESCRIPTION: Minimatch is vulnerable to a denial of service, caused...

8.8CVSS9.3AI score0.02607EPSS
Exploits2Affected Software1
Veracode
Veracode
added 2022/11/16 11:15 p.m.36 views

Regular Expression Denial Of Service (ReDoS)

minimatch is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists when calling the braceExpand function of minimatch.js with specific arguments, resulting in a denial of service...

7.5CVSS7.4AI score0.01674EPSS
Exploits0References8Affected Software9
OSV
OSV
added 2022/10/28 11:4 a.m.4 views

OESA-2022-2028 nodejs-minimatch security update

Converts glob expressions to JavaScript "RegExp" objects. Security Fixes: A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service.CVE-2022-3517...

7.5CVSS6.7AI score0.01674EPSS
Exploits0References2
OSV
OSV
added 2022/10/18 12:0 p.m.8 views

GHSA-F8Q6-P94X-37V3 minimatch ReDoS vulnerability

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS6.8AI score0.01674EPSS
Exploits0References8
Github Security Blog
Github Security Blog
added 2022/10/18 12:0 p.m.69 views

minimatch ReDoS vulnerability

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS7.8AI score0.01674EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2022/10/17 8:15 p.m.7 views

AZL-44946 CVE-2022-3517 affecting package js-jquery 3.5.0-4

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS6.9AI score0.01674EPSS
Exploits0References1
NVD
NVD
added 2022/10/17 8:15 p.m.21 views

CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS0.01674EPSS
Exploits0References5
OSV
OSV
added 2022/10/17 8:15 p.m.2 views

DEBIAN-CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS6.9AI score0.01674EPSS
Exploits0References1
OSV
OSV
added 2022/10/17 8:15 p.m.7 views

AZL-44451 CVE-2022-3517 affecting package nodejs-nodemon 2.0.3-5

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS6.9AI score0.01674EPSS
Exploits0References1
Rows per page
Query Builder