267471 matches found
Rocky Linux 9.6 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790253961)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790253961 advisory. - brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time complexity in th...
Rocky Linux 10.2 [CIQ] Security Update: perl-XML-LibXML / perl-XML-LibXML-debuginfo / etc (crlsa-2026_39547)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202639547 advisory. perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names CVE-2026-8177 Tenable has extracted the preceding description block direct...
Rocky Linux 9 [CIQ] Security Update: perl-XML-LibXML / perl-XML-LibXML-debuginfo / etc (crlsa-2026_39553)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202639553 advisory. perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names CVE-2026-8177 Tenable has extracted the preceding description block directly...
Rocky Linux 8 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2024_5814)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20245814 advisory. node-tar: denial of service while parsing a tar file due to lack of folders depth validation CVE-2024-28863 nodejs: Bypass network import restriction via...
CVE-2026-103260: Missing Authorization
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode. Attackers can submit resume requests without verification of the requester's identity or approval permissions, allowing unauthenticated users to advan...
@chocolatey-software/astro (2.10.0), @hyperscale-it/agent-workflow (0.1.0) +1 more potentially affected by CVE-2026-102984 via @astrojs/node (>=11.0.2, <=11.0.3)
@astrojs/node NPM version =11.0.2, =0.1.0, =0.2.2 Source cves: CVE-2026-102984 Source advisory: OSV:GHSA-QH8J-HQJV-7M4X...
GHSA-QH8J-HQJV-7M4X Astro: Malformed port in the Host header can crash the Node adapter
Summary In the Astro Node adapter, a request whose Host header contains a malformed port for example example.com:65536 or example.com:8080:8080 produced an invalid request URL. The fallback intended to recover from an unparseable URL reused the same malformed host, so it failed again and raised a...
@chocolatey-software/astro (2.10.0), @hyperscale-it/agent-workflow (0.1.0) +1 more potentially affected by CVE-2026-102984 via @astrojs/node (>=11.0.2, <=11.0.3)
@astrojs/node NPM version =11.0.2, =0.1.0, =0.2.2 Source cves: CVE-2026-102984 Source advisory: GHSA-QH8J-HQJV-7M4X...
Astro: Malformed port in the Host header can crash the Node adapter
Summary In the Astro Node adapter, a request whose Host header contains a malformed port for example example.com:65536 or example.com:8080:8080 produced an invalid request URL. The fallback intended to recover from an unparseable URL reused the same malformed host, so it failed again and raised a...
org.jasig.portal.fbms:fbms-webapp (>=0.9.0, <=0.9.2), org.webjars.npm:adal-node (0.1.28) +88 more potentially affected by CVE-2026-103387 via org.webjars.npm:uri-js (>=3.0.2, <=4.4.1)
org.webjars.npm:uri-js MAVEN version =3.0.2, =0.9.0, =6.4.0, =1.5.2, =2.1.0, =0.1.3, =1.4.1 - org.webjars.npm:eureka-js-client 4.3.0 and more Source cves: CVE-2026-103387 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-20341610...
CVE-2026-102136
In multi-node deployments, an attacker who had already obtained code execution on one appliance node could submit a value through an internal cluster interface that was written into monitoring configuration on another node without sufficient validation, potentially allowing OS commands to be...
GHSA-2JFJ-6HJV-FM6J vulnerabilities
Vulnerabilities for packages: homepage, lerna, code-server, node-gyp, kibana, commercial-gitlab-rails-ee, prism, commercial-gitlab-rails-ee-fips...
GHSA-8436-99HF-9MMV vulnerabilities
Vulnerabilities for packages: homepage, lerna, code-server, node-gyp, kibana, commercial-gitlab-rails-ee, prism, commercial-gitlab-rails-ee-fips...
GHSA-W293-VG96-WGC3 vulnerabilities
Vulnerabilities for packages: homepage, lerna, code-server, node-gyp, kibana, commercial-gitlab-rails-ee, prism, commercial-gitlab-rails-ee-fips...
GHSA-2GQQ-GQF2-X968 vulnerabilities
Vulnerabilities for packages: homepage, lerna, code-server, node-gyp, kibana, commercial-gitlab-rails-ee, prism, commercial-gitlab-rails-ee-fips...
GHSA-3XPG-4RPP-HHHM vulnerabilities
Vulnerabilities for packages: homepage, lerna, code-server, node-gyp, kibana, commercial-gitlab-rails-ee, prism, commercial-gitlab-rails-ee-fips...
GHSA-RX4F-C7P8-82VQ vulnerabilities
Vulnerabilities for packages: homepage, lerna, code-server, node-gyp, kibana, commercial-gitlab-rails-ee, prism, commercial-gitlab-rails-ee-fips...
GO-2026-6506 vulnerabilities
Vulnerabilities for packages: k8sgateway, juicefs, eks-distro-fips, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, k8sgateway-fips, eks-distro...
