Lucene search
K

7 matches found

OSV
OSV
added 2025/06/04 12:0 a.m.9 views

ALSA-2025:8514 Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Remote Crash via SignTraits::DeriveBits in Node.js CVE-2025-23166 For more details about the security issues, including the impact, a CVSS...

7.5CVSS7.3AI score0.00304EPSS
Exploits0References4
OSV
OSV
added 2025/05/05 12:0 a.m.13 views

ALSA-2025:4461 Moderate: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: c-ares: c-ares has a use-after-free in readanswers CVE-2025-31498 For more details about the security issues, including the impact, a CVSS score,...

8.3CVSS6.3AI score0.00651EPSS
Exploits0References4
Chainguard
Chainguard
added 2024/07/09 2:15 a.m.6 views

CVE-2024-22020 vulnerabilities

Vulnerabilities for packages: kibana, nodejs...

6.5CVSS6.7AI score0.00133EPSS
Exploits0
OSV
OSV
added 2023/10/26 6:23 a.m.43 views

BIT-2023-39331

A previously disclosed vulnerability CVE-2023-30584 was patched insufficiently in commit 205f1e6. The new path traversal vulnerability arises because the implementation does not protect itself against the application overwriting built-in utility functions with user-defined implementations.Please...

7.7CVSS8.8AI score0.00657EPSS
Exploits0References3Affected Software1
AlmaLinux
AlmaLinux
added 2023/04/04 12:0 a.m.49 views

Moderate: nodejs:16 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs 16.19.1. Security Fixes: glob-parent: Regular Expression Denial of Service...

8.6CVSS8AI score0.00416EPSS
Exploits5References18
Vulnrichment
Vulnrichment
added 2022/08/31 3:10 p.m.5 views

CVE-2022-36045 Account takeover via cryptographically weak PRNG in NodeBB Forum

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. It utilizes web sockets for instant interactions and real-time notifications. utils.generateUUID, a helper function available in essentially all versions of NodeBB as far back as v1.0.1 and...

9CVSS9.5AI score0.00712EPSS
Exploits0References3
OSV
OSV
added 2019/09/30 7:7 a.m.36 views

ALSA-2019:2925 Important: nodejs:10 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs 10.16.3. Security Fixes: HTTP/2: large amount of data requests leads to denial of...

7.8CVSS7.6AI score0.50822EPSS
Exploits1References10
Rows per page
Query Builder