Lucene search
K

26 matches found

OSV
OSV
added 2025/01/24 2:33 p.m.18 views

SUSE-SU-2025:0232-1 Security update for nodejs20

This update for nodejs20 fixes the following issues: Update to 20.18.2: - CVE-2025-23083: Fixed worker permission bypass via InternalWorker leak in diagnostics bsc1236251 - CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERRPROTO bsc1236250 - CVE-2025-22150: Fixed insufficiently...

7.7CVSS6.1AI score0.01282EPSS
Exploits0References7
Oracle linux
Oracle linux
added 2023/10/05 12:0 a.m.47 views

nodejs:18 security, bug fix, and enhancement update

nodejs 1:18.17.1-1 - Rebase to version 18.17.1 Resolves: rhbz2228940 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build Related: rhbz2226726 nodejs-nodemon 3.0.1-1 - Rebase to 3.0.1 - Resolves: CVE-2022-25883 nodejs-packaging...

9.8CVSS9.7AI score0.02475EPSS
Exploits2
Amazon
Amazon
added 2023/07/19 12:0 a.m.4 views

Medium: nodejs

Issue Overview: A flaw was found in the c-ares package. The aressetsortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity. CVE-2022-49...

8.6CVSS7.7AI score0.02023EPSS
Exploits1
NCSC
NCSC
added 2021/01/07 12:0 a.m.3 views

Vulnerabilities fixed in Node.js

Vulnerabilities have been fixed in Node.js. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure The vulnerability with attribute CVE-2020-1971 can only be exploited be exploited...

8.1CVSS8.5AI score0.16296EPSS
Exploits6
Fedora
Fedora
added 2016/02/22 8:53 p.m.35 views

[SECURITY] Fedora 22 Update: nodejs-0.10.42-4.fc22

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

7.5CVSS1.6AI score0.07013EPSS
Exploits0
OSV
OSV
added 2014/12/09 8:12 p.m.10 views

MGASA-2014-0516 Updated nodejs package fixes security vulnerabilities

Updated nodejs package fixes security vulnerabilities: A memory corruption vulnerability, which results in a denial-of-service, was identified in the versions of V8 that ship with Node.js 0.8 and 0.10. In certain circumstances, a particularly deep recursive workload that may trigger a GC and...

7.5CVSS7.8AI score0.05384EPSS
Exploits2References5
Rows per page
Query Builder