RHSA-2020:0579 Red Hat Security Advisory: nodejs:10 security update

Bulletin has no description...

RHSA-2017:2672 Red Hat Security Advisory: rh-nodejs6-nodejs-qs security update

Bulletin has no description...

RHSA-2017:0002 Red Hat Security Advisory: rh-nodejs4-nodejs and rh-nodejs4-http-parser security update

Bulletin has no description...

RHSA-2017:2912 Red Hat Security Advisory: rh-nodejs4-nodejs-tough-cookie security update

Bulletin has no description...

RHSA-2017:3002 Red Hat Security Advisory: rh-nodejs4-nodejs security and bug fix update

Bulletin has no description...

RHSA-2016:1583 Red Hat Security Advisory: rh-nodejs4-nodejs-minimatch security update

Bulletin has no description...

RHSA-2016:1380 Red Hat Security Advisory: nodejs010-node-gyp and nodejs010-nodejs-qs security and bug fix update

Bulletin has no description...

RHSA-2015:1546 Red Hat Security Advisory: node.js security update

Bulletin has no description...

RHSA-2015:1545 Red Hat Security Advisory: node.js security update

Bulletin has no description...

Security Bulletin: IBM Maximo Application Suite uses micromatch-4.0.5.tgz which is vulnerable to CVE-2024-4067.

Summary IBM Maximo Application Suite uses micromatch-4.0.5.tgz which is vulnerable to CVE-2024-4067. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-4067 DESCRIPTION: Node.js micromatch module is vulnerable to a denial of servic...

K000141047: Multiple Node.js vulnerabilities

Security Advisory Description CVE-2024-22018 A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used. This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-42459)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42459 advisory. - In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing...

The vulnerability of the Node.js software platform, related to improper access control, allows a hacker to execute arbitrary code.

The vulnerability of the Node.js software platform is related to improper access control. Exploiting this vulnerability allows an attacker to execute arbitrary code...

BIT-NODE-2023-46809

Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL which are unpatched are vulnerable to the Marvin Attack - https://people.redhat.com/hkario/marvin/, if PCKS 1 v1.5 padding is allowed when performing RSA descryption using a privat...

CVE-2024-45590

A flaw was found in body-parser. This vulnerability causes denial of service via a specially crafted payload when the URL encoding is enabled. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprisi...

CVE-2024-45590

body-parser is Node.js body parsing middleware. body-parser 1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in...

CVE-2024-45590 body-parser vulnerable to denial of service when url encoding is enabled

body-parser is Node.js body parsing middleware. body-parser 1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in...

CVE-2024-45590 body-parser vulnerable to denial of service when url encoding is enabled

body-parser is Node.js body parsing middleware. body-parser 1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in...

CVE-2024-45590

body-parser is Node.js body parsing middleware. body-parser 1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in...

CVE-2024-45590

CVE-2024-45590 — body-parser (Node.js) Affected: body-parser versions prior to 1.20.3 (Node.js body parsing middleware). Issue: Denial of Service via URL encoding when enabled; a crafted payload can cause the server to handle a flood of requests. Impact: Denial of service (availability impact rep...