12306 matches found
CVE-2025-23083
With the aid of the diagnosticschannel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage...
CVE-2025-23083
With the aid of the diagnosticschannel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage...
CVE-2025-23088
CVE-2025-23088 entry is rejected/not used as stated in the Initial Description.
CVE-2025-23087
CVE-2025-23087 entry is rejected/not used per CVE Program; it does not represent an active vulnerability.
CVE-2025-23089
CVE-2025-23089 entry is rejected/not used and does not represent an active vulnerability.
CVE-2025-23083
With the aid of the diagnosticschannel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage...
PT-2025-4820 · Node.Js · Node.Js
Name of the Vulnerable Software and Affected Versions: Node.js versions 20, 22, and 23 Description: The issue allows attackers to misuse the diagnostics channel utility, accessing internal worker threads for malicious purposes. This is not limited to workers but also exposes internal workers, whe...
Node.js security vulnerabilities
Node.js is an open source, cross-platform JavaScript runtime environment from the Node.js open source. A security vulnerability exists in Node.js versions 20, 22, and 23 that stems from the diagnosticschannel tool that can hook a worker thread to create an event, allowing an attacker to obtain an...
PT-2025-4819
Name of the Vulnerable Software and Affected Versions Node.js versions prior to the latest supported version Description The issue concerns the use of End-of-Life EOL versions of Node.js, which are no longer supported and do not receive updates, including security patches. This may expose systems...
CVE-2025-23083: Improper Access Control
With the aid of the diagnosticschannel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage...
Number withdrawal
Node.js is an open source, cross-platform JavaScript runtime environment from Node.js Open Source. This CVE number has been withdrawn...
Number withdrawal
Node.js is an open source, cross-platform JavaScript runtime environment from Node.js Open Source. This CVE number has been withdrawn...
Number withdrawal
Node.js is an open source, cross-platform JavaScript runtime environment from Node.js Open Source. This CVE number has been withdrawn...
@apt-repositories/generator (>=1.0.1-dev.120, <=1.0.2-dev.39), @bicou/directus-extension-imagga (>=1.6.3, <=1.6.4) +57 more potentially affected by CVE-2025-22150 via undici (>=7.0.0, <=7.2.2)
undici NPM version =7.0.0, =1.0.1-dev.120, =1.6.3, =24.0.0, =12.0.0, =3.0.0, =0.92.0-alpha-20241217175715-33d88539e49f1b72d6dd1c7e5f8d3a0c16e8dcb9, =2.19.0-alpha.4, =2.19.0-alpha.4, =2.19.0-alpha.4, =2.19.0-alpha.4, =2.19.0-alpha.4, =2.19.0-alpha.4, =2.38.0 and more Source cves: CVE-2025-22150...
Node.js 18.x < 18.20.6 / 20.x < 20.18.2 / 22.x < 22.13.1 / 23.x < 23.6.1 Multiple Vulnerabilities (Tuesday, January 21, 2025 Security Releases).
The version of Node.js installed on the remote host is prior to 18.20.6, 20.18.2, 22.13.1, 23.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the Tuesday, January 21, 2025 Security Releases advisory. - A memory leak could occur when a remote peer abruptly closes the...