GHSA-9M48-R3W4-X35V vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-QV9X-C8C9-RPR8 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-9CCP-4GJG-264G vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-5VVM-WQC8-R5M8 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-CWRJ-J635-2M7W vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-JPGC-8HRM-HVWJ vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-FM6V-WMJP-5RXQ vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-WV7P-RJF3-9FR5 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-9CCP-4GJG-264G vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-CWRJ-J635-2M7W vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-5VVM-WQC8-R5M8 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-QV9X-C8C9-RPR8 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-CH4X-F5C4-36GV vulnerabilities

Vulnerabilities for packages: nodejs...

[SECURITY] [DLA 4067-1] nodejs security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4067-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès February 25, 2025 https://wiki.debian.org/LTS -...

DLA-4067-1 nodejs - security update

Bulletin has no description...

CVE-2025-27146: Improper Neutralization of Special Elements used in a Command

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user. The vulnerability h...

Security Bulletin: Vulnerability in IBM Cloud Pak for Multicloud Management

Summary A vulnerability in IBM Cloud Pak for Multicloud Management has been delivered in a HotFix for 2.3 FP9 Vulnerability Details CVEID:CVE-2024-21534 DESCRIPTION: Jsonpath-plus could allow a remote attacker to execute arbitrary code on the system, caused by improper input sanitization and unsa...

Azure Linux 3.0 Security Update: nodejs / nodejs18 (CVE-2025-22150)

The version of nodejs / nodejs18 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22150 advisory. - Undici is an HTTP/1.1 client. Starting in version 4.5.0 and prior to versions 5.28.5, 6.21.1, and...

[R1] Tenable Identity Exposure Version 3.77.9 Fixes Multiple Vulnerabilities

R1 Tenable Identity Exposure Version 3.77.9 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 02/20/2025 - 12:00 Tenable Identity Exposure leverages third-party software to help provide underlying functionality. Several of the third-party components node.js, Envoy, curl were found to contain...

nodejs:22 security update

nodejs 1:22.13.1-1 - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 1:22.11.0-1 - Update to version 22.11.0 22.4.1-4 - Initial import of nodeJS 22 nodejs-nodemon nodejs-packaging...