38 matches found
CLEANSTART-2026-OM41061 Improper Certificate Validation in Node
Security vulnerability affects the nodejs-24 package. Improper Certificate Validation in Node...
CLEANSTART-2026-XE23259 Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons
Security vulnerability affects the nodejs-24 package. Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons...
CLEANSTART-2026-YO77738 HTTP request smuggling in Node
Security vulnerability affects the nodejs-24 package. HTTP request smuggling in Node...
CLEANSTART-2026-QZ70623 In nghttp2 before version 1
Security vulnerability affects the nodejs-24 package. In nghttp2 before version 1...
CLEANSTART-2026-OH78893 implementation of realpath in libuv < 10
Security vulnerability affects the nodejs-24 package. The implementation of realpath in libuv 10...
CLEANSTART-2026-KV06293 Node
Security vulnerability affects the nodejs-24 package. A Node...
CLEANSTART-2026-ES54062 Node
Security vulnerability affects the nodejs-24 package. Node...
CLEANSTART-2026-MS57961 Node
Security vulnerability affects the nodejs-24 package. Node...
AlmaLinux 9 : nodejs:24 (ALSA-2026:73838)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:73838 advisory. undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation CVE-2026-85152 undici: undici: TLS certificate...
MiracleLinux 8 : nodejs:24 (AXSA:2026-1972:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1972:01 advisory. undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation CVE-2026-85152 undici: undici: TLS certificat...
nodejs:24 security, bug fix, and enhancement update
An update is available for nodejs, module.nodejs, module.nodejs-packaging, module.nodejs-nodemon, nodejs-packaging, nodejs-nodemon. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
Important: Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update
An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
RLSA-2026:73838 Important: nodejs:24 security, bug fix, and enhancement update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation CVE-2026-85152 undici: undici: TLS...
Important: Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update
An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
AlmaLinux 8 : nodejs:24 (ALSA-2026:54371)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54371 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash via...
RHSA-2026:62583 Red Hat Security Advisory: nodejs:24 security update
Bulletin has no description...
Oracle Linux 8 : ELSA-2026-62583-0: / nodejs:24 (ELSA-2026-625830)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-625830 advisory. - deps: update npm/brace-expansion to 5.9.0 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223388 RHEL-223907 RHEL-223792 -...
Important: Red Hat Security Advisory: nodejs:24 security update
An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Oracle Linux 9 : ELSA-2026-61386-0: / nodejs:24 (ELSA-2026-613860)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613860 advisory. - Fix CVE-2026-69152 - brace-expansion Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...