116 matches found
SUSE SLES15 Security Update : nodejs18 (SUSE-SU-2026:4261-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4261-1 advisory. - CVE-2025-22150: undici: insufficiently random values used when defining the boundary for a multipart/form-data request bsc1236258...
Security update for nodejs18
This update for nodejs18 fixes the following issues: CVE-2025-22150: undici: insufficiently random values used when defining the boundary for a multipart/form-data request bsc1236258. CVE-2025-23166: improper error handling in async cryptographic operations crashes process bsc1243218...
SUSE-SU-2026:4261-1 Security update for nodejs18
This update for nodejs18 fixes the following issues: - CVE-2025-22150: undici: insufficiently random values used when defining the boundary for a multipart/form-data request bsc1236258. - CVE-2025-23166: improper error handling in async cryptographic operations crashes process bsc1243218. -...
SUSE SLES12 Security Update : nodejs18 (SUSE-SU-2026:4248-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4248-1 advisory. - CVE-2025-22150: undici: insufficiently random values used when defining the boundary for a multipart/form-data request bsc1236258...
Security update for nodejs18
This update for nodejs18 fixes the following issues: CVE-2025-22150: undici: insufficiently random values used when defining the boundary for a multipart/form-data request bsc1236258. CVE-2025-23166: improper error handling in async cryptographic operations crashes process bsc1243218...
SUSE-SU-2026:4248-1 Security update for nodejs18
This update for nodejs18 fixes the following issues: - CVE-2025-22150: undici: insufficiently random values used when defining the boundary for a multipart/form-data request bsc1236258. - CVE-2025-23166: improper error handling in async cryptographic operations crashes process bsc1243218. -...
CVE-2026-33750 affecting package nodejs18 for versions less than 18.20.3-12
CVE-2026-33750 affecting package nodejs18 for versions less than 18.20.3-12. An upgraded version of the package is available that resolves this issue...
CVE-2026-27135 affecting package nodejs18 for versions less than 18.20.3-12
CVE-2026-27135 affecting package nodejs18 for versions less than 18.20.3-12. A patched version of the package is available...
AZL-71308 CVE-2025-13721 affecting package nodejs18 18.20.3-11
Race in v8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
AZL-70556 CVE-2025-13230 affecting package nodejs18 18.20.3-11
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2025-23166 affecting package nodejs18 for versions less than 18.20.3-7
CVE-2025-23166 affecting package nodejs18 for versions less than 18.20.3-7. A patched version of the package is available...
CVE-2025-47279 affecting package nodejs18 for versions less than 18.20.3-6
CVE-2025-47279 affecting package nodejs18 for versions less than 18.20.3-6. A patched version of the package is available...
Fedora: Security Advisory (FEDORA-2025-e330d34ecc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-27516 affecting package nodejs18 for versions less than 18.20.3-5
CVE-2025-27516 affecting package nodejs18 for versions less than 18.20.3-5. A patched version of the package is available...
CBL Mariner 2.0 Security Update: nodejs / nodejs18 / python-jinja2 (CVE-2025-27516)
The version of nodejs / nodejs18 / python-jinja2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-27516 advisory. - Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the...
AZL-58063 CVE-2025-27516 affecting package nodejs18 for versions less than 18.20.3-5
Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the...
CVE-2024-34064 affecting package nodejs18 for versions less than 18.20.3-4
CVE-2024-34064 affecting package nodejs18 for versions less than 18.20.3-4. A patched version of the package is available...
CVE-2025-22150 affecting package nodejs18 for versions less than 18.20.3-3
CVE-2025-22150 affecting package nodejs18 for versions less than 18.20.3-3. A patched version of the package is available...