5506 matches found
TencentOS Server 3: nodejs:18 (TSSA-2024:0108)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0108 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
TencentOS Server 4: nodejs20 (TSSA-2025:0415)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0415 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Security Bulletin: Security Vulnerabilities in node.js packages affect IBM Voice Gateway
Summary Security Vulnerabilities in node.js packages affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-58754 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. When Axios prior to versions 0.30.2 and 1.12.0 runs on...
AZL-70613 CVE-2025-13230 affecting package nodejs for versions less than 24.14.1-3
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
AZL-70559 CVE-2025-13226 affecting package nodejs18 18.20.3-11
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
AZL-70607 CVE-2025-13227 affecting package nodejs for versions less than 24.14.1-3
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
AZL-70610 CVE-2025-13226 affecting package nodejs for versions less than 24.14.1-3
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
AZL-70604 CVE-2025-13224 affecting package nodejs for versions less than 24.14.1-3
Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
AZL-70553 CVE-2025-13224 affecting package nodejs18 18.20.3-11
Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
EUVD-2025-48942
AWS Advanced Python Wrapper: Privilege Escalation in Aurora PostgreSQL instance...
EUVD-2025-175588
Malicious code in webpack-dotenv-safe-avior-nodejs npm...
EUVD-2025-177634
Malicious code in neutronstar-bootstrap-nodejs-paleomagnetism npm...
EUVD-2025-177554
Malicious code in nodejs-radioastronomy-tailwindcss-chalk npm...
EUVD-2025-177553
Malicious code in nodejs-sass-loader-carina-duplex npm...
EUVD-2025-178236
Malicious code in jwt-jwt-nodejs-publish npm...
EUVD-2025-178115
Malicious code in levels-event-bionics-nodejs npm...
EUVD-2025-178940
Malicious code in farout-quark-joviology-nodejs npm...
EUVD-2025-180431
Malicious code in andromeda-webpack-nodejs-sadr npm...