5533 matches found
RHSA-2019:2925 Red Hat Security Advisory: nodejs:10 security update
Bulletin has no description...
AZL-50094 CVE-2024-47764 affecting package nodejs-nodemon 2.0.3-4
cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to...
AZL-50067 CVE-2024-47764 affecting package nodejs-nodemon 2.0.3-5
cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to...
@saltcorn/plugins-loader unsanitized plugin name leads to a remote code execution (RCE) vulnerability when creating plugins using git source
Summary When creating a new plugin using the git source, the user-controlled value req.body.name is used to build the plugin directory where the location will be cloned. The API used to execute the git clone command with the user-controlled data is childprocess.execSync. Since the user-controlled...
RHSA-2024:1438 Red Hat Security Advisory: nodejs security update
Bulletin has no description...
RHSA-2024:1424 Red Hat Security Advisory: nodejs security update
Bulletin has no description...
RHSA-2023:1744 Red Hat Security Advisory: rh-nodejs14-nodejs security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2022:0041 Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update
Bulletin has no description...
RHSA-2023:5764 Red Hat Security Advisory: nodejs security update
Bulletin has no description...
RHSA-2023:5765 Red Hat Security Advisory: nodejs security update
Bulletin has no description...
RHSA-2023:5533 Red Hat Security Advisory: nodejs security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2023:2655 Red Hat Security Advisory: nodejs and nodejs-nodemon security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2023:0321 Red Hat Security Advisory: nodejs and nodejs-nodemon security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2022:7044 Red Hat Security Advisory: rh-nodejs14-nodejs security update
Bulletin has no description...
openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0314-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0314-1 advisory. Chromium 129.0.6668.70 stable released 2024-09-24 boo1230964 CVE-2024-9120: Use after free in Dawn CVE-2024-9121: Inappropriate implementation in...
OESA-2024-2174 nodejs security update
Node.js is an open-source, cross-platform, JavaScript runtime environment, it executes JavaScript code outside of a browser. Security Fixes: The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request...
OPENSUSE-SU-2024:0314-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 129.0.6668.70 stable released 2024-09-24 boo1230964 CVE-2024-9120: Use after free in Dawn CVE-2024-9121: Inappropriate implementation in V8 CVE-2024-9122: Type Confusion in V8 CVE-2024-9123: Integer overflow in Skia - bump BR for nodej...
Malicious code in cktool.target.nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7bb040f385e470a714f5c768de33070b7886ae03cb851e1ecb8812b15e94d46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...