OPENSUSE-SU-2024:12485-1 nodejs-electron-21.2.2-1.1 on GA media

These are all security issues fixed in the nodejs-electron-21.2.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12710-1 nodejs-electron-22.3.0-1.1 on GA media

These are all security issues fixed in the nodejs-electron-22.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13855-1 nodejs-electron-28.2.10-3.1 on GA media

These are all security issues fixed in the nodejs-electron-28.2.10-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13009-1 nodejs-electron-22.3.13-1.1 on GA media

These are all security issues fixed in the nodejs-electron-22.3.13-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12093-1 nodejs-electron-17.4.5-1.1 on GA media

These are all security issues fixed in the nodejs-electron-17.4.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12169-1 nodejs-electron-19.0.7-1.1 on GA media

These are all security issues fixed in the nodejs-electron-19.0.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13340-1 nodejs-electron-25.9.1-2.1 on GA media

These are all security issues fixed in the nodejs-electron-25.9.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13738-1 nodejs-electron-28.2.5-1.1 on GA media

These are all security issues fixed in the nodejs-electron-28.2.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12317-1 nodejs-electron-19.0.15-1.1 on GA media

These are all security issues fixed in the nodejs-electron-19.0.15-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11097-1 nodejs16-16.6.2-2.2 on GA media

These are all security issues fixed in the nodejs16-16.6.2-2.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12609-1 nodejs-electron-21.3.4-1.1 on GA media

These are all security issues fixed in the nodejs-electron-21.3.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11096-1 nodejs14-14.17.5-1.2 on GA media

These are all security issues fixed in the nodejs14-14.17.5-1.2 package on the GA media of openSUSE Tumbleweed...

RLSA-2024:2910 Important: nodejs security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: CONTINUATION frames DoS CVE-2024-27983 nodejs: using the fetch function to retrieve content from an untrusted URL leads to denial of servi...

nodejs security update

An update is available for nodejs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Node.js is a software development platform for building fast and scalable...

Rocky Linux 9 : nodejs:20 (RLSA-2024:2853)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2853 advisory. c-ares: Out of bounds read in aresreadline CVE-2024-25629 nghttp2: CONTINUATION frames DoS CVE-2024-28182 nodejs: using the fetch function to retrieve...

Rocky Linux 9 : nodejs (RLSA-2024:2910)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2910 advisory. nodejs: CONTINUATION frames DoS CVE-2024-27983 nodejs: using the fetch function to retrieve content from an untrusted URL leads to denial of service...

@adinsure-ops/ops-cli (>=5.3.2, <=5.4.1), @pnp/nodejs (>=4.0.0-alpha0-v4nightly.20240416, <=4.1.1) +1 more potentially affected by CVE-2024-35255 via @azure/msal-node (>=2.7.0, <=2.9.1)

@azure/msal-node NPM version =2.7.0, =5.3.2, =4.0.0-alpha0-v4nightly.20240416, =4.1.1 - insomnia-plugin-azure-ad-authentication 1.1.2 Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...

Important: Red Hat Security Advisory: HawtIO 4.0.0 for Red Hat build of Apache Camel 4 Release and security update.

HawtIO 4.0.0 for Red Hat build of Apache Camel 4 GA Release is now available. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product Security has rated this update ...

nodejs-ip: arbitrary code execution via the isPublic() function

A vulnerability was found in the NPM IP Package. This flaw allows an attacker to perform arbitrary code execution and obtain sensitive information via the isPublic function by inducing a Server-Side Request Forgery SSRF attack and obtaining access to normally inaccessible resources...

RHEL 8 : kibana (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - nodejs-set-value: prototype pollution in function set-value CVE-2019-10747 - mixin-deep is vulnerable to...