MAL-2022-2216 Malicious code in courier-plugin-sdk-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 014002d316a160561d5ca8a30a271023a3de0d8d96de4c938aa0da0a1bdac3b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodejs-gcloud-pubsub-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40eb63d0a4ed52650bf16d9a4d3a4cc2a9e305ba71dadfa7f7276be2f36ab743 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slint-config-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71844446cca16e4b3f681a871d4c858e2a3222aa3c2dc8a0eb5fd6f97c1aaf1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6166 Malicious code in slint-config-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71844446cca16e4b3f681a871d4c858e2a3222aa3c2dc8a0eb5fd6f97c1aaf1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4904 Malicious code in nodejs-driver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4ceaf6a066fdce9ab350306c61d927c0ca99cc7d77b8eefe29c778fdfd8758 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4568 Malicious code in metadata-api-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea84c6a9316d39ddaee318d62563bf1137cb78cce3403ef4d78100a9e5770ecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodejs-driver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4ceaf6a066fdce9ab350306c61d927c0ca99cc7d77b8eefe29c778fdfd8758 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metadata-api-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea84c6a9316d39ddaee318d62563bf1137cb78cce3403ef4d78100a9e5770ecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-PFRX-2Q88-QQ97 vulnerabilities

Vulnerabilities for packages: pgadmin4...

CVE-2022-33987

The got package before 12.1.0 also fixed in 11.8.5 for Node.js allows a redirect to a UNIX socket...

CVE-2022-33987 vulnerabilities

Vulnerabilities for packages: pgadmin4...

UBUNTU-CVE-2022-33987

The got package before 12.1.0 also fixed in 11.8.5 for Node.js allows a redirect to a UNIX socket...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.5 security updates, images, and bug fixes

Red Hat Advanced Cluster Management for Kubernetes 2.5.0 is now generally available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: RHV Appliance (rhvm-appliance) security update [ovirt-4.5.0]

Updated RHV-M Appliance packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

nodejs: Certificate Verification Bypass via String Injection

It was found that node.js did not safely read the x509 certificate generalName format properly, resulting in data injection. A certificate could use a specially crafted extension in order to be successfully validated, permitting an attacker to impersonate a trusted host...

nodejs: Improper handling of URI Subject Alternative Names

A flaw was found in node.js where it accepted a certificate's Subject Alternative Names SAN entry, as opposed to what is specified by the HTTPS protocol. This flaw allows an active person-in-the-middle to forge a certificate and impersonate a trusted host...

Important: Red Hat Enhancement Advisory: nodejs:12 bug fix and enhancement update

An update for the nodejs:12 module is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Bug Fixes and Enhancements:...

nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite

A flaw was found in the npm package "tar" aka node-tar. Extracting tar files that contain two directories and a symlink with names containing Unicode values that normalize to the same value on Windows systems made it possible to bypass node-tar symlink checks on directories. This allows an...

AlmaLinux 8 : nodejs:16 (ALSA-2022:4796)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:4796 advisory. npm: npm ci succeeds when package-lock.json doesn't match package.json CVE-2021-43616 Tenable has extracted the preceding description block directly from the...

RHEL 7 : rh-nodejs12-nodejs (RHSA-2022:4914)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4914 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...