CVE-2022-25224: Improper Neutralization of Input During Web Page Generation

Proton v0.2.0 allows an attacker to create a malicious link inside a markdown file. When the victim clicks the link, the application opens the site in the current frame allowing an attacker to host JavaScript code in the malicious link in order to trigger an XSS attack. The 'nodeIntegration'...

SUSE-SU-2022:1694-1 Security update for nodejs8

This update for nodejs8 fixes the following issues: - CVE-2021-44906: Fixed prototype pollution in npm dependency bsc1198247. - CVE-2021-44907: Fixed insuficient sanitation in npm dependency bsc1197283. - CVE-2022-0235: Fixed passing of cookie data and sensitive headers to different hostnames in...

org.jenkins-ci.plugins:nodejs (>=1.0, <=1.2.1) potentially affected by CVE-2018-1000413 via org.jenkins-ci.plugins:config-file-provider (2.15.5)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.0, =1.2.1 Source cves: CVE-2018-1000413...

org.jenkins-ci.plugins:nodejs (>=1.2.5, <=1.2.6) potentially affected by CVE-2018-1000413 via org.jenkins-ci.plugins:config-file-provider (2.16.4)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.5, =1.2.6 Source cves: CVE-2018-10004...

org.jenkins-ci.plugins:nodejs (>=1.0, <=1.2.1) potentially affected by CVE-2018-1000414 via org.jenkins-ci.plugins:config-file-provider (2.15.5)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.0, =1.2.1 Source cves: CVE-2018-1000414...

com.lookout.jenkins:environment-script (1.2.5), org.jenkins-ci.plugins:ivy (>=1.23, <=2.2) +9 more potentially affected by CVE-2017-1000104 via org.jenkins-ci.plugins:config-file-provider (>=2.0, <=2.16.0)

org.jenkins-ci.plugins:config-file-provider MAVEN version =2.0, =1.23, =2.11, =1.25, =1.0, =1.5, =0.1-beta, =1.0, =0.9.0, =0.3, =1.3 Source cves: CVE-2017-1000104 Source advisory: GHSA-6H72-M3XW-FP3C...

org.jenkins-ci.plugins:nodejs (>=1.0, <=1.2.1) potentially affected by CVE-2019-1003014 via org.jenkins-ci.plugins:config-file-provider (2.15.5)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.0, =1.2.1 Source cves: CVE-2019-1003014...

org.jenkins-ci.plugins:nodejs (>=1.2.2, <=1.2.4), org.jenkins-ci.plugins:pipeline-maven (>=3.0.0-beta-1, <=3.5.12) +1 more potentially affected by CVE-2019-1003014 via org.jenkins-ci.plugins:config-file-provider (2.16.0)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.2, =3.0.0-beta-1, =3.5.12 -...

org.jenkins-ci.plugins:nodejs (>=1.2.5, <=1.2.6) potentially affected by CVE-2019-1003014 via org.jenkins-ci.plugins:config-file-provider (2.16.4)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.5, =1.2.6 Source cves: CVE-2019-10030...

OESA-2022-1638 nodejs-grunt security update

Grunt is the JavaScript task runner. Why use a task runner? In one word: automation. The less work you have to do when performing repetitive tasks like minification, compilation, unit testing, linting, etc, the easier your job becomes. After you've configured it, a task runner can do most of that...

CVE-2022-25324

CVE-2022-25324 affects the npm package bignum. The DoS arises from a type-check exception in V8 when verifying the second argument to the powm function, causing crashes that bypass Node try/catch blocks. Affected versions are not fixed by any known version; remediation is not available. Related a...

Vulnerabilities fixed in node.js

Vulnerabilities have been fixed in node.js. The vulnerabilities allow a malicious party to launch attacks that lead to the following categories of damage: Denial-of-Service DoS. Remote code execution User Rights Access to system data For the vulnerability with attribute CVE-2021-44906,...

SUSE-SU-2022:1462-1 Security update for nodejs14

This update for nodejs14 fixes the following issues: - CVE-2022-0778: Fixed a infinite loop in BNmodsqrt reachable when parsing certificates bsc1196877. - CVE-2021-44906: Fixed a prototype pollution in node-minimist bsc1198247. - CVE-2021-44907: Fixed a potential Denial of Service vulnerability i...

SUSE-SU-2022:1461-1 Security update for nodejs12

This update for nodejs12 fixes the following issues: - CVE-2022-0778: Fixed a infinite loop in BNmodsqrt reachable when parsing certificates bsc1196877. - CVE-2021-44906: Fixed a prototype pollution in node-minimist bsc1198247. - CVE-2021-44907: Fixed a potential Denial of Service vulnerability i...

SUSE-SU-2022:1459-1 Security update for nodejs14

This update for nodejs14 fixes the following issues: - CVE-2022-0778: Fixed a infinite loop in BNmodsqrt reachable when parsing certificates bsc1196877. - CVE-2021-44906: Fixed a prototype pollution in node-minimist bsc1198247. - CVE-2021-44907: Fixed a potential Denial of Service vulnerability i...

git-interface operating system command injection vulnerability

git-interface is an interface for using git repositories in node.js by the Russian individual developer Yarkeev Denis. A security vulnerability exists in yarkeev git-interface versions prior to 2.1.1, which stems from a lack of filtering of the git clone and git --upload-pack command line...

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.4.3 security updates and bug fixes

Red Hat Advanced Cluster Management for Kubernetes 2.4.3 General Availability release images. This update provides security fixes, bug fixes, and updates the container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring...

CVE-2022-29080

The npm-dependency-versions package through 0.3.0 for Node.js allows command injection if an attacker is able to call dependencyVersions with a JSON object in which pkgs is a key, and there are shell metacharacters in a value...

CVE-2021-44532 affecting package nodejs for versions less than 16.14.0-1

CVE-2021-44532 affecting package nodejs for versions less than 16.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-44531 affecting package nodejs for versions less than 16.14.0-1

CVE-2021-44531 affecting package nodejs for versions less than 16.14.0-1. An upgraded version of the package is available that resolves this issue...