400 matches found
20 bug fix and enhancement update
An update is available for module.nodejs-nodemon, nodejs-packaging, module.nodejs-packaging, nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list...
22 bug fix and enhancement update
An update is available for module.nodejs-nodemon, nodejs-packaging, module.nodejs-packaging, nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For...
AZL-50094 CVE-2024-47764 affecting package nodejs-nodemon 2.0.3-4
cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to...
AZL-50067 CVE-2024-47764 affecting package nodejs-nodemon 2.0.3-5
cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to...
RHSA-2022:0041 Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update
Bulletin has no description...
RHSA-2023:2655 Red Hat Security Advisory: nodejs and nodejs-nodemon security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2023:0321 Red Hat Security Advisory: nodejs and nodejs-nodemon security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2022:6595 Red Hat Security Advisory: nodejs and nodejs-nodemon security and bug fix update
Bulletin has no description...
RHSA-2021:3281 Red Hat Security Advisory: rh-nodejs12-nodejs and rh-nodejs12-nodejs-nodemon security update
Bulletin has no description...
RHSA-2022:6389 Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security and bug fix update
Bulletin has no description...
RHSA-2021:2931 Red Hat Security Advisory: rh-nodejs12-nodejs and rh-nodejs12-nodejs-nodemon security update
Bulletin has no description...
AZL-49088 CVE-2024-43799 affecting package nodejs-nodemon 2.0.3-4
Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect which executes untrusted code. This issue is patched in send 0.19.0...
AZL-49094 CVE-2024-43800 affecting package nodejs-nodemon 2.0.3-4
serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect may execute untrusted code. This issue is patched in serve-static 1.16.0...
AZL-49091 CVE-2024-43796 affecting package nodejs-nodemon 2.0.3-4
Express.js minimalist web framework for node. In express 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect may execute untrusted code. This issue is patched in express 4.20.0...
AZL-49164 CVE-2024-43799 affecting package nodejs-nodemon 2.0.3-5
Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect which executes untrusted code. This issue is patched in send 0.19.0...
AZL-49155 CVE-2024-43800 affecting package nodejs-nodemon 2.0.3-5
serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect may execute untrusted code. This issue is patched in serve-static 1.16.0...
AZL-49152 CVE-2024-43796 affecting package nodejs-nodemon 2.0.3-5
Express.js minimalist web framework for node. In express 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect may execute untrusted code. This issue is patched in express 4.20.0...
AZL-49161 CVE-2024-45296 affecting package nodejs-nodemon 2.0.3-5
path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event...
AZL-49085 CVE-2024-45296 affecting package nodejs-nodemon 2.0.3-4
path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event...
