35 matches found
CVE-2022-24375 Denial of Service (DoS)
The package node-opcua before 2.74.0 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...
CVE-2020-28433
This affects all versions of package node-latex-pdf...
Security fix for the ALT Linux 10 package node version 14.19.1-alt1
14.19.1-alt1 built April 29, 2022 Vitaly Lipatov in task 298947 --- April 23, 2022 Vitaly Lipatov - new version 14.19.1 with rpmrb script - set openssl = 1.1.1n - CVE-2022-0778: Infinite loop in BNmodsqrt reachable when parsing certificates High...
CVE-2022-21164
The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...
CVE-2022-23812 Malicious Package
This affects the package node-ipc from 10.1.1 and before 10.1.3. This package contains malicious code, that targets users with IP located in Russia or Belarus, and overwrites their files with a heart emoji. Note: from versions 11.0.0 onwards, instead of having malicious code directly in the sourc...
Security fix for the ALT Linux 10 package node version 14.17.4-alt1
14.17.4-alt1 built Aug. 2, 2021 Vitaly Lipatov in task 281579 July 30, 2021 Vitaly Lipatov - new version 14.17.4 with rpmrb script - CVE-2021-22930: Use after free on close http2 on stream canceling High - set npm = 6.14.14 - restore minimum ICU version to 65...
Security fix for the ALT Linux 10 package node version 14.17.2-alt1
July 1, 2021 Vitaly Lipatov 14.17.2-alt1 - new version 14.17.2 with rpmrb script - CVE-2021-22918: Out of bounds read set libuv = 1.41.0-alt3...
CVE-2020-7785 Command Injection
This affects all versions of package node-ps. The injection point is located in line 72 in lib/index.js...
Security fix for the ALT Linux 10 package node version 14.15.4-alt1
Feb. 5, 2021 Vitaly Lipatov 14.15.4-alt1 - new version 14.15.4 with rpmrb script - CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference High - CVE-2020-8265: use-after-free in TLSWrap High - CVE-2020-8287: HTTP Request Smuggling in nodejs Low...
CVE-2020-7789
This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array...
Security fix for the ALT Linux 10 package node version 14.15.1-alt1
Nov. 16, 2020 Vitaly Lipatov 14.15.1-alt1 - new version 14.15.1 with rpmrb script - set c-ares = 1.16.1-alt2 - CVE-2020-8277: Denial of Service through DNS request High...
Security fix for the ALT Linux 9 package node version 14.11.0-alt1
Sept. 16, 2020 Vitaly Lipatov 14.11.0-alt1 - new version 14.11.0 with rpmrb script - CVE-2020-8251: Denial of Service by resource exhaustion CWE-400 due to unfinished HTTP/1.1 requests Critical - CVE-2020-8201: HTTP Request Smuggling due to CR-to-Hyphen conversion High...
Security fix for the ALT Linux 9 package node version 13.8.0-alt1
Feb. 11, 2020 Vitaly Lipatov 13.8.0-alt1 - new version 13.8.0 with rpmrb script - CVE-2019-15606, CVE-2019-15605, CVE-2019-15604...
Security fix for the ALT Linux 10 package node version 8.11.3-alt1
June 30, 2018 Vitaly Lipatov 8.11.3-alt1 - new version 8.11.3 with rpmgs script - 2018-06-12, Version 8.11.3 'Carbon' LTS, @evanlucas - CVE-2018-7167, CVE-2018-7161, CVE-2018-1000168...
