146 matches found
Rocky Linux 8 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging / nodejs-packaging-bundler Multiple Vulnerabilities (crlsa-2023_5362)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20235362 advisory. nodejs: Permissions policies can be bypassed via Module.load CVE-2023-32002 nodejs-semver: Regular expression denial of service CVE-2022-25883 nodejs:...
Rocky Linux 9 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging / nodejs-packaging-bundler Multiple Vulnerabilities (crlsa-2023_5363)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20235363 advisory. nodejs: Permissions policies can be bypassed via Module.load CVE-2023-32002 nodejs-semver: Regular expression denial of service CVE-2022-25883 nodejs:...
Rocky Linux 8 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging Multiple Vulnerabilities (crlsa-2023_5360)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20235360 advisory. nodejs: Permissions policies can be bypassed via Module.load CVE-2023-32002 nodejs-semver: Regular expression denial of service CVE-2022-25883 nodejs:...
Astra Linux – Vulnerability in node-semver
Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...
ROOT-APP-NPM-CVE-2022-25883 CVE-2022-25883 in semver - Patched by Root
Root has patched CVE-2022-25883 in the semver package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2021-43307 CVE-2021-43307 in semver-regex - Patched by Root
Root has patched CVE-2021-43307 in the semver-regex package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2021-3795 CVE-2021-3795 in semver-regex - Patched by Root
Root has patched CVE-2021-3795 in the semver-regex package for Root:npm. Multiple fixed versions available...
CLSA-2026-1784509771 TuxCare security update for semver (1 CVE)
TuxCare rebuilt semver to address 1 CVE. Fixed in 7.0.0-tuxcare.1...
CLSA-2026-1779065204 TuxCare security update for semver (1 CVE)
TuxCare rebuilt semver to address 1 CVE. Fixed in 7.3.5-tuxcare.1...
CLSA-2026-1776386161 TuxCare security update for semver (1 CVE)
TuxCare rebuilt semver to address 1 CVE. Fixed in 5.6.0-tuxcare.1...
CLSA-2026-1773015264 TuxCare security update for semver (1 CVE)
TuxCare rebuilt semver to address 1 CVE. Fixed in 5.0.3-tuxcare.1...
CLSA-2026-1773015263 TuxCare security update for semver (1 CVE)
TuxCare rebuilt semver to address 1 CVE. Fixed in 4.3.6-tuxcare.1...
CLSA-2026-1777395480 nodejs: Fix of 3 CVEs
CVE-2022-25883: fix ReDoS in bundled npm semver new Range and parseComparator caused by unbounded whitespace expansion in version ranges - CVE-2026-21710: fix HTTP prototype pollution in http.get/request via headersDistinct option by using null-prototype objects for header storage -...
Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the npm semver package
Summary Due to use of the npm semver package, DevOps Test Performance and Rational Performance Tester contain a potential Regular Expression Denial of Service ReDoS vulnerability. Vulnerability Details CVEID:CVE-2022-25883 DESCRIPTION: Versions of the package semver before 7.5.2 are vulnerable to...
DoS (Denial of Service) semver Dependency in Bitbucket Data Center and Server
This High severity DoS Denial of Service vulnerability known as CVE-2022-25883 was introduced in versions 9.4.16 and 10.1.1 of Bitbucket Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...
Atlassian Jira Service Management Data Center and Server 11.3.x < 11.3.1 (JSDSERVER-16496)
The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16496 advisory. - Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service...
RockyLinux 8 : nodejs:18 (RLSA-2023:5362)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:5362 advisory. nodejs: Permissions policies can be bypassed via Module.load CVE-2023-32002 nodejs-semver: Regular expression denial of service CVE-2022-25883 nodejs:...
EUVD-2017-0328
Malware in sbrugna...