2 matches found
SUSE SLES15 Security Update : nodejs22 (SUSE-SU-2026:1509-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1509-1 advisory. Update to version 22.22.2. - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism...
7.5CVSS6.8AI score0.26356EPSS
SaveExploits0References22
PT-2026-28317
Name of the Vulnerable Software and Affected Versions Node.js versions 20.x through 25.x Description A flaw exists in Node.js HMAC verification where a non-constant-time comparison is used when validating signatures provided by a user. This could potentially leak timing information proportional t...
5.9CVSS6.5AI score0.00385EPSS
SaveExploits0References181
20