p PatchFirst

PatchFirst · Latest vulnerabilities

nodejs-packaging vulnerabilities · Page 5

Vulnerabilities published for nodejs-packaging in the last 30 days: 2. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 81

  1. ALSA-2019:2925

    Not ratedFix available

    Important: nodejs:10 security update

    Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (10.16.3). Security Fix(es): * HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511) * HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512) * HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513) * HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514) * HTTP/2: flood using SETTINGS frames results in

    nodejs-packaging nodejs-packaging nodejs-packagingOperating systems
    • Update to 17-3.module_el8.3.0+2023+d2377ea3
    • Update to 17-3.module_el8.4.0+2224+b07ac28e
    • Update to 17-3.module_el8.4.0+2521+c668cc9f
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →