https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:56:10.299356+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-01428 bdu:2026-01428 2026-10-02T14:56:10.342117+00:00 bdu:2026-01428 https://cve.radiocsirt.org/vuln/bell-cve-2018-12115 Withdrawn: BELL-CVE-2018-12115 — CVE-2018-12115 does not affect BellSoft software 2026-10-02T14:56:10.342166+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cleanstart-2026-hx85573 Withdrawn: CLEANSTART-2026-HX85573 — Security fixes in nodejs 8.11.4-r0 2026-10-02T14:56:10.342186+00:00

Withdrawn by the publisher.

Affected: CleanStart: nodejs

Package nodejs version 8.11.4-r0 fixes 1 vulnerabilities: CVE-2018-12115

 https://cve.radiocsirt.org/vuln/cnvd-2019-42559 cnvd-2019-42559 2026-10-02T14:56:10.342216+00:00 cnvd-2019-42559 https://cve.radiocsirt.org/vuln/euvd-2026-164735 EUVD-2026-164735 2026-10-02T14:56:10.342229+00:00 EUVD-2026-164735 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12115 fkie_cve-2018-12115 2026-10-02T14:56:10.342239+00:00

In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under the names `'ucs2'`, `'ucs-2'`, `'utf16le'` and `'utf-16le'`), `Buffer#write()` can be abused to write outside of the bounds of a single `Buffer`. Writes that start from the second-to-last position of a buffer cause a miscalculation of the maximum length of the input bytes to be written.

 https://cve.radiocsirt.org/vuln/ghsa-q85m-543x-pwpc GHSA-q85m-543x-pwpc 2026-10-02T14:56:10.342263+00:00

In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under the names `'ucs2'`, `'ucs-2'`, `'utf16le'` and `'utf-16le'`), `Buffer#write()` can be abused to write outside of the bounds of a single `Buffer`. Writes that start from the second-to-last position of a buffer cause a miscalculation of the maximum length of the input bytes to be written.

 https://cve.radiocsirt.org/vuln/gsd-2018-12115 gsd-2018-12115 2026-10-02T14:56:10.342279+00:00 gsd-2018-12115 https://cve.radiocsirt.org/vuln/rhsa-2018:2552 RHSA-2018:2552 — Red Hat Security Advisory: Red Hat OpenShift Application Runtimes Node.js 8.11.4 security update 2026-10-02T14:56:10.342289+00:00

openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang nodejs: Out of bounds (OOB) write via UCS-2 encoding

 https://cve.radiocsirt.org/vuln/suse-su-2018:2647-1 SUSE-SU-2018:2647-1 — Security update for nodejs4 2026-10-02T14:56:10.342315+00:00

Security update for nodejs4

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12115 UBUNTU-CVE-2018-12115 2026-10-02T14:56:10.342330+00:00

Affected: Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs, Ubuntu:Pro:18.04:LTS: nodejs

In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under the names `'ucs2'`, `'ucs-2'`, `'utf16le'` and `'utf-16le'`), `Buffer#write()` can be abused to write outside of the bounds of a single `Buffer`. Writes that start from the second-to-last position of a buffer cause a miscalculation of the maximum length of the input bytes to be written.