https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:41:06 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2018-7158 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2018-7158 https://cve.radiocsirt.org/vuln/cleanstart-2026-kn13673 <p><strong>Affected:</strong> CleanStart: nodejs</p> <p>Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: nodejs</p> <p>Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-kn13673 https://cve.radiocsirt.org/vuln/cnvd-2018-14713 cnvd-2018-14713 https://cve.radiocsirt.org/vuln/cnvd-2018-14713 https://cve.radiocsirt.org/vuln/euvd-2026-164724 EUVD-2026-164724 https://cve.radiocsirt.org/vuln/euvd-2026-164724 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7158 <p>The `&#39;path&#39;` module in the Node.js 4.x release line contains a potential regular expression denial of service (ReDoS) vector. The code in question was replaced in Node.js 6.x and later so this vulnerability only impacts all versions of Node.js 4.x. The regular expression, `splitPathRe`, used within the `&#39;path&#39;` module for the various path parsing functions, including `path.dirname()`, `path.extname()` and `path.parse()` was structured in such a way as to allow an attacker to craft a string, that when passed through one of these functions, could take a significant amount of time to evaluate, potentially leading to a full denial of service.</p> <p>The `&#39;path&#39;` module in the Node.js 4.x release line contains a potential regular expression denial of service (ReDoS) vector. The code in question was replaced in Node.js 6.x and later so this vulnerability only impacts all versions of Node.js 4.x. The regular expression, `splitPathRe`, used within the `&#39;path&#39;` module for the various path parsing functions, including `path.dirname()`, `path.extname()` and `path.parse()` was structured in such a way as to allow an attacker to craft a string, that when passed through one of these functions, could take a significant amount of time to evaluate, potentially leading to a full denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-7158 https://cve.radiocsirt.org/vuln/ghsa-43w8-q5fx-vj5w <p>The `&#39;path&#39;` module in the Node.js 4.x release line contains a potential regular expression denial of service (ReDoS) vector. The code in question was replaced in Node.js 6.x and later so this vulnerability only impacts all versions of Node.js 4.x. The regular expression, `splitPathRe`, used within the `&#39;path&#39;` module for the various path parsing functions, including `path.dirname()`, `path.extname()` and `path.parse()` was structured in such a way as to allow an attacker to craft a string, that when passed through one of these functions, could take a significant amount of time to evaluate, potentially leading to a full denial of service.</p> <p>The `&#39;path&#39;` module in the Node.js 4.x release line contains a potential regular expression denial of service (ReDoS) vector. The code in question was replaced in Node.js 6.x and later so this vulnerability only impacts all versions of Node.js 4.x. The regular expression, `splitPathRe`, used within the `&#39;path&#39;` module for the various path parsing functions, including `path.dirname()`, `path.extname()` and `path.parse()` was structured in such a way as to allow an attacker to craft a string, that when passed through one of these functions, could take a significant amount of time to evaluate, potentially leading to a full denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-43w8-q5fx-vj5w https://cve.radiocsirt.org/vuln/gsd-2018-7158 gsd-2018-7158 https://cve.radiocsirt.org/vuln/gsd-2018-7158 https://cve.radiocsirt.org/vuln/suse-su-2018:0952-1 <p>Security update for nodejs4</p> <p>Security update for nodejs4</p> https://cve.radiocsirt.org/vuln/suse-su-2018:0952-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-7158 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs</p> <p>The `&#39;path&#39;` module in the Node.js 4.x release line contains a potential regular expression denial of service (ReDoS) vector. The code in question was replaced in Node.js 6.x and later so this vulnerability only impacts all versions of Node.js 4.x. The regular expression, `splitPathRe`, used within the `&#39;path&#39;` module for the various path parsing functions, including `path.dirname()`, `path.extname()` and `path.parse()` was structured in such a way as to allow an attacker to craft a string, that when passed through one of these functions, could take a significant amount of time to evaluate, potentially leading to a full denial of service.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs</p> <p>The `&#39;path&#39;` module in the Node.js 4.x release line contains a potential regular expression denial of service (ReDoS) vector. The code in question was replaced in Node.js 6.x and later so this vulnerability only impacts all versions of Node.js 4.x. The regular expression, `splitPathRe`, used within the `&#39;path&#39;` module for the various path parsing functions, including `path.dirname()`, `path.extname()` and `path.parse()` was structured in such a way as to allow an attacker to craft a string, that when passed through one of these functions, could take a significant amount of time to evaluate, potentially leading to a full denial of service.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-7158