Most recent entries from all

certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2026-avi-1165

Withdrawn: CLEANSTART-2026-FL07611 — Security fixes in npm 11.14.0-r2

Withdrawn by the publisher.

Affected: CleanStart: npm

Package npm version 11.14.0-r2 fixes 1 vulnerabilities: CVE-2026-9496

EUVD-2026-333707

fkie_cve-2026-9496

Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec value that triggers the function’s regex replacement and string-manipulation logic, causing excessive CPU consumption and potentially stalling or crashing the process.

GHSA-w4pp-8pjf-rmxw — pacote is vulnerable to Denial of Service (DoS) via the addGitSha function

Affected: npm: pacote

Versions of the package pacote from 11.2.7 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec value that triggers the function’s regex replacement and string-manipulation logic, causing excessive CPU consumption and potentially stalling or crashing the process.

openSUSE-SU-2026:11121-1 — corepack24-24.17.0-1.1 on GA media

corepack24-24.17.0-1.1 on GA media

RHSA-2026:72116 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function

SUSE-SU-2026:22368-1 — Security update for nodejs22

Security update for nodejs22

UBUNTU-CVE-2026-9496

Affected: Ubuntu:14.04:LTS: npm, Ubuntu:Pro:16.04:LTS: npm, Ubuntu:Pro:18.04:LTS: npm, Ubuntu:20.04:LTS: npm, Ubuntu:22.04:LTS: npm, Ubuntu:24.04:LTS: npm, Ubuntu:25.10: npm, Ubuntu:26.04:LTS: npm