Most recent entries from all

ALSA-2022:8832 — Moderate: nodejs:18 security, bug fix, and enhancement update

Affected: AlmaLinux:9: nodejs, AlmaLinux:9: nodejs-devel, AlmaLinux:9: nodejs-docs, AlmaLinux:9: nodejs-full-i18n, AlmaLinux:9: nodejs-nodemon, AlmaLinux:9: nodejs-packaging, AlmaLinux:9: nodejs-packaging-bundler, AlmaLinux:9: npm

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (18.12.1). (BZ#2142809, BZ#2142830, BZ#2142834, BZ#2142856)

Security Fix(es):

* nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517) * nodejs: DNS rebinding in inspect via invalid octal IP address (CVE-2022-43548)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2023-02699

certfr-2023-avi-0238 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Elles permettent à u…

certfr-2023-avi-0238

EUVD-2026-239039

fkie_cve-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.

GHSA-f8q6-p94x-37v3 — minimatch ReDoS vulnerability

Affected: npm: minimatch

gsd-2022-3517

NCSC-2026-0325 — Kwetsbaarheden verholpen in Atlassian producten

NCSC-2026-0325

OESA-2022-2028 — nodejs-minimatch security update

Affected: openEuler:20.03-LTS-SP1: nodejs-minimatch, openEuler:20.03-LTS-SP3: nodejs-minimatch, openEuler:22.03-LTS: nodejs-minimatch

Converts glob expressions to JavaScript "RegExp" objects. Security Fix(es): A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.(CVE-2022-3517)

RHSA-2022:8832 — Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update

nodejs-minimatch: ReDoS via the braceExpand function nodejs: DNS rebinding in inspect via invalid octal IP address

RHSA-2022:9040 — Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.3 security update

nodejs-minimatch: ReDoS via the braceExpand function crewjam/saml: Authentication bypass when processing SAML responses containing multiple Assertion elements

UBUNTU-CVE-2022-3517

Affected: Ubuntu:18.04:LTS: node-minimatch, Ubuntu:20.04:LTS: node-minimatch

WID-SEC-W-2022-2338 — Red Hat Enterprise Linux (Advanced Cluster Management): Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux Advanced Cluster Management ausnutzen, um einen Denial of Service Angriff durchzuführen oder die Authentisierung zu umgehen.