security update for nodejs
security update for nodejs
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-59465US | — | — | ||
A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely clos… | ||||
| CVE-2025-55131US | — | — | ||
A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option. Under specific tim… | ||||
| CVE-2025-55130US | critical9.1 | Exploit | ||
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories… | ||||
references
External citations — patches, advisories, analysis.
remediations (24)
- Fixednodejs-1:20.20.0-1.module+el9.6.0+23988+6b9eae47.x86_64::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-1:20.20.0-1.module+el9.6.0+23988+6b9eae47.x86_64::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-1:20.20.0-1.module+el9.6.0+23988+6b9eae47.x86_64::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-devel-1:20.20.0-1.module+el9.6.0+23988+6b9eae47.x86_64::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-devel-1:20.20.0-1.module+el9.6.0+23988+6b9eae47.x86_64::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-devel-1:20.20.0-1.module+el9.6.0+23988+6b9eae47.x86_64::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-docs-1:20.20.0-1.module+el9.6.0+23988+6b9eae47.noarch::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-docs-1:20.20.0-1.module+el9.6.0+23988+6b9eae47.noarch::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-docs-1:20.20.0-1.module+el9.6.0+23988+6b9eae47.noarch::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-full-i18n-1:20.20.0-1.module+el9.6.0+23988+6b9eae47.x86_64::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-full-i18n-1:20.20.0-1.module+el9.6.0+23988+6b9eae47.x86_64::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-full-i18n-1:20.20.0-1.module+el9.6.0+23988+6b9eae47.x86_64::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-nodemon-0:3.0.1-1.module+el9.6.0+23146+be9976bd.noarch::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-nodemon-0:3.0.1-1.module+el9.6.0+23146+be9976bd.noarch::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-nodemon-0:3.0.1-1.module+el9.6.0+23146+be9976bd.noarch::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-packaging-0:2021.06-4.module+el9.6.0+23146+be9976bd.noarch::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-packaging-0:2021.06-4.module+el9.6.0+23146+be9976bd.noarch::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-packaging-0:2021.06-4.module+el9.6.0+23146+be9976bd.noarch::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-packaging-bundler-0:2021.06-4.module+el9.6.0+23146+be9976bd.noarch::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-packaging-bundler-0:2021.06-4.module+el9.6.0+23146+be9976bd.noarch::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednodejs-packaging-bundler-0:2021.06-4.module+el9.6.0+23146+be9976bd.noarch::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednpm-1:10.8.2-1.20.20.0.1.module+el9.6.0+23988+6b9eae47.x86_64::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednpm-1:10.8.2-1.20.20.0.1.module+el9.6.0+23988+6b9eae47.x86_64::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixednpm-1:10.8.2-1.20.20.0.1.module+el9.6.0+23988+6b9eae47.x86_64::nodejs:20 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan