security update for nodejs
security update for nodejs
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-21637US | high7.5 | — | ||
A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use. Synchronous exceptions t… | ||||
| CVE-2025-59466US | high7.5 | — | ||
We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reachin… | ||||
| CVE-2025-59465US | — | — | ||
A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely clos… | ||||
| CVE-2025-55132US | medium5.3OT erhöht | — | ||
A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via `futimes()` even when the process has only read permissions. Unlike `utime… | ||||
| CVE-2025-55131US | — | — | ||
A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option. Under specific tim… | ||||
| CVE-2025-55130US | critical9.1 | Exploit | ||
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (48)
- Behobennodejs-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-devel-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-devel-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-devel-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-devel-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-devel-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-devel-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-docs-1:20.20.0-1.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-docs-1:20.20.0-1.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-docs-1:20.20.0-1.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-docs-1:20.20.0-1.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-docs-1:20.20.0-1.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-docs-1:20.20.0-1.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-full-i18n-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-full-i18n-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-full-i18n-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-full-i18n-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-full-i18n-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-full-i18n-1:20.20.0-1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-nodemon-0:3.0.1-1.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-nodemon-0:3.0.1-1.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-nodemon-0:3.0.1-1.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-nodemon-0:3.0.1-1.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-nodemon-0:3.0.1-1.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-nodemon-0:3.0.1-1.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-packaging-0:2021.06-5.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-packaging-0:2021.06-5.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-packaging-0:2021.06-5.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-packaging-0:2021.06-5.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-packaging-0:2021.06-5.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-packaging-0:2021.06-5.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-packaging-bundler-0:2021.06-5.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-packaging-bundler-0:2021.06-5.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-packaging-bundler-0:2021.06-5.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-packaging-bundler-0:2021.06-5.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-packaging-bundler-0:2021.06-5.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennodejs-packaging-bundler-0:2021.06-5.module+el9.7.0+23895+0637d423.noarch::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennpm-1:10.8.2-1.20.20.0.1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennpm-1:10.8.2-1.20.20.0.1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennpm-1:10.8.2-1.20.20.0.1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennpm-1:10.8.2-1.20.20.0.1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennpm-1:10.8.2-1.20.20.0.1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Behobennpm-1:10.8.2-1.20.20.0.1.module+el9.7.0+23895+0637d423.x86_64::nodejs:20 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan