Количество 18
Количество 18
BDU:2023-08046
Уязвимость модуля WebAssembly программной платформы Node.js, позволяющая нарушителю выполнить произвольные команды
ROS-20240916-03
Множественные уязвимости nodejs
CVE-2023-39333
Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly module itself does not have access to, similar to as if the WebAssembly module was a JavaScript module. This vulnerability affects users of any active release line of Node.js. The vulnerable feature is only available if Node.js is started with the `--experimental-wasm-modules` command line option.
CVE-2023-39333
Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly module itself does not have access to, similar to as if the WebAssembly module was a JavaScript module. This vulnerability affects users of any active release line of Node.js. The vulnerable feature is only available if Node.js is started with the `--experimental-wasm-modules` command line option.
CVE-2023-39333
Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly module itself does not have access to, similar to as if the WebAssembly module was a JavaScript module. This vulnerability affects users of any active release line of Node.js. The vulnerable feature is only available if Node.js is started with the `--experimental-wasm-modules` command line option.
CVE-2023-39333
Maliciously crafted export names in an imported WebAssembly module can ...
GHSA-wj24-gwh6-mgh8
Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly module itself does not have access to, similar to as if the WebAssembly module was a JavaScript module. This vulnerability affects users of any active release line of Node.js. The vulnerable feature is only available if Node.js is started with the `--experimental-wasm-modules` command line option.
SUSE-SU-2023:4207-1
Security update for nodejs18
SUSE-SU-2023:4155-1
Security update for nodejs18
SUSE-SU-2023:4150-1
Security update for nodejs18
SUSE-SU-2023:4133-1
Security update for nodejs18
SUSE-SU-2023:4132-1
Security update for nodejs18
RLSA-2023:5869
Important: nodejs:18 security update
RLSA-2023:5849
Important: nodejs:18 security update
ELSA-2023-5869
ELSA-2023-5869: nodejs:18 security update (IMPORTANT)
ELSA-2023-5849
ELSA-2023-5849: 18 security update (IMPORTANT)
RLSA-2023:7205
Important: nodejs:20 security update
ELSA-2023-7205
ELSA-2023-7205: nodejs:20 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-08046 Уязвимость модуля WebAssembly программной платформы Node.js, позволяющая нарушителю выполнить произвольные команды | CVSS3: 5.3 | 0% Низкий | больше 2 лет назад |
 | ROS-20240916-03 Множественные уязвимости nodejs | CVSS3: 7.5 | около 1 года назад | |
 | CVE-2023-39333 Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly module itself does not have access to, similar to as if the WebAssembly module was a JavaScript module. This vulnerability affects users of any active release line of Node.js. The vulnerable feature is only available if Node.js is started with the `--experimental-wasm-modules` command line option. | CVSS3: 5.3 | 0% Низкий | больше 1 года назад |
 | CVE-2023-39333 Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly module itself does not have access to, similar to as if the WebAssembly module was a JavaScript module. This vulnerability affects users of any active release line of Node.js. The vulnerable feature is only available if Node.js is started with the `--experimental-wasm-modules` command line option. | CVSS3: 5.3 | 0% Низкий | около 2 лет назад |
 | CVE-2023-39333 Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly module itself does not have access to, similar to as if the WebAssembly module was a JavaScript module. This vulnerability affects users of any active release line of Node.js. The vulnerable feature is only available if Node.js is started with the `--experimental-wasm-modules` command line option. | CVSS3: 5.3 | 0% Низкий | больше 1 года назад |
| CVE-2023-39333 Maliciously crafted export names in an imported WebAssembly module can ... | CVSS3: 5.3 | 0% Низкий | больше 1 года назад |
| GHSA-wj24-gwh6-mgh8 Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly module itself does not have access to, similar to as if the WebAssembly module was a JavaScript module. This vulnerability affects users of any active release line of Node.js. The vulnerable feature is only available if Node.js is started with the `--experimental-wasm-modules` command line option. | CVSS3: 5.3 | 0% Низкий | больше 1 года назад |
 | SUSE-SU-2023:4207-1 Security update for nodejs18 | около 2 лет назад | ||
| SUSE-SU-2023:4155-1 Security update for nodejs18 | около 2 лет назад | ||
| SUSE-SU-2023:4150-1 Security update for nodejs18 | около 2 лет назад | ||
| SUSE-SU-2023:4133-1 Security update for nodejs18 | около 2 лет назад | ||
| SUSE-SU-2023:4132-1 Security update for nodejs18 | около 2 лет назад | ||
 | RLSA-2023:5869 Important: nodejs:18 security update | 10 дней назад | ||
| RLSA-2023:5849 Important: nodejs:18 security update | 10 дней назад | ||
| ELSA-2023-5869 ELSA-2023-5869: nodejs:18 security update (IMPORTANT) | около 2 лет назад | ||
| ELSA-2023-5849 ELSA-2023-5849: 18 security update (IMPORTANT) | около 2 лет назад | ||
| RLSA-2023:7205 Important: nodejs:20 security update | около 2 лет назад | ||
| ELSA-2023-7205 ELSA-2023-7205: nodejs:20 security update (IMPORTANT) | около 2 лет назад |
Уязвимостей на страницу