Поиск уязвимостей
Количество 11
Количество 11
CVE-2024-27980
Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.
CVE-2024-27980
Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.
CVE-2024-27980
Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.
CVE-2024-27980
Due to the improper handling of batch files in child_process.spawn / c ...
GHSA-fm6v-wmjp-5rxq
Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.
BDU:2024-05853
Уязвимость функций child_process.spawn() и child_process.spawnSync() программной платформы Node.js операционных систем Windows, позволяющая нарушителю обойти ограничения безопасности и выполнить произвольные команды
ALT-PU-2024-7199
ALT-PU-2024-7199: package `node` update to version 20.12.2-alt1
SUSE-SU-2024:2542-1
Security update for nodejs18
SUSE-SU-2024:2496-1
Security update for nodejs18
SUSE-SU-2024:2574-1
Security update for nodejs20
SUSE-SU-2024:2543-1
Security update for nodejs20
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-27980 Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. | CVSS3: 8.1 | 1% Низкий | почти 2 года назад |
 | CVE-2024-27980 Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. | 1% Низкий | больше 2 лет назад | |
 | CVE-2024-27980 Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. | CVSS3: 8.1 | 1% Низкий | почти 2 года назад |
| CVE-2024-27980 Due to the improper handling of batch files in child_process.spawn / c ... | CVSS3: 8.1 | 1% Низкий | почти 2 года назад |
| GHSA-fm6v-wmjp-5rxq Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. | CVSS3: 8.1 | 1% Низкий | почти 2 года назад |
 | BDU:2024-05853 Уязвимость функций child_process.spawn() и child_process.spawnSync() программной платформы Node.js операционных систем Windows, позволяющая нарушителю обойти ограничения безопасности и выполнить произвольные команды | CVSS3: 8.8 | 1% Низкий | больше 2 лет назад |
| ALT-PU-2024-7199 ALT-PU-2024-7199: package `node` update to version 20.12.2-alt1 | CVSS3: 8.8 | 1% Низкий | больше 2 лет назад |
 | SUSE-SU-2024:2542-1 Security update for nodejs18 | больше 2 лет назад | ||
| SUSE-SU-2024:2496-1 Security update for nodejs18 | больше 2 лет назад | ||
| SUSE-SU-2024:2574-1 Security update for nodejs20 | больше 2 лет назад | ||
| SUSE-SU-2024:2543-1 Security update for nodejs20 | больше 2 лет назад |
Уязвимостей на страницу