ELSA-2023-12068: GraalVM Security update (IMPORTANT)

ELSA-2023-12067: GraalVM Security update (IMPORTANT)

ELSA-2023-12066: GraalVM Security update (IMPORTANT)

The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling.

Уязвимость анализатора HTTP-кода llhttp программного обеспечения для управления сетевой инфраструктурой SINEC INS (Infrastructure Network Services), позволяющая нарушителю выполнить произвольный код

Security update for nodejs10

Security update for nodejs12

Security update for nodejs14

Security update for nodejs14

Security update for nodejs12

Important: nodejs:18 security update

Important: nodejs:16 security update

ELSA-2022-7821: nodejs:18 security update (IMPORTANT)

ELSA-2022-6964: nodejs:16 security update (IMPORTANT)

ELSA-2022-6963: nodejs security update (IMPORTANT)

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.

A vulnerability was found in the minimatch package. This flaw allows a ...

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).