Количество 19
Количество 19
GHSA-x39v-frq9-5hh8
When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all users using the experimental policy mechanism in all active release lines: 18.x and, 20.x. Please note that at the time this CVE was issued, the policy mechanism is an experimental feature of Node.js.
CVE-2023-38552
When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all users using the experimental policy mechanism in all active release lines: 18.x and, 20.x. Please note that at the time this CVE was issued, the policy mechanism is an experimental feature of Node.js.
CVE-2023-38552
When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all users using the experimental policy mechanism in all active release lines: 18.x and, 20.x. Please note that at the time this CVE was issued, the policy mechanism is an experimental feature of Node.js.
CVE-2023-38552
When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all users using the experimental policy mechanism in all active release lines: 18.x and, 20.x. Please note that at the time this CVE was issued, the policy mechanism is an experimental feature of Node.js.
CVE-2023-38552
CVE-2023-38552
When the Node.js policy feature checks the integrity of a resource aga ...
BDU:2023-07176
Уязвимость программной платформы Node.js, связанная с недостаточной проверкой подлинности данных, позволяющая нарушителю отключить проверку целостности
SUSE-SU-2023:4374-1
Security update for nodejs12
SUSE-SU-2023:4373-1
Security update for nodejs12
SUSE-SU-2023:4259-1
Security update for nodejs12
SUSE-SU-2023:4207-1
Security update for nodejs18
SUSE-SU-2023:4155-1
Security update for nodejs18
SUSE-SU-2023:4150-1
Security update for nodejs18
SUSE-SU-2023:4133-1
Security update for nodejs18
SUSE-SU-2023:4132-1
Security update for nodejs18
ELSA-2023-5869
ELSA-2023-5869: nodejs:18 security update (IMPORTANT)
ELSA-2023-5849
ELSA-2023-5849: 18 security update (IMPORTANT)
ELSA-2023-7205
ELSA-2023-7205: nodejs:20 security update (IMPORTANT)
ROS-20240916-03
Множественные уязвимости nodejs
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-x39v-frq9-5hh8 When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all users using the experimental policy mechanism in all active release lines: 18.x and, 20.x. Please note that at the time this CVE was issued, the policy mechanism is an experimental feature of Node.js. | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
 | CVE-2023-38552 When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all users using the experimental policy mechanism in all active release lines: 18.x and, 20.x. Please note that at the time this CVE was issued, the policy mechanism is an experimental feature of Node.js. | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
 | CVE-2023-38552 When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all users using the experimental policy mechanism in all active release lines: 18.x and, 20.x. Please note that at the time this CVE was issued, the policy mechanism is an experimental feature of Node.js. | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
 | CVE-2023-38552 When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all users using the experimental policy mechanism in all active release lines: 18.x and, 20.x. Please note that at the time this CVE was issued, the policy mechanism is an experimental feature of Node.js. | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
 | CVSS3: 7.5 | 0% Низкий | больше 1 года назад | |
| CVE-2023-38552 When the Node.js policy feature checks the integrity of a resource aga ... | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
 | BDU:2023-07176 Уязвимость программной платформы Node.js, связанная с недостаточной проверкой подлинности данных, позволяющая нарушителю отключить проверку целостности | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
 | SUSE-SU-2023:4374-1 Security update for nodejs12 | больше 1 года назад | ||
| SUSE-SU-2023:4373-1 Security update for nodejs12 | больше 1 года назад | ||
| SUSE-SU-2023:4259-1 Security update for nodejs12 | больше 1 года назад | ||
| SUSE-SU-2023:4207-1 Security update for nodejs18 | больше 1 года назад | ||
| SUSE-SU-2023:4155-1 Security update for nodejs18 | больше 1 года назад | ||
| SUSE-SU-2023:4150-1 Security update for nodejs18 | больше 1 года назад | ||
| SUSE-SU-2023:4133-1 Security update for nodejs18 | больше 1 года назад | ||
| SUSE-SU-2023:4132-1 Security update for nodejs18 | больше 1 года назад | ||
| ELSA-2023-5869 ELSA-2023-5869: nodejs:18 security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2023-5849 ELSA-2023-5849: 18 security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2023-7205 ELSA-2023-7205: nodejs:20 security update (IMPORTANT) | больше 1 года назад | ||
 | ROS-20240916-03 Множественные уязвимости nodejs | CVSS3: 7.5 | 9 месяцев назад |
Уязвимостей на страницу