Lucene search
FedoraFEDORA:57226209E89EHistoryFeb 28, 2024 - 1:41 a.m.
[SECURITY] Fedora 38 Update: yarnpkg-1.22.21-2.fc38
2024-02-2801:41:33
lists.fedoraproject.org
5
fedora 38
update
yarnpkg
1.22.21-2.fc38
fast
reliable
secure
dependency management
unix
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.3 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.0%
Fast, reliable, and secure dependency management.
Related
nessus
nessus
Fedora 38 : yarnpkg (2024-5ecc250449)
2024-02-28 00:00:00
Fedora 39 : yarnpkg (2024-28fc0c2ef4)
2024-02-28 00:00:00
Debian DLA-3635-1 : node-browserify-sign - LTS security update
2023-10-29 00:00:00
openvas
openvas
Fedora: Security Advisory for yarnpkg (FEDORA-2024-5ecc250449)
2024-02-28 00:00:00
Fedora: Security Advisory for yarnpkg (FEDORA-2024-28fc0c2ef4)
2024-02-28 00:00:00
Debian: Security Advisory (DSA-5539-1)
2023-10-31 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: yarnpkg-1.22.21-2.fc39
2024-02-28 01:10:55
nvd
nvd
osv
osv
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)
2022-10-12 12:00:27
node-browserify-sign vulnerability
2024-05-30 10:12:04
CVE-2022-37599
2022-10-11 19:15:11
debian
debian
[SECURITY] [DSA 5539-1] node-browserify-sign security update
2023-10-30 16:25:31
[SECURITY] [DLA 3635-1] node-browserify-sign security update
2023-10-29 04:33:32
[SECURITY] [DLA 3488-1] node-tough-cookie security update
2023-07-10 20:35:36
prion
prion
Out-of-bounds
2023-10-26 15:15:00
Denial of service
2022-10-11 19:15:00
Code injection
2023-07-01 05:15:00
veracode
veracode
Improper Verification Of Cryptographic Signature
2023-10-27 08:50:35
Regular Expression Denial Of Service (ReDoS)
2022-10-12 02:12:19
Prototype Pollution
2023-07-11 07:35:18
redhatcve
redhatcve
cvelist
cvelist
CVE-2023-46234 browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack
2023-10-26 14:31:35
CVE-2022-37599
2022-10-11 00:00:00
CVE-2023-26136
2023-07-01 05:00:01
ibm
ibm
ubuntucve
ubuntucve
cbl_mariner
cbl_mariner
CVE-2023-46234 affecting package reaper for versions less than 3.1.1-9
2024-06-06 19:53:22
ubuntu
ubuntu
browserify-sign vulnerability
2024-05-30 00:00:00
github
github
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack
2023-10-26 20:53:21
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)
2022-10-12 12:00:27
tough-cookie Prototype Pollution vulnerability
2023-07-01 06:30:16
debiancve
debiancve
cve
cve
cgr
cgr
CVE-2023-26136 vulnerabilities
2024-05-19 03:07:16
mageia
mageia
Updated nodejs-tough-cookie packages fix security vulnerability
2024-03-22 03:19:51
redhat
redhat
redos
redos
ROS-20240704-07
2024-07-04 00:00:00
ROS-20240418-08
2024-04-18 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.3 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.0%
Related for FEDORA:57226209E89E