nodejs/nodejs-dependency-vuln-assessments issues and pull requests

#192 - Plan to port the fixes to the openssl versions (CVE-2024-6119) in use for nodejs.

Issue - State: open - Opened by qinpeilin 14 days ago - 2 comments

#191 - Whether V8: CVE-2024-4761, CVE-2024-4947 and/or CVE-2024-5274 has impact on the use of nodejs

Issue - State: open - Opened by dellagustin-sap about 1 month ago - 8 comments
Labels: dont-fall-in-threat-model

#190 - Whether V8: CVE-2024-7535 has impact on the use of nodejs ？

Issue - State: open - Opened by qinpeilin about 1 month ago - 1 comment

#189 - libuv CVE-2024-24806 in Node 20.15

Issue - State: closed - Opened by glansbur 3 months ago - 5 comments
Labels: fix in last security releases

#188 - node/deps/uv/docs/requirements.txt [email protected] is vulnerable to CVE-2023-37920

Issue - State: closed - Opened by tahabiyikli 3 months ago - 1 comment
Labels: dont-believe-affects-nodejs

#187 - chore: update version of nvdlib

Pull Request - State: closed - Opened by mhdawson 3 months ago

#186 - fix: add v22.x to supported branches

Pull Request - State: closed - Opened by richardlau 5 months ago

#185 - Tooling failing for 22.x

Issue - State: closed - Opened by mhdawson 5 months ago - 2 comments

#184 - Whether V8: CVE-2024-3159 and V8: CVE-2024-3156 have impact on the use of nodejs ？

Issue - State: open - Opened by yansf 6 months ago - 5 comments
Labels: dont-believe-affects-nodejs

#183 - Is CVE-2024-2625 true positive in node.js 21.6.2?

Issue - State: closed - Opened by zjhua2002 6 months ago - 7 comments
Labels: dont-believe-affects-nodejs

#182 - CVE-2023-45853 (zlib) found on v20.x

Issue - State: closed - Opened by github-actions[bot] 7 months ago - 1 comment
Labels: v20.x

#181 - CVE-2023-45853 (zlib) found on v18.x

Issue - State: closed - Opened by github-actions[bot] 7 months ago - 1 comment
Labels: v18.x

#180 - Change when we run checks

Pull Request - State: closed - Opened by mhdawson 7 months ago

#179 - Only check for open issues, when looking for existing issue

Pull Request - State: closed - Opened by mhdawson 7 months ago

#178 - CVE-2024-0727 (OpenSSL) found on v21.x

Issue - State: closed - Opened by github-actions[bot] 8 months ago
Labels: v21.x

#177 - CVE-2024-0727 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] 8 months ago
Labels: v20.x

#176 - CVE-2024-0727 (OpenSSL) found on v18.x

Issue - State: closed - Opened by github-actions[bot] 8 months ago
Labels: v18.x

#175 - CVE-2023-6129 (OpenSSL) found on main

Issue - State: closed - Opened by github-actions[bot] 8 months ago
Labels: main, waiting on OpenSSL release which fixes

#174 - CVE-2023-6129 (OpenSSL) found on v21.x

Issue - State: closed - Opened by github-actions[bot] 8 months ago
Labels: waiting on OpenSSL release which fixes, v21.x

#173 - CVE-2023-6129 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] 8 months ago
Labels: v20.x, waiting on OpenSSL release which fixes

#172 - CVE-2023-6129 (OpenSSL) found on v18.x

Issue - State: closed - Opened by github-actions[bot] 8 months ago
Labels: v18.x, waiting on OpenSSL release which fixes

#171 - fix: fix parsing for newer versions of brotli

Pull Request - State: closed - Opened by richardlau 9 months ago - 1 comment

#170 - CVE-2023-5678 (OpenSSL) found on main

Issue - State: closed - Opened by github-actions[bot] 11 months ago - 1 comment
Labels: main, waiting on OpenSSL release which fixes

#169 - CVE-2023-5678 (OpenSSL) found on v21.x

Issue - State: closed - Opened by github-actions[bot] 11 months ago
Labels: waiting on OpenSSL release which fixes, v21.x

#168 - CVE-2023-5678 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] 11 months ago
Labels: v20.x, waiting on OpenSSL release which fixes

#168 - CVE-2023-5678 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] 11 months ago
Labels: v20.x, waiting on OpenSSL release which fixes

#167 - CVE-2023-5678 (OpenSSL) found on v18.x

Issue - State: closed - Opened by github-actions[bot] 11 months ago
Labels: v18.x, waiting on OpenSSL release which fixes

#167 - CVE-2023-5678 (OpenSSL) found on v18.x

Issue - State: closed - Opened by github-actions[bot] 11 months ago
Labels: v18.x, waiting on OpenSSL release which fixes

#166 - CVE-2023-5363 (OpenSSL) found on v21.x

Issue - State: closed - Opened by github-actions[bot] 11 months ago - 1 comment
Labels: dont-believe-affects-nodejs, v21.x

#165 - CVE-2023-5363 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] 11 months ago - 1 comment
Labels: dont-believe-affects-nodejs, v20.x

#165 - CVE-2023-5363 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] 11 months ago - 1 comment
Labels: dont-believe-affects-nodejs, v20.x

#164 - CVE-2023-5363 (OpenSSL) found on v18.x

Issue - State: closed - Opened by github-actions[bot] 11 months ago - 1 comment
Labels: dont-believe-affects-nodejs, v18.x

#163 - CVE-2023-4807 (OpenSSL) found on v21.x

Issue - State: closed - Opened by github-actions[bot] 12 months ago - 2 comments
Labels: v21.x, low-severity-will-ship-in-next-regular-release

#162 - CVE-2023-45853 (zlib) found on v21.x

Issue - State: closed - Opened by github-actions[bot] 12 months ago - 1 comment
Labels: dont-believe-affects-nodejs, v21.x

#161 - CVE-2023-45853 (zlib) found on main

Issue - State: closed - Opened by github-actions[bot] 12 months ago - 4 comments
Labels: dont-believe-affects-nodejs, main

#161 - CVE-2023-45853 (zlib) found on main

Issue - State: closed - Opened by github-actions[bot] 12 months ago - 4 comments
Labels: dont-believe-affects-nodejs, main

#160 - CVE-2023-45853 (zlib) found on v20.x

Issue - State: closed - Opened by github-actions[bot] 12 months ago - 3 comments
Labels: dont-believe-affects-nodejs, v20.x

#159 - CVE-2023-45853 (zlib) found on v18.x

Issue - State: closed - Opened by github-actions[bot] 12 months ago - 3 comments
Labels: dont-believe-affects-nodejs, v18.x

#158 - feat: bump branches covered, add ada and simdutf support

Pull Request - State: closed - Opened by RafaelGSS 12 months ago

#158 - feat: bump branches covered, add ada and simdutf support

Pull Request - State: closed - Opened by RafaelGSS 12 months ago

#157 - CVE-2023-4807 (OpenSSL) found on main

Issue - State: closed - Opened by github-actions[bot] 12 months ago
Labels: main, low-severity-will-ship-in-next-regular-release

#157 - CVE-2023-4807 (OpenSSL) found on main

Issue - State: closed - Opened by github-actions[bot] 12 months ago
Labels: main, low-severity-will-ship-in-next-regular-release

#156 - CVE-2023-4807 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] 12 months ago
Labels: v20.x, low-severity-will-ship-in-next-regular-release

#155 - CVE-2023-4807 (OpenSSL) found on v18.x

Issue - State: closed - Opened by github-actions[bot] 12 months ago
Labels: v18.x, low-severity-will-ship-in-next-regular-release

#155 - CVE-2023-4807 (OpenSSL) found on v18.x

Issue - State: closed - Opened by github-actions[bot] 12 months ago
Labels: v18.x, low-severity-will-ship-in-next-regular-release

#154 - Check for vulnerabilities daily workflow was automatically disabled

Issue - State: closed - Opened by richardlau 12 months ago

#153 - Node LTS' NPM CLI vulnerable with CVE-2022-25883

Issue - State: closed - Opened by sean-redmond about 1 year ago - 2 comments

#153 - Node LTS' NPM CLI vulnerable with CVE-2022-25883

Issue - State: closed - Opened by sean-redmond about 1 year ago - 2 comments

#152 - Check for V8 vulnerabilities?

Issue - State: open - Opened by richardlau about 1 year ago - 2 comments

#152 - Check for V8 vulnerabilities?

Issue - State: open - Opened by richardlau about 1 year ago - 2 comments

#151 - Does BDSA-2023-1613 (CVE-2023-3420) impacts Node?

Issue - State: closed - Opened by ambercool99 about 1 year ago - 21 comments
Labels: question

#150 - CVE-2023-3817 (OpenSSL) found on main

Issue - State: closed - Opened by github-actions[bot] about 1 year ago
Labels: main, fix in last security releases

#150 - CVE-2023-3817 (OpenSSL) found on main

Issue - State: closed - Opened by github-actions[bot] about 1 year ago
Labels: main, fix in last security releases

#149 - CVE-2023-3817 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] about 1 year ago
Labels: v20.x, fix in last security releases

#148 - CVE-2023-3817 (OpenSSL) found on v18.x

Issue - State: closed - Opened by github-actions[bot] about 1 year ago
Labels: v18.x, fix in last security releases

#148 - CVE-2023-3817 (OpenSSL) found on v18.x

Issue - State: closed - Opened by github-actions[bot] about 1 year ago
Labels: v18.x, fix in last security releases

#147 - CVE-2023-3817 (OpenSSL) found on v16.x

Issue - State: closed - Opened by github-actions[bot] about 1 year ago
Labels: v16.x, fix in last security releases

#146 - CVE-2023-2975 (OpenSSL) found on main

Issue - State: closed - Opened by github-actions[bot] about 1 year ago
Labels: main, fix in last security releases

#145 - CVE-2023-2975 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] about 1 year ago
Labels: v20.x, fix in last security releases

#144 - CVE-2023-2975 (OpenSSL) found on v18.x

Issue - State: closed - Opened by github-actions[bot] about 1 year ago
Labels: v18.x, fix in last security releases

#144 - CVE-2023-2975 (OpenSSL) found on v18.x

Issue - State: closed - Opened by github-actions[bot] about 1 year ago
Labels: v18.x, fix in last security releases

#143 - GHSA-cggh-pq45-6h9x (llhttp) found on v18.x

Issue - State: open - Opened by github-actions[bot] about 1 year ago - 7 comments
Labels: dont-believe-affects-nodejs, v18.x

#142 - GHSA-cggh-pq45-6h9x (llhttp) found on v16.x

Issue - State: closed - Opened by github-actions[bot] about 1 year ago - 6 comments
Labels: v16.x

#142 - GHSA-cggh-pq45-6h9x (llhttp) found on v16.x

Issue - State: closed - Opened by github-actions[bot] about 1 year ago - 6 comments
Labels: v16.x

#141 - Failures with nvd database check

Issue - State: closed - Opened by mhdawson about 1 year ago - 2 comments

#140 - fix: update version of nvdlib

Pull Request - State: closed - Opened by mhdawson about 1 year ago

#139 - CVE-2023-2650 (OpenSSL) found on main

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: main, confirmed

#138 - CVE-2023-2650 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v20.x, confirmed

#138 - CVE-2023-2650 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v20.x, confirmed

#137 - CVE-2023-2650 (OpenSSL) found on v18.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v18.x, confirmed

#136 - CVE-2023-2650 (OpenSSL) found on v16.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v16.x, confirmed

#135 - CVE-2023-31147 (c-ares) found on v20.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v20.x, confirmed

#135 - CVE-2023-31147 (c-ares) found on v20.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v20.x, confirmed

#134 - CVE-2023-31130 (c-ares) found on v20.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v20.x, confirmed

#134 - CVE-2023-31130 (c-ares) found on v20.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v20.x, confirmed

#133 - CVE-2023-31124 (c-ares) found on v20.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v20.x, confirmed

#132 - CVE-2023-31124 (c-ares) found on v20.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v20.x, confirmed

#131 - CVE-2023-31147 (c-ares) found on v18.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v18.x, confirmed

#130 - CVE-2023-31130 (c-ares) found on v18.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v18.x, confirmed

#129 - CVE-2023-31124 (c-ares) found on v18.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v18.x, confirmed

#128 - CVE-2023-31147 (c-ares) found on v16.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v16.x, confirmed

#128 - CVE-2023-31147 (c-ares) found on v16.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v16.x, confirmed

#127 - CVE-2023-31130 (c-ares) found on v16.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v16.x, confirmed

#127 - CVE-2023-31130 (c-ares) found on v16.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v16.x, confirmed

#126 - CVE-2023-31124 (c-ares) found on v16.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v16.x, confirmed

#125 - CVE-2023-32067 (c-ares) found on v20.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v20.x, confirmed

#124 - CVE-2023-32067 (c-ares) found on v18.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v18.x, confirmed

#124 - CVE-2023-32067 (c-ares) found on v18.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v18.x, confirmed

#123 - CVE-2023-32067 (c-ares) found on v16.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v16.x, confirmed

#123 - CVE-2023-32067 (c-ares) found on v16.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago
Labels: v16.x, confirmed

#122 - CVE-2023-1255 (OpenSSL) found on main

Issue - State: closed - Opened by github-actions[bot] over 1 year ago - 1 comment
Labels: main, confirmed

#122 - CVE-2023-1255 (OpenSSL) found on main

Issue - State: closed - Opened by github-actions[bot] over 1 year ago - 1 comment
Labels: main, confirmed

#121 - CVE-2023-1255 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago - 1 comment
Labels: v20.x, confirmed

#121 - CVE-2023-1255 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago - 1 comment
Labels: v20.x, confirmed

#120 - CVE-2023-1255 (OpenSSL) found on v19.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago - 1 comment
Labels: v19.x, confirmed

#119 - CVE-2023-1255 (OpenSSL) found on v18.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago - 1 comment
Labels: v18.x, confirmed

#119 - CVE-2023-1255 (OpenSSL) found on v18.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago - 1 comment
Labels: v18.x, confirmed

#118 - CVE-2023-0466 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago - 1 comment
Labels: v20.x, confirmed

#117 - CVE-2023-0465 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago - 1 comment
Labels: v20.x, confirmed

#116 - CVE-2023-0464 (OpenSSL) found on v20.x

Issue - State: closed - Opened by github-actions[bot] over 1 year ago - 1 comment
Labels: v20.x, confirmed

GitHub / nodejs/nodejs-dependency-vuln-assessments issues and pull requests