[UPDATE] [mittel] Node.js: Mehrere Schwachstellen

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-29 09:32 UTC
  • Importiert: 2026-10-01 09:09 UTC
  • CVSS: 7.5
  • Quelle-ID: cert_bund
  • uid_hash: 94b9d814d96537f76a3d8e75408b8a81344f436ace05f3ba851a90315d06a43f

Inhalt

Ein lokaler Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2025-23165

HIGH

7.5

LOW

3.7

2025-05-19

CVE-2025-23166

HIGH

7.5

HIGH

7.5

2025-05-19

CVE-2025-23167

HIGH

7.5

MEDIUM

6.5

2025-05-19

Externe Referenzen

Bezeichnung Typ CVE Quelle

Red Hat Security Advisory RHSA-2025:8467 vom 2025-06-03

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:8468 vom 2025-06-03

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:8493 vom 2025-06-04

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:8506 vom 2025-06-04

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:8514 vom 2025-06-04

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:8902 vom 2025-06-11

VENDOR - wid_csaf

Splunk Security Advisory SVD-2026-0211 vom 2026-02-18

EXTERNAL - wid_csaf

Fedora Security Advisory FEDORA-2025-0C2B7A8F32 vom 2025-05-19

EXTERNAL - wid_csaf

Fedora Security Advisory FEDORA-2025-2936DECE0E vom 2025-05-19

EXTERNAL - wid_csaf

Fedora Security Advisory FEDORA-2025-61AD6E65B3 vom 2025-05-19

EXTERNAL - wid_csaf

Fedora Security Advisory FEDORA-2025-F4CEE58E97 vom 2025-05-19

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-11803 vom 2025-07-28

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-8467 vom 2025-06-04

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-8468 vom 2025-06-04

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-8493 vom 2025-06-28

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-8506 vom 2025-06-05

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-8514 vom 2025-06-13

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-47059 vom 2026-08-01

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-54530 vom 2026-08-15

EXTERNAL - wid_csaf

Debian Security Advisory DSA-6272 vom 2026-05-15

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:01879-1 vom 2025-06-11

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:01878-1 vom 2025-06-11

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:02045-1 vom 2025-06-20

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:02039-1 vom 2025-06-20

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:4248-1 vom 2026-09-17

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:4261-1 vom 2026-09-18

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:4355-1 vom 2026-09-28

EXTERNAL - wid_csaf

Node.js Security Releases vom 2025-05-14

EXTERNAL - wid_csaf

OSS Security Mailing List vom 2025-05-14

EXTERNAL - wid_csaf

Arch Linux Security Advisory ASA-202505-6 vom 2025-05-19

EXTERNAL - wid_csaf

Arch Linux Security Advisory ASA-202505-7 vom 2025-05-19

EXTERNAL - wid_csaf

Arch Linux Security Advisory ASA-202505-8 vom 2025-05-19

EXTERNAL - wid_csaf

Dell Security Advisory DSA-2025-338 vom 2025-10-30

EXTERNAL - wid_csaf

Hitachi Vulnerability Information HITACHI-SEC-2025-126 vom 2025-09-30

EXTERNAL - wid_csaf

IBM Security Bulletin 7241538 vom 2025-08-06

EXTERNAL - wid_csaf

IBM Security Bulletin 7241699 vom 2025-08-07

EXTERNAL - wid_csaf

IBM Security Bulletin 7244612 vom 2025-09-11

EXTERNAL - wid_csaf

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CERT-Bund (BSI)

cert_bund

government_cert - de https://wid.cert-bund.de/content/public/securityAdvisory/rss