portage-ng / portage / net-libs / nodejs / 26.3.0
portage-ng glsa
6 advisories reference net-libs/nodejs · none place version 26.3.0 in a vulnerable range
▸ GLSA 202506-08 Node.js: Multiple Vulnerabilities this version unaffected high local and remote 2025-06-12

Multiple vulnerabilities have been discovered in Node.js, the worst of which can lead to arbitrary code execution.

Announced
2025-06-12
Revised
2025-06-12
Access
local and remote
Bugs
#948514
Advisory
https://security.gentoo.org/glsa/202506-08

Affected packages

PackageArchVulnerableUnaffected
net-libs/nodejs*< 22.13.1>= 22.13.1

Background

Node.js is a JavaScript runtime built on Chrome’s V8 JavaScript engine.

Description

Multiple vulnerabilities have been discovered in Node.js. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Node.js users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/nodejs-22.13.1"

References

▸ GLSA 202505-11 Node.js: Multiple Vulnerabilities this version unaffected high local and remote 2025-05-14

Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.

Announced
2025-05-14
Revised
2025-05-17 (revision 2)
Access
local and remote
Bugs
#916513 #924704 #928532 #936204
Advisory
https://security.gentoo.org/glsa/202505-11

Affected packages

PackageArchVulnerableUnaffected
net-libs/nodejs*< 18.20.4, < 20.15.1, < 22.4.1>= 18.20.4, >= 20.15.1, >= 22.4.1

Background

Node.js is a JavaScript runtime built on Chrome’s V8 JavaScript engine.

Description

Multiple vulnerabilities have been discovered in Node.js. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Node.js users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/nodejs-22.4.1"

References

▸ GLSA 202405-29 Node.js: Multiple Vulnerabilities this version unaffected low remote 2024-05-08

Multiple vulnerabilities have been discovered in Node.js.

Announced
2024-05-08
Revised
2024-05-08
Access
remote
Bugs
#772422 #781704 #800986 #805053 #807775 #811273 #817938 #831037 #835615 #857111 #865627 #872692 #879617 #918086 #918614
Advisory
https://security.gentoo.org/glsa/202405-29

Affected packages

PackageArchVulnerableUnaffected
net-libs/nodejs*< 16.20.2, < 18.17.1, < 20.5.1>= 16.20.2, >= 18.17.1, >= 20.5.1

Background

Node.js is a JavaScript runtime built on Chrome’s V8 JavaScript engine.

Description

Multiple vulnerabilities have been discovered in Node.js. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Node.js 20 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/nodejs-20.5.1"

All Node.js 18 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/nodejs-18.17.1"

All Node.js 16 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/nodejs-16.20.2"

References

▸ GLSA 202101-07 NodeJS: Multiple vulnerabilities version not in range normal remote 2021-01-11

Multiple vulnerabilities have been found in NodeJS, the worst of which could result in the arbitrary execution of code.

Announced
2021-01-11
Revised
2021-01-11
Access
remote
Bugs
#726836 #731654 #742893 #754942 #763588
Advisory
https://security.gentoo.org/glsa/202101-07

Affected packages

PackageArchVulnerableUnaffected
net-libs/nodejs*< 15.5.1>= 15.5.1:0/15, >= 14.15.1:0/14, >= 12.20.1:0/12

Background

Node.js is a JavaScript runtime built on Chrome’s V8 JavaScript engine.

Description

Multiple vulnerabilities have been discovered in NodeJS. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All NodeJS 15 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/nodejs-15.5.1"

All NodeJS 14 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/nodejs-14.15.1"

References

▸ GLSA 202003-48 Node.js: Multiple vulnerabilities version not in range normal local, remote 2020-03-20

Multiple vulnerabilities have been found in Node.js, worst of which could allow remote attackers to write arbitrary files.

Announced
2020-03-20
Revised
2020-03-20 (revision 2)
Access
local, remote
Bugs
#658074 #665656 #672136 #679132 #702988 #708458
Advisory
https://security.gentoo.org/glsa/202003-48

Affected packages

PackageArchVulnerableUnaffected
net-libs/nodejs*< 12.15.0>= 10.19.0 (revision), >= 12.15.0 (revision)

Background

Node.js is a JavaScript runtime built on Chrome’s V8 JavaScript engine.

Description

Multiple vulnerabilities have been discovered in Node.js. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly write arbitrary files, cause a Denial of Service condition or can conduct HTTP request splitting attacks.

Workaround

There is no known workaround at this time.

Resolution

All Node.js <12.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/nodejs-10.19.0"

All Node.js 12.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/nodejs-12.15.0"

References

▸ GLSA 201612-43 Node.js: Multiple vulnerabilities this version unaffected normal remote 2016-12-13

Multiple vulnerabilities have been found in Node.js, the worst of which can allow remote attackers to cause Denial of Service conditions.

Announced
2016-12-13
Revised
2016-12-13
Access
remote
Bugs
#568900 #586084 #595256
Advisory
https://security.gentoo.org/glsa/201612-43

Affected packages

PackageArchVulnerableUnaffected
net-libs/nodejs*< 4.6.1>= 0.12.17 (revision), >= 4.6.1

Background

Node.js is a JavaScript runtime built on Chrome’s V8 JavaScript engine.

Description

Multiple vulnerabilities have been discovered in Node.js. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly cause a Denial of Service condition, or conduct man-in-the-middle attacks.

Workaround

There is no known workaround at this time.

Resolution

All Node.js 0.12.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/nodejs-0.12.17"

All Node.js 4.6.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/nodejs-4.6.1"

References