Polampalli, Archana d3ee870fb0 nodejs: fix CVE-2022-25883 ...

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression
Denial of Service (ReDoS) via the function new Range, when untrusted user data is
provided as a range.

References:
https://nvd.nist.gov/vuln/detail/CVE-2022-25883

Upstream patches:
https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>

2023-09-04 11:59:59 -04:00

..

nodejs

nodejs: fix CVE-2022-25883

2023-09-04 11:59:59 -04:00

nodejs-oe-cache-16.20

nodejs: upgrade 16.19.1 -> 16.20.1

2023-07-16 15:30:53 -04:00

nodejs_16.20.2.bb

nodejs: fix CVE-2022-25883

2023-09-04 11:59:59 -04:00

nodejs-oe-cache-native_16.20.bb

nodejs: upgrade 16.19.1 -> 16.20.1

2023-07-16 15:30:53 -04:00