Packages / Debian 12 (Bookworm) / Source / web / node-mocha

Source Package: node-mocha (10.1.0+ds1+~cs29.3.1-1)

simple, flexible, fun test framework - Node.js module

The following binary packages are built from this source package:

mocha
simple, flexible, fun test framework - Node.js module

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVE	Schweregrad	Betroffene Versionen
[CVE-2026-73086] Published: Jul 29, 2026, 5:45:57 PM UTC nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the user-influenced size p	High(8.1)	Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 25, 2026, 7:24:01 AM UTC Details (2) `10.1.0+ds1+~cs29.3.1-1` · all · bookworm Behoben · Behoben: `9.1.4+ds1+~cs28.2.8-1` nvd · node-mocha · debian · bookworm; nvd · node-mocha · debian · 12 `10.1.0+ds1+~cs29.3.1-1` · all · bookworm Behoben · Behoben: `9.1.4+ds1+~cs28.2.8-1` nvd · node-mocha · debian · bookworm; nvd · node-mocha · debian · 12
[CVE-2026-67214] Published: Jul 29, 2026, 1:32:02 PM UTC nanoid (Nano ID) before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module (nanoid/non-secure). When these functions are given a negative s	High(8.2)	Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 25, 2026, 7:24:01 AM UTC Details (2) `10.1.0+ds1+~cs29.3.1-1` · all · bookworm Behoben · Behoben: `9.1.4+ds1+~cs28.2.8-1` nvd · node-mocha · debian · bookworm; nvd · node-mocha · debian · 12 `10.1.0+ds1+~cs29.3.1-1` · all · bookworm Behoben · Behoben: `9.1.4+ds1+~cs28.2.8-1` nvd · node-mocha · debian · bookworm; nvd · node-mocha · debian · 12
[CVE-2026-67213] Published: Jul 28, 2026, 10:37:06 PM UTC nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satis	High(8.2)	Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 25, 2026, 7:24:01 AM UTC Details (2) `10.1.0+ds1+~cs29.3.1-1` · all · bookworm Behoben · Behoben: `9.1.4+ds1+~cs28.2.8-1` nvd · node-mocha · debian · bookworm; nvd · node-mocha · debian · 12 `10.1.0+ds1+~cs29.3.1-1` · all · bookworm Behoben · Behoben: `9.1.4+ds1+~cs28.2.8-1` nvd · node-mocha · debian · bookworm; nvd · node-mocha · debian · 12
[CVE-2024-55565] Published: Dec 9, 2024, 12:00:00 AM UTC node-postcss: CVE-2024-55565	Medium(6.5)	Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 27, 2026, 12:32:39 AM UTC Details (2) `10.1.0+ds1+~cs29.3.1-1` · all · bookworm Behoben · Behoben: `9.1.4+ds1+~cs28.2.8-1` dsa · node-mocha · debian · bookworm; dsa · node-mocha · debian · 12 `10.1.0+ds1+~cs29.3.1-1` · all · bookworm Behoben · Behoben: `9.1.4+ds1+~cs28.2.8-1` dsa · node-mocha · debian · bookworm; dsa · node-mocha · debian · 12
[CVE-2021-23566] Published: Jan 1, 2021, 12:00:00 AM UTC node-postcss: CVE-2021-23566	Medium(5.5)	Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 23, 2026, 5:54:54 PM UTC Details (2) `10.1.0+ds1+~cs29.3.1-1` · all · bookworm Behoben · Behoben: `9.1.4+ds1+~cs28.2.8-1` dsa · node-mocha · debian · bookworm; dsa · node-mocha · debian · 12 `10.1.0+ds1+~cs29.3.1-1` · all · bookworm Behoben · Behoben: `9.1.4+ds1+~cs28.2.8-1` dsa · node-mocha · debian · bookworm; dsa · node-mocha · debian · 12

Zuletzt synchronisiert: Oct 29, 2026, 7:53:44 AM UTC

[CVE-Katalog]

Quellen

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signaturnachweis
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signaturnachweis
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified