Packages / Debian 12 (Bookworm) / web / nodejs

Package: nodejs (18.20.4+dfsg-1~deb12u2)

I/O basato su eventi per V8 javascript - eseguibile di runtime

Other Packages Related to nodejs:

dep: [libc6] (>= 2.34)
GNU C Library: Shared libraries
dep: [libnode108] (= 18.20.4+dfsg-1~deb12u2)
I/O a eventi per V8 javascript - libreria di runtime

rec: [ca-certificates]
Common CA certificates
rec: [nodejs-doc]
Documentazione API per Node.js, la piattaforma javascript

sug: [npm]
package manager for Node.js

Download nodejs

Architecture	Package size	Installed size	Files	Package
amd64	314 KiB	3.8 MiB	list of files	Download
arm64	314 KiB	3.9 MiB	list of files	Download

Percorsi file del pacchetto (126)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/bin/node
/usr/bin/nodejs
/usr/lib/aarch64-linux-gnu/node_modules
/usr/lib/x86_64-linux-gnu/node_modules
/usr/share/bash-completion/completions/node
/usr/share/bash-completion/completions/nodejs
/usr/share/doc/nodejs/changelog.Debian.gz
/usr/share/doc/nodejs/changelog.gz
/usr/share/doc/nodejs/copyright
/usr/share/doc/nodejs/gdbinit.gz
/usr/share/doc/nodejs/lldb_commands.py.gz
/usr/share/doc/nodejs/openssl.cnf.gz
/usr/share/doc/nodejs/README.Debian
/usr/share/man/man1/node.1.gz
/usr/share/man/man1/nodejs.1.gz
/usr/share/nodejs/@types/node/assert.d.ts
/usr/share/nodejs/@types/node/assert/strict.d.ts
/usr/share/nodejs/@types/node/async_hooks.d.ts
/usr/share/nodejs/@types/node/buffer.d.ts
/usr/share/nodejs/@types/node/child_process.d.ts
/usr/share/nodejs/@types/node/cluster.d.ts
/usr/share/nodejs/@types/node/console.d.ts
/usr/share/nodejs/@types/node/constants.d.ts
/usr/share/nodejs/@types/node/crypto.d.ts
/usr/share/nodejs/@types/node/dgram.d.ts
/usr/share/nodejs/@types/node/diagnostics_channel.d.ts
/usr/share/nodejs/@types/node/dns.d.ts
/usr/share/nodejs/@types/node/dns/promises.d.ts
/usr/share/nodejs/@types/node/domain.d.ts
/usr/share/nodejs/@types/node/dom-events.d.ts
/usr/share/nodejs/@types/node/events.d.ts
/usr/share/nodejs/@types/node/fs.d.ts
/usr/share/nodejs/@types/node/fs/promises.d.ts
/usr/share/nodejs/@types/node/globals.d.ts
/usr/share/nodejs/@types/node/globals.global.d.ts
/usr/share/nodejs/@types/node/http2.d.ts
/usr/share/nodejs/@types/node/http.d.ts
/usr/share/nodejs/@types/node/https.d.ts
/usr/share/nodejs/@types/node/index.d.ts
/usr/share/nodejs/@types/node/inspector.d.ts
/usr/share/nodejs/@types/node/module.d.ts
/usr/share/nodejs/@types/node/net.d.ts
/usr/share/nodejs/@types/node/os.d.ts
/usr/share/nodejs/@types/node/package.json
/usr/share/nodejs/@types/node/path.d.ts
/usr/share/nodejs/@types/node/perf_hooks.d.ts
/usr/share/nodejs/@types/node/process.d.ts
/usr/share/nodejs/@types/node/punycode.d.ts
/usr/share/nodejs/@types/node/querystring.d.ts
/usr/share/nodejs/@types/node/readline.d.ts
/usr/share/nodejs/@types/node/readline/promises.d.ts
/usr/share/nodejs/@types/node/repl.d.ts
/usr/share/nodejs/@types/node/stream/consumers.d.ts
/usr/share/nodejs/@types/node/stream.d.ts
/usr/share/nodejs/@types/node/stream/promises.d.ts
/usr/share/nodejs/@types/node/stream/web.d.ts
/usr/share/nodejs/@types/node/string_decoder.d.ts
/usr/share/nodejs/@types/node/test.d.ts
/usr/share/nodejs/@types/node/timers.d.ts
/usr/share/nodejs/@types/node/timers/promises.d.ts
/usr/share/nodejs/@types/node/tls.d.ts
/usr/share/nodejs/@types/node/trace_events.d.ts
/usr/share/nodejs/@types/node/ts4.8/assert.d.ts
/usr/share/nodejs/@types/node/ts4.8/assert/strict.d.ts
/usr/share/nodejs/@types/node/ts4.8/async_hooks.d.ts
/usr/share/nodejs/@types/node/ts4.8/buffer.d.ts
/usr/share/nodejs/@types/node/ts4.8/child_process.d.ts
/usr/share/nodejs/@types/node/ts4.8/cluster.d.ts
/usr/share/nodejs/@types/node/ts4.8/console.d.ts
/usr/share/nodejs/@types/node/ts4.8/constants.d.ts
/usr/share/nodejs/@types/node/ts4.8/crypto.d.ts
/usr/share/nodejs/@types/node/ts4.8/dgram.d.ts
/usr/share/nodejs/@types/node/ts4.8/diagnostics_channel.d.ts
/usr/share/nodejs/@types/node/ts4.8/dns.d.ts
/usr/share/nodejs/@types/node/ts4.8/dns/promises.d.ts
/usr/share/nodejs/@types/node/ts4.8/domain.d.ts
/usr/share/nodejs/@types/node/ts4.8/dom-events.d.ts
/usr/share/nodejs/@types/node/ts4.8/events.d.ts
/usr/share/nodejs/@types/node/ts4.8/fs.d.ts
/usr/share/nodejs/@types/node/ts4.8/fs/promises.d.ts
/usr/share/nodejs/@types/node/ts4.8/globals.d.ts
/usr/share/nodejs/@types/node/ts4.8/globals.global.d.ts
/usr/share/nodejs/@types/node/ts4.8/http2.d.ts
/usr/share/nodejs/@types/node/ts4.8/http.d.ts
/usr/share/nodejs/@types/node/ts4.8/https.d.ts
/usr/share/nodejs/@types/node/ts4.8/index.d.ts
/usr/share/nodejs/@types/node/ts4.8/inspector.d.ts
/usr/share/nodejs/@types/node/ts4.8/module.d.ts
/usr/share/nodejs/@types/node/ts4.8/net.d.ts
/usr/share/nodejs/@types/node/ts4.8/os.d.ts
/usr/share/nodejs/@types/node/ts4.8/path.d.ts
/usr/share/nodejs/@types/node/ts4.8/perf_hooks.d.ts
/usr/share/nodejs/@types/node/ts4.8/process.d.ts
/usr/share/nodejs/@types/node/ts4.8/punycode.d.ts
/usr/share/nodejs/@types/node/ts4.8/querystring.d.ts
/usr/share/nodejs/@types/node/ts4.8/readline.d.ts
/usr/share/nodejs/@types/node/ts4.8/readline/promises.d.ts
/usr/share/nodejs/@types/node/ts4.8/repl.d.ts
/usr/share/nodejs/@types/node/ts4.8/stream/consumers.d.ts
/usr/share/nodejs/@types/node/ts4.8/stream.d.ts
/usr/share/nodejs/@types/node/ts4.8/stream/promises.d.ts
/usr/share/nodejs/@types/node/ts4.8/stream/web.d.ts
/usr/share/nodejs/@types/node/ts4.8/string_decoder.d.ts
/usr/share/nodejs/@types/node/ts4.8/test.d.ts
/usr/share/nodejs/@types/node/ts4.8/timers.d.ts
/usr/share/nodejs/@types/node/ts4.8/timers/promises.d.ts
/usr/share/nodejs/@types/node/ts4.8/tls.d.ts
/usr/share/nodejs/@types/node/ts4.8/trace_events.d.ts
/usr/share/nodejs/@types/node/ts4.8/tty.d.ts
/usr/share/nodejs/@types/node/ts4.8/url.d.ts
/usr/share/nodejs/@types/node/ts4.8/util.d.ts
/usr/share/nodejs/@types/node/ts4.8/v8.d.ts
/usr/share/nodejs/@types/node/ts4.8/vm.d.ts
/usr/share/nodejs/@types/node/ts4.8/wasi.d.ts
/usr/share/nodejs/@types/node/ts4.8/worker_threads.d.ts
/usr/share/nodejs/@types/node/ts4.8/zlib.d.ts
/usr/share/nodejs/@types/node/tty.d.ts
/usr/share/nodejs/@types/node/url.d.ts
/usr/share/nodejs/@types/node/util.d.ts
/usr/share/nodejs/@types/node/v8.d.ts
/usr/share/nodejs/@types/node/vm.d.ts
/usr/share/nodejs/@types/node/wasi.d.ts
/usr/share/nodejs/@types/node/worker_threads.d.ts
/usr/share/nodejs/@types/node/zlib.d.ts
/usr/share/node_modules
/usr/share/systemtap/tapset/node.stp

Field source: Debian 12 (Bookworm) main amd64

Usa questo pacchetto

OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.

Prova Debian 12 (Bookworm) nel browser Crea un'immagine che include nodejs

Versioni, suite e repository

Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
18.20.4+dfsg-1~deb12u2	bookworm / main	amd64	Debian 12 · main · amd64	314 KiB	3.8 MiB	pool/main/n/nodejs/nodejs_18.20.4+dfsg-1~deb12u2_amd64.deb
18.20.4+dfsg-1~deb12u2	bookworm / main	arm64	Debian 12 · main · arm64	314 KiB	3.9 MiB	pool/main/n/nodejs/nodejs_18.20.4+dfsg-1~deb12u2_arm64.deb

Field source: Debian 12 (Bookworm) main amd64

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVE	Gravità	Impatto per versione
[CVE-2026-111497] Published: Oct 21, 2026, 10:13:35 PM UTC Brotli vulnerability	Critical(9.2) CISA KEV	Interessata Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Interessata usn · nodejs · debian · bookworm; pypi · nodejs · debian · 12 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Interessata usn · nodejs · debian · bookworm; pypi · nodejs · debian · 12
[CVE-2026-106070] Published: Oct 23, 2026, 12:00:00 AM UTC nodejs: CVE-2026-106070	Low(3.7)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm
[CVE-2026-106071] Published: Oct 23, 2026, 12:00:00 AM UTC nodejs: CVE-2026-106071	Low(3.6)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm
[CVE-2026-106074] Published: Oct 22, 2026, 7:47:36 AM UTC nodejs: CVE-2026-106074	Medium(4.8)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14
[CVE-2026-105481] Published: Oct 22, 2026, 7:47:28 AM UTC nodejs: CVE-2026-105481	Medium(6.5)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14
[CVE-2026-106072] Published: Oct 22, 2026, 7:47:25 AM UTC nodejs: CVE-2026-106072	Medium(6.7)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14
[CVE-2026-106073] Published: Oct 22, 2026, 7:47:23 AM UTC nodejs: CVE-2026-106073	Low(3.3)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14
[CVE-2026-105482] Published: Oct 21, 2026, 12:00:00 AM UTC nodejs: CVE-2026-105482	High(7.4)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14
[CVE-2026-105483] Published: Oct 21, 2026, 12:00:00 AM UTC nodejs: CVE-2026-105483	High(7.4)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm; pypi · nodejs · debian · 14
[CVE-2026-106069] Published: Oct 21, 2026, 12:00:00 AM UTC nodejs: CVE-2026-106069	High(7.4)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto Version impact unknown dsa · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14
[CVE-2026-48932] Published: Aug 12, 2026, 7:25:34 PM UTC A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible `IncomingMessage` headers while piping the origi	Medium(5.6)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto · Corretta: `24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto · Corretta: `24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14
[CVE-2026-56846] Published: Jul 29, 2026, 10:00:00 PM UTC A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability affects Node.js 24.x and 22.x.	High(7.5)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto · Corretta: `18.20.4+dfsg-1~deb12u3, 20.19.2+dfsg-1+deb13u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto · Corretta: `18.20.4+dfsg-1~deb12u3, 20.19.2+dfsg-1+deb13u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14
[CVE-2026-56847] Published: Jul 29, 2026, 10:00:00 PM UTC A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the	Medium(6.1)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto · Corretta: `20.19.2+dfsg-1+deb13u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto · Corretta: `20.19.2+dfsg-1+deb13u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14
[CVE-2026-56848] Published: Jul 29, 2026, 10:00:00 PM UTC A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2_session_mem_recv()` is executing, resulting in a heap-use-after-free. This vulnerabili	High(7.5)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto · Corretta: `18.20.4+dfsg-1~deb12u3, 20.19.2+dfsg-1+deb13u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto · Corretta: `18.20.4+dfsg-1~deb12u3, 20.19.2+dfsg-1+deb13u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14
[CVE-2026-56850] Published: Jul 29, 2026, 10:00:00 PM UTC A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client cer	Medium(4.4)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto · Corretta: `18.20.4+dfsg-1~deb12u3, 20.19.2+dfsg-1+deb13u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto · Corretta: `18.20.4+dfsg-1~deb12u3, 20.19.2+dfsg-1+deb13u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14
[CVE-2026-58039] Published: Jul 29, 2026, 10:00:00 PM UTC A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --allow-fs-write paths. This can lead to confidentiality impact or bypass of the intended se	Medium(4.4)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto · Corretta: `20.19.2+dfsg-1+deb13u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto · Corretta: `20.19.2+dfsg-1+deb13u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14
[CVE-2026-58040] Published: Jul 29, 2026, 10:00:00 PM UTC An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934). This vulnerability affects N	Medium(6.3)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto · Corretta: `18.20.4+dfsg-1~deb12u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto · Corretta: `18.20.4+dfsg-1~deb12u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 14
[CVE-2026-58041] Published: Jul 29, 2026, 10:00:00 PM UTC A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to continue executing a cached prepared statement after it has been reset and rebound w	Medium(5.3)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto · Corretta: `24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto · Corretta: `24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 14
[CVE-2026-58042] Published: Jul 29, 2026, 10:00:00 PM UTC A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service.	Medium(5.9)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto · Corretta: `18.20.4+dfsg-1~deb12u3, 20.19.2+dfsg-1+deb13u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto · Corretta: `18.20.4+dfsg-1~deb12u3, 20.19.2+dfsg-1+deb13u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 12; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14
[CVE-2026-58043] Published: Jul 29, 2026, 10:00:00 PM UTC A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under `--permission`, an attacker who is granted access to one path can abuse bo	High(8.4)	Sconosciuto Dettagli (2) `18.20.4+dfsg-1~deb12u2` · amd64 · bookworm Sconosciuto · Corretta: `20.19.2+dfsg-1+deb13u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14 `18.20.4+dfsg-1~deb12u2` · arm64 · bookworm Sconosciuto · Corretta: `20.19.2+dfsg-1+deb13u3, 24.19.0+dfsg+~cs24.13.3-1` Version impact unknown nvd · nodejs · debian · bookworm; pypi · nodejs · debian · 13; pypi · nodejs · debian · 14

[Altri risultati]

Ultima sincronizzazione: Oct 29, 2026, 12:48:53 PM UTC

[Catalogo CVE]

Checksum

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

18.20.4+dfsg-1~deb12u2 / amd64Osservato Sep 1, 2026sha256 ed733bcac17b…c3c24cfcImpronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): ed733bcac17b24e6a1642f0dc2b71ae95513388197395a7736940df6c3c24cfc

Verifica download

printf '%s  %s\n' 'ed733bcac17b24e6a1642f0dc2b71ae95513388197395a7736940df6c3c24cfc' 'nodejs_18.20.4+dfsg-1~deb12u2_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

18.20.4+dfsg-1~deb12u2 / arm64Osservato Sep 1, 2026sha256 5ed6d1460b07…d0b33c3fImpronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 5ed6d1460b0781f94320f5cddee7ca3acd8f07b94e2e7bff7878e036d0b33c3f

Verifica download

printf '%s  %s\n' '5ed6d1460b0781f94320f5cddee7ca3acd8f07b94e2e7bff7878e036d0b33c3f' 'nodejs_18.20.4+dfsg-1~deb12u2_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

Fonti

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified
Debian 12 (Bookworm) security main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/bookworm-security/InRelease
Signed-object SHA-256
6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
Signer fingerprint
ED541312A33F1128F10B1C6C54404762BBB6E853
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Observed SHA-256
f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Result
match verified
Debian 12 (Bookworm) security main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/bookworm-security/InRelease
Signed-object SHA-256
6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
Signer fingerprint
ED541312A33F1128F10B1C6C54404762BBB6E853
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Observed SHA-256
f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Result
match verified