[CVE-2026-73088 ] Published: Aug 11, 2026, 5:00:05 PM UTC
Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, normalizeStats() in node.js, reached unconditionally through getStat() a
High(7.5) Unknown Details (2) 4.2.0-5.1 · noarch · tumbleweed
Unknown · Fixed: 4.2.0-5.1
Version impact unknown
nvd · python-pytest-html · opensuse · tumbleweed
4.2.0-5.1 · noarch · tumbleweed
Unknown · Fixed: 4.2.0-5.1
Version impact unknown
nvd · python-pytest-html · opensuse · tumbleweed
[CVE-2026-13311 ] Published: Jun 25, 2026, 4:48:36 AM UTC
shell-quote prior to 1.8.5 finalizes parsed tokens in parse() using Array.prototype.concat as a reduce accumulator, which reallocates and copies the entire growing array on every iteration. As a resul
High(8.7) Unknown Details (2) 4.2.0-5.1 · noarch · tumbleweed
Unknown · Fixed: 4.2.0-3.1
Version impact unknown
nvd · python-pytest-html · opensuse · tumbleweed
4.2.0-5.1 · noarch · tumbleweed
Unknown · Fixed: 4.2.0-3.1
Version impact unknown
nvd · python-pytest-html · opensuse · tumbleweed
[CVE-2026-9277 ] Published: May 22, 2026, 1:22:38 PM UTC
shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`. The `.op` field was backslash-escaped character by character using `/(.)/g`, which i
Critical(9.2) Unknown Details (2) 4.2.0-5.1 · noarch · tumbleweed
Unknown · Fixed: 4.2.0-2.1
Version impact unknown
nvd · python-pytest-html · opensuse · tumbleweed
4.2.0-5.1 · noarch · tumbleweed
Unknown · Fixed: 4.2.0-2.1
Version impact unknown
nvd · python-pytest-html · opensuse · tumbleweed
[CVE-2025-5889 ] Published: Jun 9, 2025, 6:16:01 PM UTC
node-brace-expansion: CVE-2025-5889
Low(3.1) Unknown Details (2) 4.2.0-5.1 · noarch · tumbleweed
Unknown · Fixed: 4.1.1-6.1
Version impact unknown
dsa · python-pytest-html · opensuse · tumbleweed
4.2.0-5.1 · noarch · tumbleweed
Unknown · Fixed: 4.1.1-6.1
Version impact unknown
dsa · python-pytest-html · opensuse · tumbleweed
[CVE-2024-21538 ] Published: Nov 8, 2024, 5:00:04 AM UTC
Security update for nodejs20
Medium(5.5) Unknown Details (2) 4.2.0-5.1 · noarch · tumbleweed
Unknown · Fixed: 4.1.1-4.1
Version impact unknown
pypi · python-pytest-html · opensuse · tumbleweed
4.2.0-5.1 · noarch · tumbleweed
Unknown · Fixed: 4.1.1-4.1
Version impact unknown
pypi · python-pytest-html · opensuse · tumbleweed
[CVE-2024-48948 ] Published: Oct 15, 2024, 12:00:00 AM UTC
node-elliptic: CVE-2024-48948
Medium(4.8) Unknown Details (2) 4.2.0-5.1 · noarch · tumbleweed
Unknown · Fixed: 4.1.1-3.1, 4.2.0-4.1
Version impact unknown
dsa · python-pytest-html · opensuse · tumbleweed
4.2.0-5.1 · noarch · tumbleweed
Unknown · Fixed: 4.1.1-3.1, 4.2.0-4.1
Version impact unknown
dsa · python-pytest-html · opensuse · tumbleweed
[CVE-2024-48949 ] Published: Sep 17, 2024, 7:47:09 PM UTC
node-elliptic: CVE-2024-48949
High(8.2) Unknown Details (2) 4.2.0-5.1 · noarch · tumbleweed
Unknown · Fixed: 4.1.1-2.1
Version impact unknown
dsa · python-pytest-html · opensuse · tumbleweed
4.2.0-5.1 · noarch · tumbleweed
Unknown · Fixed: 4.1.1-2.1
Version impact unknown
dsa · python-pytest-html · opensuse · tumbleweed