Vulnerability Bulletins |
IBM Security Bulletin: Current Releases of IBM® SDK for Node.js™ are affected by CVE-2015-8851 |
|
| Affected software | IBM |
|
Unsafe fallback to Math.random() in module node-uuid, used by the npm package management tool CVE(s): CVE-2015-8851Affected product(s) and affected version(s):These vulnerabilities affect IBM SDK for Node.js v1.1.0.20 and previous releases. These vulnerabilities affect IBM SDK for Node.js v1.2.0.10 and previous releases. These vulnerabilities affect IBM SDK for Node.js v4.3.2.0 and previous releases. Refer to the following reference URLs for remediation and additional vulnerability More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_current_releases_of_ibm_sdk_for_node_js_are_affected_by_cve_2015_8851?lang=en_us |
|