nodejs-libs vulnerabilities (AlmaLinux)
132 vulnerabilities.
nodejs-libsAlmaLinuxInsufficient randomness in generation of DNS query IDs in c-ares5.9 Mediumnodejs-libsAlmaLinuxBuffer Underwrite in ares_inet_net_pton()4.1 Mediumnodejs-libsAlmaLinuxAutoTools does not set CARES_RANDOM_FILE during cross compilation3.7 Lownodejs-libsAlmaLinuxAn untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21...4.2 Mediumnodejs-libsAlmaLinuxA privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3...7.5 Highnodejs-libsAlmaLinuxCRLF Injection in Nodejs ‘undici’ via host6.5 Mediumnodejs-libsAlmaLinuxUndici vulnerable to Regular Expression Denial of Service in Headers7.5 Highnodejs-libsAlmaLinuxA flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the...8.6 Highnodejs-libsAlmaLinuxhttp-cache-semantics vulnerable to Regular Expression Denial of Service5.3 Mediumnodejs-libsAlmaLinuxA OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19...8.1 Highnodejs-libsAlmaLinuxminimatch ReDoS vulnerability7.5 Highnodejs-libsAlmaLinuxA weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with...9.1 Criticalnodejs-libsAlmaLinuxThe llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that...6.5 Mediumnodejs-libsAlmaLinuxThe llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line...6.5 Mediumnodejs-libsAlmaLinuxllhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields6.5 Mediumnodejs-libsAlmaLinuxllhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding6.5 Mediumnodejs-libsAlmaLinuxA OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due...8.1 Highnodejs-libsAlmaLinuxGot allows a redirect to a UNIX socket5.3 Mediumnodejs-libsAlmaLinuxnpm packing does not respect root-level ignore files in workspaces7.5 Highnodejs-libsAlmaLinuxPrototype Pollution in minimist9.8 Criticalnodejs-libsAlmaLinuxInefficient Regular Expression Complexity in chalk/ansi-regex7.5 Highnodejs-libsAlmaLinuxRegular Expression Denial of Service (ReDoS)5.3 Mediumnodejs-libsAlmaLinuxReDoS in normalize-url7.5 Highnodejs-libsAlmaLinuxPrototype Pollution7.3 Highnodejs-libsAlmaLinuxA flaw in Node.js URL processing causes an assertion failure in native code when `url.format()`...5.7 Medium