nodejs-packaging vulnerabilities (AlmaLinux)
218 vulnerabilities.
nodejs-packagingAlmaLinuxThe parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body...6.5 Mediumnodejs-packagingAlmaLinuxInefficient Regular Expression Complexity in chalk/ansi-regex7.5 Highnodejs-packagingAlmaLinuxArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links8.2 Highnodejs-packagingAlmaLinuxArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links8.2 Highnodejs-packagingAlmaLinuxNode.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an...7.5 Highnodejs-packagingAlmaLinuxIf the Node.js https API was used incorrectly and "undefined" was in passed for the ...5.3 Mediumnodejs-packagingAlmaLinuxNode.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS,...9.8 Criticalnodejs-packagingAlmaLinuxA flaw was found in c-ares library, where a missing input validation check of host names returned...5.6 Mediumnodejs-packagingAlmaLinuxUse After Free in node.js9.8 Criticalnodejs-packagingAlmaLinuxArbitrary File Creation/Overwrite due to insufficient absolute path sanitization8.2 Highnodejs-packagingAlmaLinuxArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning8.2 Highnodejs-packagingAlmaLinuxOut-of-Bounds Read in Node.js5.3 Mediumnodejs-packagingAlmaLinuxRegular Expression Denial of Service (ReDoS)5.3 Mediumnodejs-packagingAlmaLinuxReDoS in normalize-url7.5 Highnodejs-packagingAlmaLinuxRegular Expression Denial of Service (ReDoS)5.3 Mediumnodejs-packagingAlmaLinuxRegular Expression Denial of Service (ReDoS)5.3 Mediumnodejs-packagingAlmaLinuxRegular Expression Denial of Service (ReDoS)7.5 Highnodejs-packagingAlmaLinuxNode.js bad7.5 Highnodejs-packagingAlmaLinuxNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack...7.5 Highnodejs-packagingAlmaLinuxNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in...6.5 Mediumnodejs-packagingAlmaLinuxNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug...8.1 Highnodejs-packagingAlmaLinuxPrototype Pollution7.3 Highnodejs-packagingAlmaLinuxUncontrolled Resource Consumption in node7.5 Highnodejs-packagingAlmaLinuxPrototype Pollution7.3 Highnodejs-packagingAlmaLinuxnodejs:14 bug fix and enhancement updateNo scorenodejs-packagingAlmaLinuxnew module: nodejs:14No scorenodejs-packagingAlmaLinuxRegular Expression Denial of Service (ReDoS)7.5 Highnodejs-packagingAlmaLinuxNode.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver...7.4 Highnodejs-packagingAlmaLinuxThe implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js...7.8 Highnodejs-packagingAlmaLinuxPrototype Pollution in Ajv5.6 Mediumnodejs-packagingAlmaLinuxSensitive information exposure through logs in npm cli4.4 Mediumnodejs-packagingAlmaLinuxTLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and ...7.4 Highnodejs-packagingAlmaLinuxnapi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,...8.1 Highnodejs-packagingAlmaLinuxDenial of service in nghttp23.7 Lownodejs-packagingAlmaLinuxnodejs:10 bug fix updateNo scorenodejs-packagingAlmaLinuxnodejs:12 bug fix updateNo scorenodejs-packagingAlmaLinuxyargs-parser Vulnerable to Prototype Pollution5.3 Mediumnodejs-packagingAlmaLinuxAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...8.8 Highnodejs-packagingAlmaLinuxPrototype Pollution in minimist5.6 Mediumnodejs-packagingAlmaLinuxIncluding trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of...9.8 Criticalnodejs-packagingAlmaLinuxImproper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when...7.5 Highnodejs-packagingAlmaLinuxHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...9.8 Criticalnodejs-packagingAlmaLinuxdot-prop Prototype Pollution vulnerability7.3 Highnodejs-packagingAlmaLinuxnodejs:12 bug fix updateNo scorenodejs-packagingAlmaLinuxArbitrary File Overwrite in npm CLI7.7 Highnodejs-packagingAlmaLinuxUnauthorized File Access in npm CLI before before version 6.13.37.7 Highnodejs-packagingAlmaLinuxUnauthorized File Access in npm CLI before before version 6.13.37.7 Highnodejs-packagingAlmaLinuxnew module: nodejs:12No scorenodejs-packagingAlmaLinuxPrototype Pollution in set-value9.8 Criticalnodejs-packagingAlmaLinuxPrototype Pollution in mixin-deep9.8 Critical- Show moreLoading…