nodejs vulnerabilities (Alpaquita)
64 vulnerabilities.
nodejsAlpaquitaAn attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount...8.2 HighnodejsAlpaquitaProxy-Authorization header not cleared on cross-origin redirect in fetch in Undici3.9 LownodejsAlpaquitaA vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack...6.5 MediumnodejsAlpaquitaThe Node.js Permission Model does not clarify in the documentation that wildcards should be only...5.0 MediumnodejsAlpaquitaNode.js depends on multiple built-in utility functions to normalize paths provided to node:fs...7.9 HighnodejsAlpaquitaNode.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked...7.4 HighnodejsAlpaquitasetuid() does not affect libuv's internal io_uring operations if initialized before the call to...7.3 HighnodejsAlpaquitaThe permission model protects itself against path traversal attacks by calling path.resolve() on...7.9 HighnodejsAlpaquitaA vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP...7.5 HighnodejsAlpaquitaOn Linux, Node.js ignores certain environment variables if those may have been set by an...7.5 HighnodejsAlpaquitaImproper Domain Lookup that potentially leads to SSRF attacks in libuv7.3 HighnodejsAlpaquitaWhen the Node.js policy feature checks the integrity of a resource against a trusted manifest,...7.5 HighnodejsAlpaquitaA flaw in Node.js URL processing causes an assertion failure in native code when `url.format()`...5.7 MediumnodejsAlpaquitaA memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields...6.5 Medium