nodejs vulnerabilities (Alpine)
149 vulnerabilities.
nodejsAlpinenapi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,...8.1 HighnodejsAlpineDenial of service in nghttp23.7 LownodejsAlpineIncluding trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of...9.8 CriticalnodejsAlpineImproper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when...7.5 HighnodejsAlpineHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...9.8 CriticalnodejsAlpineSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service7.5 HighnodejsAlpineSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 HighnodejsAlpineSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service7.5 HighnodejsAlpineSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service7.5 HighnodejsAlpineSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 HighnodejsAlpineSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service7.5 HighnodejsAlpineSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 HighnodejsAlpineSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service7.5 HighnodejsAlpineIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...7.5 HighnodejsAlpineNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in...4.3 MediumnodejsAlpineNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial...7.5 HighnodejsAlpineNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with...7.5 HighnodejsAlpineNode.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can...7.5 HighnodejsAlpineTiming attack against DSA5.9 MediumnodejsAlpineTiming attack against ECDSA signature generation5.9 MediumnodejsAlpineIn all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ...7.5 HighnodejsAlpineCalling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could...7.5 HighnodejsAlpineAll versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker...7.5 HighnodejsAlpineWithdrawn Advisory: Node.js Inspector RCE via DNS Rebinding8.8 HighnodejsAlpineThe HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header,...5.3 MediumnodejsAlpineThe `'path'` module in the Node.js 4.x release line contains a potential regular expression...7.5 HighnodejsAlpinenghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20...7.5 HighnodejsAlpineNode.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the...3.1 LownodejsAlpineNode.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read()...9.1 CriticalnodejsAlpineNode.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a...7.5 HighnodejsAlpineThe c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could...7.5 HighnodejsAlpineHeap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows...9.8 CriticalnodejsAlpineGoogle V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly...8.8 HighnodejsAlpineA flaw in Node.js URL processing causes an assertion failure in native code when `url.format()`...5.7 Medium