nodejs-nodemon vulnerabilities (Azure Linux)
44 vulnerabilities.
-
nodejs-nodemonAzure Linux Picomatch through 4.0.7 ReDoS via single-branch repeated extglob patterns 8.7 High -
nodejs-nodemonAzure Linux brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion 7.5 High -
nodejs-nodemonAzure Linux brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service 5.3 Medium -
nodejs-nodemonAzure Linux brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion 7.5 High -
nodejs-nodemonAzure Linux http-cache-semantics through 4.2.0 Cross-Client Cache Disclosure via Vary Wildcard 8.2 High -
nodejs-nodemonAzure Linux http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale 8.7 High -
nodejs-nodemonAzure Linux braces through 3.0.3 Stack Overflow via Deeply Nested Patterns 8.7 High -
nodejs-nodemonAzure Linux qs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property 6.3 Medium -
nodejs-nodemonAzure Linux brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation 7.5 High -
nodejs-nodemonAzure Linux brace-expansion DoS via unbounded expansion length causing an out-of-memory process crash 7.5 High -
nodejs-nodemonAzure Linux qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly 6.3 Medium -
nodejs-nodemonAzure Linux brace-expansion: Zero-step sequence causes process hang and memory exhaustion 6.5 Medium -
nodejs-nodemonAzure Linux Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching 5.3 Medium -
nodejs-nodemonAzure Linux Picomatch has a ReDoS vulnerability via extglob quantifiers 7.5 High -
nodejs-nodemonAzure Linux minimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments 7.5 High -
nodejs-nodemonAzure Linux qs's arrayLimit bypass in comma parsing allows denial of service 6.3 Medium -
nodejs-nodemonAzure Linux arrayLimit bypass in bracket notation allows DoS via memory exhaustion 6.3 Medium -
nodejs-nodemonAzure Linux juliangruber brace-expansion index.js expand redos 2.3 Low -
nodejs-nodemonAzure Linux path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x 7.7 High -
nodejs-nodemonAzure Linux cookie accepts cookie name, path, and domain with out of bounds characters 6.9 Medium -
nodejs-nodemonAzure Linux serve-static affected by template injection that can lead to XSS 5.0 Medium -
nodejs-nodemonAzure Linux send vulnerable to template injection that can lead to XSS 5.0 Medium -
nodejs-nodemonAzure Linux express vulnerable to XSS via response.redirect() 5.0 Medium -
nodejs-nodemonAzure Linux path-to-regexp outputs backtracking regular expressions 7.5 High -
nodejs-nodemonAzure Linux Memory Exhaustion in braces 7.5 High -
nodejs-nodemonAzure Linux Express.js Open Redirect in malformed URLs 6.1 Medium -
nodejs-nodemonAzure Linux semver vulnerable to Regular Expression Denial of Service 5.3 Medium -
nodejs-nodemonAzure Linux http-cache-semantics vulnerable to Regular Expression Denial of Service 5.3 Medium -
nodejs-nodemonAzure Linux vercel ms index.js parse redos 4.3 Medium -
nodejs-nodemonAzure Linux qs vulnerable to Prototype Pollution 7.5 High -
nodejs-nodemonAzure Linux minimatch ReDoS vulnerability 7.5 High -
nodejs-nodemonAzure Linux Regular Expression Denial of Service (ReDoS) 5.3 Medium -
nodejs-nodemonAzure Linux ReDoS in normalize-url 7.5 High -
nodejs-nodemonAzure Linux Prototype Pollution 7.3 High -
nodejs-nodemonAzure Linux Prototype Pollution in minimist 5.6 Medium -
nodejs-nodemonAzure Linux Prototype Pollution in undefsafe 6.3 Medium -
nodejs-nodemonAzure Linux cookie-signature Timing Attack 4.4 Medium -
nodejs-nodemonAzure Linux Regular Expression Denial of Service in debug 5.3 Medium -
nodejs-nodemonAzure Linux Arbitrary File Overwrite in decompress-zip 7.5 High -
nodejs-nodemonAzure Linux Arbitrary File Overwrite in decompress-zip 7.5 High -
nodejs-nodemonAzure Linux Regular Expression Denial of Service in negotiator 7.5 High -
nodejs-nodemonAzure Linux Prototype Pollution Protection Bypass in qs 7.5 High -
nodejs-nodemonAzure Linux Root Path Disclosure in send 5.3 Medium -
nodejs-nodemonAzure Linux Open Redirect in serve-static 4.3 Medium