nodejs18 vulnerabilities (Azure Linux)
60 vulnerabilities.
-
nodejs18Azure Linux We have identified a bug in Node.js error handling where "Maximum call stack size exceeded"... 5.9 Medium -
nodejs18Azure Linux A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are... 7.1 High -
nodejs18Azure Linux Race in v8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially... 7.5 High -
nodejs18Azure Linux Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to... 8.8 High -
nodejs18Azure Linux Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137 allowed a remote... 8.8 High -
nodejs18Azure Linux Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to... 8.8 High -
nodejs18Azure Linux Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to... 8.8 High -
nodejs18Azure Linux Out of bounds read in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to... 4.3 Medium -
nodejs18Azure Linux Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote... 4.3 Medium -
nodejs18Azure Linux Race in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially... 8.8 High -
nodejs18Azure Linux Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote... 8.8 High -
nodejs18Azure Linux Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform... 8.8 High -
nodejs18Azure Linux Use after free in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to... 3.1 Low -
nodejs18Azure Linux Off by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to... 4.3 Medium -
nodejs18Azure Linux Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to... 8.8 High -
nodejs18Azure Linux juliangruber brace-expansion index.js expand redos 2.3 Low -
nodejs18Azure Linux Icu: stack buffer overflow in the srbroot::addtag function 7.0 High -
nodejs18Azure Linux A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX`... 6.5 Medium -
nodejs18Azure Linux The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user... 7.5 High -
nodejs18Azure Linux undici Denial of Service attack via bad certificate data 3.1 Low -
nodejs18Azure Linux Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to... 8.8 High -
nodejs18Azure Linux Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to... 8.8 High -
nodejs18Azure Linux Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to... 8.8 High -
nodejs18Azure Linux Jinja sandbox breakout through attr filter selecting format method 5.4 Medium -
nodejs18Azure Linux Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to... 8.8 High -
nodejs18Azure Linux Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to... 8.8 High -
nodejs18Azure Linux A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY... 5.3 Medium -
nodejs18Azure Linux Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote... 7.5 High -
nodejs18Azure Linux Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to... 8.2 High -
nodejs18Azure Linux Undici Uses Insufficiently Random Values 6.8 Medium -
nodejs18Azure Linux Regular Expression Denial of Service (ReDoS) in cross-spawn 8.7 High -
nodejs18Azure Linux A security flaw in Node.js allows a bypass of network import restrictions. By embedding non... 6.5 Medium -
nodejs18Azure Linux Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter 5.4 Medium -
nodejs18Azure Linux The team has identified a critical vulnerability in the http server of the most recent version of... 6.5 Medium -
nodejs18Azure Linux Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect 2.6 Low -
nodejs18Azure Linux Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline 3.9 Low -
nodejs18Azure Linux Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage 5.3 Medium -
nodejs18Azure Linux An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount... 8.2 High -
nodejs18Azure Linux node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation 6.5 Medium -
nodejs18Azure Linux c-ares out of bounds read in ares__read_line() 4.4 Medium -
nodejs18Azure Linux A vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack... 6.5 Medium -
nodejs18Azure Linux A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP... 7.5 High -
nodejs18Azure Linux On Linux, Node.js ignores certain environment variables if those may have been set by an... 7.5 High -
nodejs18Azure Linux NPM IP package incorrectly identifies some private IP addresses as public 9.8 Critical -
nodejs18Azure Linux Improper Domain Lookup that potentially leads to SSRF attacks in libuv 7.3 High -
nodejs18Azure Linux Excessive time spent checking invalid RSA public keys 5.9 Medium -
nodejs18Azure Linux Jinja vulnerable to Cross-Site Scripting (XSS) 5.4 Medium -
nodejs18Azure Linux When the Node.js policy feature checks the integrity of a resource against a trusted manifest,... 7.5 High -
nodejs18Azure Linux Undici's cookie header not cleared on cross-origin redirect in fetch 3.9 Low -
nodejs18Azure Linux A privilege escalation vulnerability exists in the experimental policy mechanism in all active... 7.5 High - Show olderLoading…