nodejs vulnerabilities (Azure Linux)
142 vulnerabilities.
nodejsAzure LinuxAn incomplete fix for CVE-2024-36137 leaves `FileHandle.chmod()` and `FileHandle.chown()` in the...3.3 LownodejsAzure LinuxOut of bounds write in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 HighnodejsAzure Linuxnghttp2 Denial of service: Assertion failure due to the missing state validation7.5 HighnodejsAzure LinuxA flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a...5.9 MediumnodejsAzure LinuxWe have identified a bug in Node.js error handling where "Maximum call stack size exceeded"...5.9 MediumnodejsAzure LinuxA malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to...7.5 HighnodejsAzure LinuxA flaw in Node.js's permission model allows a file's access and modification timestamps to be...2.8 LownodejsAzure LinuxA flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are...7.1 HighnodejsAzure LinuxA flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow...7.1 HighnodejsAzure LinuxOut of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote...8.8 HighnodejsAzure LinuxType Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to...8.8 HighnodejsAzure LinuxType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to...8.8 HighnodejsAzure LinuxType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to...8.8 HighnodejsAzure LinuxType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to...8.8 HighnodejsAzure LinuxRace in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially...8.8 HighnodejsAzure LinuxOff by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to...4.3 MediumnodejsAzure LinuxIcu: stack buffer overflow in the srbroot::addtag function7.0 HighnodejsAzure LinuxA flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX`...6.5 MediumnodejsAzure LinuxThe C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user...7.5 HighnodejsAzure LinuxIn Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in ...3.7 LownodejsAzure Linuxundici Denial of Service attack via bad certificate data3.1 LownodejsAzure LinuxOut of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to...8.8 HighnodejsAzure LinuxJinja sandbox breakout through attr filter selecting format method5.4 MediumnodejsAzure LinuxA memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY...5.3 MediumnodejsAzure LinuxOut of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote...7.5 HighnodejsAzure LinuxObject corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to...8.2 HighnodejsAzure LinuxWith the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker...7.7 HighnodejsAzure LinuxUndici Uses Insufficiently Random Values6.8 MediumnodejsAzure LinuxRegular Expression Denial of Service (ReDoS) in cross-spawn8.7 HighnodejsAzure LinuxA vulnerability has been identified in Node.js, affecting users of the experimental permission...3.3 LownodejsAzure LinuxA vulnerability has been identified in Node.js, affecting users of the experimental permission...2.9 LownodejsAzure LinuxA security flaw in Node.js allows a bypass of network import restrictions. By embedding non...6.5 MediumnodejsAzure LinuxExcessive time spent checking DSA keys and parameters5.3 MediumnodejsAzure LinuxJinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter5.4 MediumnodejsAzure LinuxUnbounded memory growth with session handling in TLSv1.35.9 MediumnodejsAzure LinuxThe team has identified a critical vulnerability in the http server of the most recent version of...6.5 MediumnodejsAzure LinuxUndici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect2.6 LownodejsAzure LinuxUndici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline3.9 LownodejsAzure LinuxReading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage5.3 MediumnodejsAzure LinuxAn attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount...8.2 HighnodejsAzure Linuxnode-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation6.5 MediumnodejsAzure Linuxc-ares out of bounds read in ares__read_line()4.4 MediumnodejsAzure LinuxProxy-Authorization header not cleared on cross-origin redirect in fetch in Undici3.9 LownodejsAzure LinuxA vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack...6.5 MediumnodejsAzure LinuxThe Node.js Permission Model does not clarify in the documentation that wildcards should be only...5.0 MediumnodejsAzure LinuxNode.js depends on multiple built-in utility functions to normalize paths provided to node:fs...7.9 HighnodejsAzure Linuxsetuid() does not affect libuv's internal io_uring operations if initialized before the call to...7.3 HighnodejsAzure LinuxThe permission model protects itself against path traversal attacks by calling path.resolve() on...7.9 HighnodejsAzure LinuxA vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP...7.5 HighnodejsAzure LinuxOn Linux, Node.js ignores certain environment variables if those may have been set by an...7.5 High- Show moreLoading…