reaper vulnerabilities (Azure Linux)
39 vulnerabilities.
-
reaperAzure Linux bn.js affected by an infinite loop 6.9 Medium -
reaperAzure Linux node-forge ASN.1 Unbounded Recursion 8.7 High -
reaperAzure Linux CVE-2025-12816 8.6 High -
reaperAzure Linux Missing type checks leading to hash rewind and passing on crafted data 9.1 Critical -
reaperAzure Linux tar-fs has issue where extract can write outside the specified dir with a specific tarball 8.7 High -
reaperAzure Linux tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File 7.5 High -
reaperAzure Linux path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x 7.7 High -
reaperAzure Linux Regular Expression Denial of Service (ReDoS) in cross-spawn 8.7 High -
reaperAzure Linux Elliptic's verify function omits uniqueness validation 9.1 Critical -
reaperAzure Linux cookie accepts cookie name, path, and domain with out of bounds characters 6.9 Medium -
reaperAzure Linux body-parser vulnerable to denial of service when url encoding is enabled 7.5 High -
reaperAzure Linux serve-static affected by template injection that can lead to XSS 5.0 Medium -
reaperAzure Linux send vulnerable to template injection that can lead to XSS 5.0 Medium -
reaperAzure Linux express vulnerable to XSS via response.redirect() 5.0 Medium -
reaperAzure Linux path-to-regexp outputs backtracking regular expressions 7.5 High -
reaperAzure Linux Elliptic allows BER-encoded signatures 9.1 Critical -
reaperAzure Linux Elliptic's ECDSA missing check for whether leading bit of r and s is zero 5.3 Medium -
reaperAzure Linux Elliptic's EDDSA missing signature length check 5.3 Medium -
reaperAzure Linux XSS in Bootstrap button component 6.4 Medium -
reaperAzure Linux Denial of service when handling a request with many HTTP headers in ws 7.5 High -
reaperAzure Linux Memory Exhaustion in braces 7.5 High -
reaperAzure Linux Express.js Open Redirect in malformed URLs 6.1 Medium -
reaperAzure Linux node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation 6.5 Medium -
reaperAzure Linux Proxy-Authorization header kept across hosts in follow-redirects 6.5 Medium -
reaperAzure Linux NPM IP package incorrectly identifies some private IP addresses as public 9.8 Critical -
reaperAzure Linux Follow Redirects improperly handles URLs in the url.parse() function 7.3 High -
reaperAzure Linux browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack 6.5 Medium -
reaperAzure Linux Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref... 8.8 High -
reaperAzure Linux Server-Side Request Forgery in Request 6.1 Medium -
reaperAzure Linux Prototype pollution in webpack loader-utils 9.8 Critical -
reaperAzure Linux node-forge ASN.1 OID Integer Truncation 6.3 Medium -
reaperAzure Linux Cross-site Scripting (XSS) 3.1 Low -
reaperAzure Linux Improper Certificate Validation in node-sass 5.3 Medium -
reaperAzure Linux Prototype Pollution 7.3 High -
reaperAzure Linux In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp ... 8.8 High -
reaperAzure Linux In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector_List:... 6.5 Medium -
reaperAzure Linux Bootstrap vulnerable to Cross-Site Scripting (XSS) 6.1 Medium -
reaperAzure Linux An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the... 8.8 High -
reaperAzure Linux Regular Expression Denial of Service in moment 7.5 High