nodejs vulnerabilities (BellSoft Hardened Containers)
64 vulnerabilities.
nodejsBellSoft Hardened ContainersAn attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount...8.2 HighnodejsBellSoft Hardened ContainersProxy-Authorization header not cleared on cross-origin redirect in fetch in Undici3.9 LownodejsBellSoft Hardened ContainersA vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack...6.5 MediumnodejsBellSoft Hardened ContainersThe Node.js Permission Model does not clarify in the documentation that wildcards should be only...5.0 MediumnodejsBellSoft Hardened ContainersNode.js depends on multiple built-in utility functions to normalize paths provided to node:fs...7.9 HighnodejsBellSoft Hardened ContainersNode.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked...7.4 HighnodejsBellSoft Hardened Containerssetuid() does not affect libuv's internal io_uring operations if initialized before the call to...7.3 HighnodejsBellSoft Hardened ContainersThe permission model protects itself against path traversal attacks by calling path.resolve() on...7.9 HighnodejsBellSoft Hardened ContainersA vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP...7.5 HighnodejsBellSoft Hardened ContainersOn Linux, Node.js ignores certain environment variables if those may have been set by an...7.5 HighnodejsBellSoft Hardened ContainersImproper Domain Lookup that potentially leads to SSRF attacks in libuv7.3 HighnodejsBellSoft Hardened ContainersWhen the Node.js policy feature checks the integrity of a resource against a trusted manifest,...7.5 HighnodejsBellSoft Hardened ContainersA flaw in Node.js URL processing causes an assertion failure in native code when `url.format()`...5.7 MediumnodejsBellSoft Hardened ContainersA memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields...6.5 Medium