node-min vulnerabilities (Bitnami)
146 vulnerabilities.
node-minBitnamiAn untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21...4.2 Mediumnode-minBitnamiA cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in...7.5 Highnode-minBitnamiA privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3...7.5 Highnode-minBitnamiCRLF Injection in Nodejs ‘undici’ via host6.5 Mediumnode-minBitnamiA OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19...8.1 Highnode-minBitnamiX.509 Email Address Variable Length Buffer Overflow7.5 Highnode-minBitnamiX.509 Email Address 4-byte Buffer Overflow7.5 Highnode-minBitnamiA weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with...9.1 Criticalnode-minBitnamiThe llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that...6.5 Mediumnode-minBitnamiNode.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows...7.3 Highnode-minBitnamiA cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0...5.3 Mediumnode-minBitnamiThe llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line...6.5 Mediumnode-minBitnamillhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields6.5 Mediumnode-minBitnamillhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding6.5 Mediumnode-minBitnamiA OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due...8.1 Highnode-minBitnamiInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 Highnode-minBitnamiDue to the formatting logic of the "console.table()" function it was not safe to allow user...8.2 Highnode-minBitnamiModerate: nodejs:14 security update5.3 Mediumnode-minBitnamiNode.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names)...5.3 Mediumnode-minBitnamiAccepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to...7.4 Highnode-minBitnamiInvalid handling of X509_verify_cert() internal errors in libssl7.5 Highnode-minBitnamiNode.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an...7.5 Highnode-minBitnamiIf the Node.js https API was used incorrectly and "undefined" was in passed for the ...5.3 Mediumnode-minBitnamiNode.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS,...9.8 Criticalnode-minBitnamiA flaw was found in c-ares library, where a missing input validation check of host names returned...5.6 Mediumnode-minBitnamiUse After Free in node.js9.8 Criticalnode-minBitnamiIncorrect Permission Assignment for Critical Resource in Node7.8 Highnode-minBitnamiOut-of-Bounds Read in Node.js5.3 Mediumnode-minBitnamiCA certificate check bypass with X509_V_FLAG_X509_STRICT7.4 Highnode-minBitnamiNULL pointer deref in signature_algorithms processing5.9 Mediumnode-minBitnamiNode.js bad7.5 Highnode-minBitnamiNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack...7.5 Highnode-minBitnamiInteger overflow in CipherUpdate7.5 Highnode-minBitnamiNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in...6.5 Mediumnode-minBitnamiNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug...8.1 Highnode-minBitnamiEDIPARTYNAME NULL pointer dereference5.9 Mediumnode-minBitnamiUncontrolled Resource Consumption in node7.5 Highnode-minBitnamiNode.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver...7.4 Highnode-minBitnamiThe implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js...7.8 Highnode-minBitnamiNode.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests...7.5 Highnode-minBitnamiTLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and ...7.4 Highnode-minBitnaminapi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,...8.1 Highnode-minBitnamiDenial of service in nghttp23.7 Lownode-minBitnamiAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...8.8 Highnode-minBitnamiA flaw in Node.js URL processing causes an assertion failure in native code when `url.format()`...5.7 Mediumnode-minBitnamiA memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields...6.5 Medium