node-min vulnerabilities (Bitnami)
146 vulnerabilities.
node-minBitnamiA flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX`...6.5 Mediumnode-minBitnamiIn Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in ...3.7 Lownode-minBitnamiThe C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user...7.5 Highnode-minBitnamiIn Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in ...3.7 Lownode-minBitnamiA vulnerability has been identified in Node.js, specifically affecting the handling of drive...5.6 Mediumnode-minBitnamiA memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY...5.3 Mediumnode-minBitnamiWith the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker...7.7 Highnode-minBitnamiThis CVE has been issued to inform users that they are using End-of-Life (EOL) versions of Node...8.8 Highnode-minBitnamiThis CVE has been issued to inform users that they are using End-of-Life (EOL) versions of Node...8.8 Highnode-minBitnamiThis CVE has been issued to inform users that they are using End-of-Life (EOL) versions of Node...8.8 Highnode-minBitnamiWith the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker...7.7 Highnode-minBitnamiThe Permission Model assumes that any path starting with two backslashes \ has a four-character...3.6 Lownode-minBitnamiBypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with...8.1 Highnode-minBitnamiA vulnerability has been identified in Node.js, affecting users of the experimental permission...3.3 Lownode-minBitnamiA vulnerability has been identified in Node.js, affecting users of the experimental permission...2.9 Lownode-minBitnamiA security flaw in Node.js allows a bypass of network import restrictions. By embedding non...6.5 Mediumnode-minBitnamiDue to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a...8.1 Highnode-minBitnamiCommand injection vulnerability in programing languages on Microsoft Windows operating system.9.8 Criticalnode-minBitnamiThe team has identified a critical vulnerability in the http server of the most recent version of...6.5 Mediumnode-minBitnamiAn attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount...8.2 Highnode-minBitnamiA vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack...6.5 Mediumnode-minBitnamiThe Node.js Permission Model does not clarify in the documentation that wildcards should be only...5.0 Mediumnode-minBitnamiNode.js depends on multiple built-in utility functions to normalize paths provided to node:fs...7.9 Highnode-minBitnamiNode.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked...7.4 Highnode-minBitnamisetuid() does not affect libuv's internal io_uring operations if initialized before the call to...7.3 Highnode-minBitnamiThe permission model protects itself against path traversal attacks by calling path.resolve() on...7.9 Highnode-minBitnamiA vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP...7.5 Highnode-minBitnamiOn Linux, Node.js ignores certain environment variables if those may have been set by an...7.5 Highnode-minBitnamiVarious `node:fs` functions allow specifying paths as either strings or `Uint8Array` objects. In...9.8 Criticalnode-minBitnamiA previously disclosed vulnerability (CVE-2023-30584) was patched insufficiently in commit...7.7 Highnode-minBitnamiMaliciously crafted export names in an imported WebAssembly module can inject JavaScript code....5.3 Mediumnode-minBitnamiWhen the Node.js policy feature checks the integrity of a resource against a trusted manifest,...7.5 Highnode-minBitnamiThe use of the deprecated API `process.binding()` can bypass the permission model through path...7.5 Highnode-minBitnamiA vulnerability has been identified in Node.js version 20, affecting users of the experimental...5.3 Mediumnode-minBitnami`fs.mkdtemp()` and `fs.mkdtempSync()` can be used to bypass the permission model check using a...5.3 Mediumnode-minBitnamiA vulnerability has been discovered in Node.js version 20, specifically within the experimental...8.8 Highnode-minBitnamiA privilege escalation vulnerability exists in the experimental policy mechanism in all active...7.5 Highnode-minBitnamiThe use of `module.constructor.createRequire()` can bypass the policy mechanism and require...8.8 Highnode-minBitnamiThe use of `Module._load()` can bypass the policy mechanism and require modules outside of the...9.8 Criticalnode-minBitnamiEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highnode-minBitnamiA vulnerability in Node.js version 20 allows for bypassing restrictions set by the --experimental...7.5 Highnode-minBitnamiA vulnerability has been discovered in Node.js version 20, specifically within the experimental...7.7 Highnode-minBitnamifs.openAsBlob() can bypass the experimental permission model when using the file system read...7.5 Highnode-minBitnamiA vulnerability has been identified in Node.js version 20, affecting users of the experimental...5.3 Mediumnode-minBitnamiA privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL...7.5 Highnode-minBitnamiThe generateKeys() API function returned from crypto.createDiffieHellman() only generates missing...7.5 Highnode-minBitnamillhttp vulnerable to HTTP request smuggling7.5 Highnode-minBitnamiWhen an invalid public key is used to create an x509 certificate using the crypto.X509Certificate...5.3 Mediumnode-minBitnamiA vulnerability has been identified in the Node.js (.msi version) installation process,...7.5 Highnode-minBitnamiThe use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism...7.5 High- Show moreLoading…