node vulnerabilities (Bitnami)
146 vulnerabilities.
nodeBitnamiAn untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21...4.2 MediumnodeBitnamiA cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in...7.5 HighnodeBitnamiA privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3...7.5 HighnodeBitnamiCRLF Injection in Nodejs ‘undici’ via host6.5 MediumnodeBitnamiA OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19...8.1 HighnodeBitnamiX.509 Email Address Variable Length Buffer Overflow7.5 HighnodeBitnamiX.509 Email Address 4-byte Buffer Overflow7.5 HighnodeBitnamiA weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with...9.1 CriticalnodeBitnamiThe llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that...6.5 MediumnodeBitnamiNode.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows...7.3 HighnodeBitnamiA cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0...5.3 MediumnodeBitnamiThe llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line...6.5 MediumnodeBitnamillhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields6.5 MediumnodeBitnamillhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding6.5 MediumnodeBitnamiA OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due...8.1 HighnodeBitnamiInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 HighnodeBitnamiDue to the formatting logic of the "console.table()" function it was not safe to allow user...8.2 HighnodeBitnamiModerate: nodejs:14 security update5.3 MediumnodeBitnamiNode.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names)...5.3 MediumnodeBitnamiAccepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to...7.4 HighnodeBitnamiInvalid handling of X509_verify_cert() internal errors in libssl7.5 HighnodeBitnamiNode.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an...7.5 HighnodeBitnamiIf the Node.js https API was used incorrectly and "undefined" was in passed for the ...5.3 MediumnodeBitnamiNode.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS,...9.8 CriticalnodeBitnamiA flaw was found in c-ares library, where a missing input validation check of host names returned...5.6 MediumnodeBitnamiUse After Free in node.js9.8 CriticalnodeBitnamiIncorrect Permission Assignment for Critical Resource in Node7.8 HighnodeBitnamiOut-of-Bounds Read in Node.js5.3 MediumnodeBitnamiCA certificate check bypass with X509_V_FLAG_X509_STRICT7.4 HighnodeBitnamiNULL pointer deref in signature_algorithms processing5.9 MediumnodeBitnamiNode.js bad7.5 HighnodeBitnamiNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack...7.5 HighnodeBitnamiInteger overflow in CipherUpdate7.5 HighnodeBitnamiNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in...6.5 MediumnodeBitnamiNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug...8.1 HighnodeBitnamiEDIPARTYNAME NULL pointer dereference5.9 MediumnodeBitnamiUncontrolled Resource Consumption in node7.5 HighnodeBitnamiNode.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver...7.4 HighnodeBitnamiThe implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js...7.8 HighnodeBitnamiNode.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests...7.5 HighnodeBitnamiTLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and ...7.4 HighnodeBitnaminapi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,...8.1 HighnodeBitnamiDenial of service in nghttp23.7 LownodeBitnamiAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...8.8 HighnodeBitnamiA flaw in Node.js URL processing causes an assertion failure in native code when `url.format()`...5.7 MediumnodeBitnamiA memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields...6.5 Medium