node vulnerabilities (Bitnami)
146 vulnerabilities.
nodeBitnamiA flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX`...6.5 MediumnodeBitnamiIn Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in ...3.7 LownodeBitnamiThe C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user...7.5 HighnodeBitnamiIn Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in ...3.7 LownodeBitnamiA vulnerability has been identified in Node.js, specifically affecting the handling of drive...5.6 MediumnodeBitnamiA memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY...5.3 MediumnodeBitnamiWith the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker...7.7 HighnodeBitnamiThis CVE has been issued to inform users that they are using End-of-Life (EOL) versions of Node...8.8 HighnodeBitnamiThis CVE has been issued to inform users that they are using End-of-Life (EOL) versions of Node...8.8 HighnodeBitnamiThis CVE has been issued to inform users that they are using End-of-Life (EOL) versions of Node...8.8 HighnodeBitnamiWith the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker...7.7 HighnodeBitnamiThe Permission Model assumes that any path starting with two backslashes \ has a four-character...3.6 LownodeBitnamiBypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with...8.1 HighnodeBitnamiA vulnerability has been identified in Node.js, affecting users of the experimental permission...3.3 LownodeBitnamiA vulnerability has been identified in Node.js, affecting users of the experimental permission...2.9 LownodeBitnamiA security flaw in Node.js allows a bypass of network import restrictions. By embedding non...6.5 MediumnodeBitnamiDue to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a...8.1 HighnodeBitnamiCommand injection vulnerability in programing languages on Microsoft Windows operating system.9.8 CriticalnodeBitnamiThe team has identified a critical vulnerability in the http server of the most recent version of...6.5 MediumnodeBitnamiAn attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount...8.2 HighnodeBitnamiA vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack...6.5 MediumnodeBitnamiThe Node.js Permission Model does not clarify in the documentation that wildcards should be only...5.0 MediumnodeBitnamiNode.js depends on multiple built-in utility functions to normalize paths provided to node:fs...7.9 HighnodeBitnamiNode.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked...7.4 HighnodeBitnamisetuid() does not affect libuv's internal io_uring operations if initialized before the call to...7.3 HighnodeBitnamiThe permission model protects itself against path traversal attacks by calling path.resolve() on...7.9 HighnodeBitnamiA vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP...7.5 HighnodeBitnamiOn Linux, Node.js ignores certain environment variables if those may have been set by an...7.5 HighnodeBitnamiVarious `node:fs` functions allow specifying paths as either strings or `Uint8Array` objects. In...9.8 CriticalnodeBitnamiA previously disclosed vulnerability (CVE-2023-30584) was patched insufficiently in commit...7.7 HighnodeBitnamiMaliciously crafted export names in an imported WebAssembly module can inject JavaScript code....5.3 MediumnodeBitnamiWhen the Node.js policy feature checks the integrity of a resource against a trusted manifest,...7.5 HighnodeBitnamiThe use of the deprecated API `process.binding()` can bypass the permission model through path...7.5 HighnodeBitnamiA vulnerability has been identified in Node.js version 20, affecting users of the experimental...5.3 MediumnodeBitnami`fs.mkdtemp()` and `fs.mkdtempSync()` can be used to bypass the permission model check using a...5.3 MediumnodeBitnamiA vulnerability has been discovered in Node.js version 20, specifically within the experimental...8.8 HighnodeBitnamiA privilege escalation vulnerability exists in the experimental policy mechanism in all active...7.5 HighnodeBitnamiThe use of `module.constructor.createRequire()` can bypass the policy mechanism and require...8.8 HighnodeBitnamiThe use of `Module._load()` can bypass the policy mechanism and require modules outside of the...9.8 CriticalnodeBitnamiEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighnodeBitnamiA vulnerability in Node.js version 20 allows for bypassing restrictions set by the --experimental...7.5 HighnodeBitnamiA vulnerability has been discovered in Node.js version 20, specifically within the experimental...7.7 HighnodeBitnamifs.openAsBlob() can bypass the experimental permission model when using the file system read...7.5 HighnodeBitnamiA vulnerability has been identified in Node.js version 20, affecting users of the experimental...5.3 MediumnodeBitnamiA privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL...7.5 HighnodeBitnamiThe generateKeys() API function returned from crypto.createDiffieHellman() only generates missing...7.5 HighnodeBitnamillhttp vulnerable to HTTP request smuggling7.5 HighnodeBitnamiWhen an invalid public key is used to create an x509 certificate using the crypto.X509Certificate...5.3 MediumnodeBitnamiA vulnerability has been identified in the Node.js (.msi version) installation process,...7.5 HighnodeBitnamiThe use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism...7.5 High- Show moreLoading…