nodejs vulnerabilities (Debian)
142 vulnerabilities.
nodejsDebianIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...7.5 HighnodejsDebianNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in...4.3 MediumnodejsDebianNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial...7.5 HighnodejsDebianNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with...7.5 HighnodejsDebianNode.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by...8.1 HighnodejsDebianNode.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can...7.5 HighnodejsDebianIn all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ...7.5 HighnodejsDebianCalling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could...7.5 HighnodejsDebianNode.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM. A bug...7.5 HighnodejsDebianAll versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can...7.5 HighnodejsDebianAll versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker...7.5 HighnodejsDebianWithdrawn Advisory: Node.js Inspector RCE via DNS Rebinding8.8 HighnodejsDebianThe HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header,...5.3 MediumnodejsDebianThe `'path'` module in the Node.js 4.x release line contains a potential regular expression...7.5 HighnodejsDebianNode.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service.7.5 HighnodejsDebianNode.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0,...7.5 HighnodejsDebianThe tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x...5.9 MediumnodejsDebianCRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0...6.1 MediumnodejsDebianThe Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before...8.8 HighnodejsDebianThe HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x...7.5 HighnodejsDebianNode.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0...7.5 HighnodejsDebianNode.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the...7.5 HighnodejsDebianThe BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier...9.8 CriticalnodejsDebianNode.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive...5.0 MediumnodejsDebianThe HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers...5.0 MediumnodejsDebianThe Update method in src/node_http_parser.cc in Node.js before 0.6.17 and 0.7 before 0.7.8 does...6.4 Medium