nodejs vulnerabilities (Mageia)
139 vulnerabilities.
nodejsMageianapi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,...8.1 HighnodejsMageiaIncluding trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of...9.8 CriticalnodejsMageiaImproper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when...7.5 HighnodejsMageiaHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...9.8 CriticalnodejsMageiaArbitrary File Overwrite in npm CLI7.7 HighnodejsMageiaUnauthorized File Access in npm CLI before before version 6.13.37.7 HighnodejsMageiaUnauthorized File Access in npm CLI before before version 6.13.37.7 HighnodejsMageiaSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service7.5 HighnodejsMageiaSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 HighnodejsMageiaSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service7.5 HighnodejsMageiaSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service7.5 HighnodejsMageiaSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 HighnodejsMageiaSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service7.5 HighnodejsMageiaSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 HighnodejsMageiaSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service7.5 HighnodejsMageiaKeep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js...7.5 HighnodejsMageiaIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...7.5 HighnodejsMageiaNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in...4.3 MediumnodejsMageiaNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial...7.5 HighnodejsMageiaNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with...7.5 HighnodejsMageiaNode.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by...8.1 HighnodejsMageiaNode.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can...7.5 HighnodejsMageiaIn all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ...7.5 HighnodejsMageiaCalling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could...7.5 HighnodejsMageiaWithdrawn Advisory: Node.js Inspector RCE via DNS Rebinding8.8 HighnodejsMageiaThe HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header,...5.3 MediumnodejsMageiaThe `'path'` module in the Node.js 4.x release line contains a potential regular expression...7.5 HighnodejsMageiaThe c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could...7.5 HighnodejsMageiaThe tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x...5.9 MediumnodejsMageiaCRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0...6.1 MediumnodejsMageiaThe Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before...8.8 HighnodejsMageiaThe HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x...7.5 HighnodejsMageiaNode.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0...7.5 HighnodejsMageialibuv before 0.10.34 does not properly drop group privileges, which allows context-dependent...10.0 HighnodejsMageiaNode.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive...5.0 MediumnodejsMageiaMultiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome...7.5 HighnodejsMageiaThe DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22...7.5 HighnodejsMageiaThe DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22...7.5 HighnodejsMageiaThe HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers...5.0 Medium