nodejs-debuginfo vulnerabilities (Red Hat)
203 vulnerabilities.
nodejs-debuginfoRed HatReDoS in normalize-url7.5 Highnodejs-debuginfoRed HatRegular Expression Denial of Service (ReDoS)5.3 Mediumnodejs-debuginfoRed HatRegular Expression Denial of Service (ReDoS)5.3 Mediumnodejs-debuginfoRed HatRegular Expression Denial of Service (ReDoS)7.5 Highnodejs-debuginfoRed HatNode.js bad7.5 Highnodejs-debuginfoRed HatNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack...7.5 Highnodejs-debuginfoRed HatNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in...6.5 Mediumnodejs-debuginfoRed HatNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug...8.1 Highnodejs-debuginfoRed HatPrototype Pollution7.3 Highnodejs-debuginfoRed HatUncontrolled Resource Consumption in node7.5 Highnodejs-debuginfoRed HatPrototype Pollution7.3 Highnodejs-debuginfoRed HatRegular Expression Denial of Service (ReDoS)7.5 Highnodejs-debuginfoRed HatNode.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver...7.4 Highnodejs-debuginfoRed HatThe implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js...7.8 Highnodejs-debuginfoRed HatPrototype Pollution in Ajv5.6 Mediumnodejs-debuginfoRed HatSensitive information exposure through logs in npm cli4.4 Mediumnodejs-debuginfoRed HatTLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and ...7.4 Highnodejs-debuginfoRed Hatnapi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,...8.1 Highnodejs-debuginfoRed HatDenial of service in nghttp23.7 Lownodejs-debuginfoRed Hatyargs-parser Vulnerable to Prototype Pollution5.3 Mediumnodejs-debuginfoRed HatAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...8.8 Highnodejs-debuginfoRed HatPrototype Pollution in minimist5.6 Mediumnodejs-debuginfoRed HatIncluding trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of...9.8 Criticalnodejs-debuginfoRed HatImproper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when...7.5 Highnodejs-debuginfoRed HatHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...9.8 Criticalnodejs-debuginfoRed Hatdot-prop Prototype Pollution vulnerability7.3 Highnodejs-debuginfoRed HatArbitrary File Overwrite in npm CLI7.7 Highnodejs-debuginfoRed HatUnauthorized File Access in npm CLI before before version 6.13.37.7 Highnodejs-debuginfoRed HatUnauthorized File Access in npm CLI before before version 6.13.37.7 Highnodejs-debuginfoRed HatPrototype Pollution in set-value9.8 Criticalnodejs-debuginfoRed HatPrototype Pollution in mixin-deep9.8 Criticalnodejs-debuginfoRed HatSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service7.5 Highnodejs-debuginfoRed HatSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 Highnodejs-debuginfoRed HatSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service7.5 Highnodejs-debuginfoRed HatSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service7.5 Highnodejs-debuginfoRed HatSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 Highnodejs-debuginfoRed HatSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service7.5 Highnodejs-debuginfoRed HatSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 Highnodejs-debuginfoRed HatSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service7.5 Highnodejs-debuginfoRed HatIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...7.5 Highnodejs-debuginfoRed HatReDoS via long string of semicolons in tough-cookie5.3 Mediumnodejs-debuginfoRed HatThe OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker...5.0 Mediumnodejs-debuginfoRed HatA flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin....6.5 Mediumnodejs-debuginfoRed HatThe OpenShift image import whitelist failed to enforce restrictions correctly when running...4.3 Mediumnodejs-debuginfoRed HatPrototype Pollution in deep-extend9.8 Criticalnodejs-debuginfoRed HatExposure of Sensitive Information to an Unauthorized Actor in Jenkins5.3 Mediumnodejs-debuginfoRed HatCRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0...6.1 Mediumnodejs-debuginfoRed HatJenkins Cross-Site Request Forgery vulnerabilities6.8 Mediumnodejs-debuginfoRed HatJenkins vulnerable to Cross-site Scripting2.1 Lownodejs-debuginfoRed HatCross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in...4.3 Medium- Show moreLoading…