nodejs-packaging-bundler vulnerabilities (Red Hat)
123 vulnerabilities.
nodejs-packaging-bundlerRed Hatllhttp vulnerable to HTTP request smuggling7.5 Highnodejs-packaging-bundlerRed HatWhen an invalid public key is used to create an x509 certificate using the crypto.X509Certificate...5.3 Mediumnodejs-packaging-bundlerRed HatThe use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism...7.5 Highnodejs-packaging-bundlerRed Hatsemver vulnerable to Regular Expression Denial of Service5.3 Mediumnodejs-packaging-bundlerRed Hat0-byte UDP payload DoS in c-ares7.5 Highnodejs-packaging-bundlerRed HatInsufficient randomness in generation of DNS query IDs in c-ares5.9 Mediumnodejs-packaging-bundlerRed HatBuffer Underwrite in ares_inet_net_pton()4.1 Mediumnodejs-packaging-bundlerRed HatAutoTools does not set CARES_RANDOM_FILE during cross compilation3.7 Lownodejs-packaging-bundlerRed HatAn untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21...4.2 Mediumnodejs-packaging-bundlerRed HatA cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in...7.5 Highnodejs-packaging-bundlerRed HatA privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3...7.5 Highnodejs-packaging-bundlerRed HatCRLF Injection in Nodejs ‘undici’ via host6.5 Mediumnodejs-packaging-bundlerRed HatUndici vulnerable to Regular Expression Denial of Service in Headers7.5 Highnodejs-packaging-bundlerRed HatA flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the...8.6 Highnodejs-packaging-bundlerRed Hathttp-cache-semantics vulnerable to Regular Expression Denial of Service5.3 Mediumnodejs-packaging-bundlerRed HatA OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19...8.1 Highnodejs-packaging-bundlerRed Hatminimatch ReDoS vulnerability7.5 Highnodejs-packaging-bundlerRed HatA weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with...9.1 Criticalnodejs-packaging-bundlerRed HatThe llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that...6.5 Mediumnodejs-packaging-bundlerRed Hatglob-parent 6.0.0 vulnerable to Regular Expression Denial of Service7.5 Highnodejs-packaging-bundlerRed HatA flaw in Node.js URL processing causes an assertion failure in native code when `url.format()`...5.7 Medium