nodejs22 vulnerabilities (Red Hat)
81 vulnerabilities.
nodejs22Red Hatundici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression7.5 Highnodejs22Red Hatundici is vulnerable to Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')6.5 Mediumnodejs22Red Hatminimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions7.5 Highnodejs22Red Hatminimatch has a ReDoS via repeated wildcards with non-matching literal in pattern8.7 Highnodejs22Red HatUncontrolled Resource Consumption in @isaacs/brace-expansion9.2 Criticalnodejs22Red HatA flaw in Node.js's permission model allows Unix Domain Socket (UDS) connections to bypass...5.8 Mediumnodejs22Red HatA flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a...5.9 Mediumnodejs22Red HatWe have identified a bug in Node.js error handling where "Maximum call stack size exceeded"...5.9 Mediumnodejs22Red HatA malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to...7.5 Highnodejs22Red HatA flaw in Node.js's permission model allows a file's access and modification timestamps to be...2.8 Lownodejs22Red HatA flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are...7.1 Highnodejs22Red HatA flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow...7.1 Highnodejs22Red HatThe C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user...7.5 Highnodejs22Red HatIn Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in ...3.7 Lownodejs22Red Hatc-ares has a use-after-free in read_answers()8.3 Highnodejs22Red HatA memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields...6.5 Medium