nodejs26-devel vulnerabilities (Red Hat)
77 vulnerabilities.
nodejs26-develRed Hatundici WebSocket client vulnerable to denial of service via cumulative fragment bypass7.5 Highnodejs26-develRed Hatundici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse7.5 Highnodejs26-develRed Hatjs-yaml quadratic-complexity denial of service via YAML11_SCHEMA !!omap parsing7.5 Highnodejs26-develRed Hatjs-yaml: YAML merge-key chains can force quadratic CPU consumption5.3 Mediumnodejs26-develRed HatA flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket...3.3 Lownodejs26-develRed HatA flaw in Node.js Permission API can cause a file metadata to be modified even on a path that was...3.3 Lownodejs26-develRed HatA flaw in Node.js TLS host verification can cause an attacker to bypass certification validation....4.3 Mediumnodejs26-develRed HatA flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt(...7.5 Highnodejs26-develRed HatA flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent...5.6 Mediumnodejs26-develRed HatA inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context...4.2 Mediumnodejs26-develRed HatA flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames,...5.3 Mediumnodejs26-develRed HatA flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead...7.7 Highnodejs26-develRed HatA flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL...5.9 Mediumnodejs26-develRed Hatbrace-expansion: Large numeric range defeats documented `max` DoS protection6.5 Medium