nodejs vulnerabilities (Red Hat)
203 vulnerabilities.
nodejsRed HatReDoS in normalize-url7.5 HighnodejsRed HatRegular Expression Denial of Service (ReDoS)5.3 MediumnodejsRed HatRegular Expression Denial of Service (ReDoS)5.3 MediumnodejsRed HatRegular Expression Denial of Service (ReDoS)7.5 HighnodejsRed HatNode.js bad7.5 HighnodejsRed HatNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack...7.5 HighnodejsRed HatNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in...6.5 MediumnodejsRed HatNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug...8.1 HighnodejsRed HatPrototype Pollution7.3 HighnodejsRed HatUncontrolled Resource Consumption in node7.5 HighnodejsRed HatPrototype Pollution7.3 HighnodejsRed HatRegular Expression Denial of Service (ReDoS)7.5 HighnodejsRed HatNode.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver...7.4 HighnodejsRed HatThe implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js...7.8 HighnodejsRed HatPrototype Pollution in Ajv5.6 MediumnodejsRed HatSensitive information exposure through logs in npm cli4.4 MediumnodejsRed HatTLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and ...7.4 HighnodejsRed Hatnapi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,...8.1 HighnodejsRed HatDenial of service in nghttp23.7 LownodejsRed Hatyargs-parser Vulnerable to Prototype Pollution5.3 MediumnodejsRed HatAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...8.8 HighnodejsRed HatPrototype Pollution in minimist5.6 MediumnodejsRed HatIncluding trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of...9.8 CriticalnodejsRed HatImproper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when...7.5 HighnodejsRed HatHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...9.8 CriticalnodejsRed Hatdot-prop Prototype Pollution vulnerability7.3 HighnodejsRed HatArbitrary File Overwrite in npm CLI7.7 HighnodejsRed HatUnauthorized File Access in npm CLI before before version 6.13.37.7 HighnodejsRed HatUnauthorized File Access in npm CLI before before version 6.13.37.7 HighnodejsRed HatPrototype Pollution in set-value9.8 CriticalnodejsRed HatPrototype Pollution in mixin-deep9.8 CriticalnodejsRed HatSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service7.5 HighnodejsRed HatSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 HighnodejsRed HatSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service7.5 HighnodejsRed HatSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service7.5 HighnodejsRed HatSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 HighnodejsRed HatSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service7.5 HighnodejsRed HatSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 HighnodejsRed HatSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service7.5 HighnodejsRed HatIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...7.5 HighnodejsRed HatReDoS via long string of semicolons in tough-cookie5.3 MediumnodejsRed HatThe OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker...5.0 MediumnodejsRed HatA flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin....6.5 MediumnodejsRed HatThe OpenShift image import whitelist failed to enforce restrictions correctly when running...4.3 MediumnodejsRed HatPrototype Pollution in deep-extend9.8 CriticalnodejsRed HatExposure of Sensitive Information to an Unauthorized Actor in Jenkins5.3 MediumnodejsRed HatCRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0...6.1 MediumnodejsRed HatJenkins Cross-Site Request Forgery vulnerabilities6.8 MediumnodejsRed HatJenkins vulnerable to Cross-site Scripting2.1 LownodejsRed HatCross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in...4.3 Medium- Show moreLoading…