npm vulnerabilities (Red Hat)
197 vulnerabilities.
npmRed HatReDoS in normalize-url7.5 HighnpmRed HatRegular Expression Denial of Service (ReDoS)5.3 MediumnpmRed HatRegular Expression Denial of Service (ReDoS)5.3 MediumnpmRed HatRegular Expression Denial of Service (ReDoS)7.5 HighnpmRed HatNode.js bad7.5 HighnpmRed HatNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack...7.5 HighnpmRed HatNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in...6.5 MediumnpmRed HatNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug...8.1 HighnpmRed HatPrototype Pollution7.3 HighnpmRed HatUncontrolled Resource Consumption in node7.5 HighnpmRed HatPrototype Pollution7.3 HighnpmRed HatRegular Expression Denial of Service (ReDoS)7.5 HighnpmRed HatNode.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver...7.4 HighnpmRed HatThe implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js...7.8 HighnpmRed HatPrototype Pollution in Ajv5.6 MediumnpmRed HatSensitive information exposure through logs in npm cli4.4 MediumnpmRed HatTLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and ...7.4 HighnpmRed Hatnapi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,...8.1 HighnpmRed HatDenial of service in nghttp23.7 LownpmRed Hatyargs-parser Vulnerable to Prototype Pollution5.3 MediumnpmRed HatAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...8.8 HighnpmRed HatPrototype Pollution in minimist5.6 MediumnpmRed HatIncluding trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of...9.8 CriticalnpmRed HatImproper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when...7.5 HighnpmRed HatHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...9.8 CriticalnpmRed Hatdot-prop Prototype Pollution vulnerability7.3 HighnpmRed HatArbitrary File Overwrite in npm CLI7.7 HighnpmRed HatUnauthorized File Access in npm CLI before before version 6.13.37.7 HighnpmRed HatUnauthorized File Access in npm CLI before before version 6.13.37.7 HighnpmRed HatPrototype Pollution in set-value9.8 CriticalnpmRed HatPrototype Pollution in mixin-deep9.8 CriticalnpmRed HatSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service7.5 HighnpmRed HatSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 HighnpmRed HatSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service7.5 HighnpmRed HatSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service7.5 HighnpmRed HatSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 HighnpmRed HatSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service7.5 HighnpmRed HatSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 HighnpmRed HatSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service7.5 HighnpmRed HatIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...7.5 HighnpmRed HatIn all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer...7.5 HighnpmRed HatIn all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ...7.5 HighnpmRed HatPrototype Pollution in deep-extend9.8 CriticalnpmRed HatClient DoS due to large DH parameter7.5 HighnpmRed HatA flaw in Node.js URL processing causes an assertion failure in native code when `url.format()`...5.7 Medium