rh-nodejs10-npm vulnerabilities (Red Hat)

35 vulnerabilities.

• rh-nodejs10-npm Red Hat Node.js bad CVE-2021-22884 Fix available EPSS 36.8% 7.5 HighFebruary 24, 2021
• rh-nodejs10-npm Red Hat Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack... CVE-2021-22883 Fix available EPSS 77.4% 7.5 HighFebruary 24, 2021
• rh-nodejs10-npm Red Hat Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in... CVE-2020-8287 Public exploitFix available EPSS 16.3% 6.5 MediumJanuary 6, 2021
• rh-nodejs10-npm Red Hat Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug... CVE-2020-8265 Fix available 8.1 HighJanuary 6, 2021
• rh-nodejs10-npm Red Hat Prototype Pollution CVE-2020-7788 Fix available 7.3 HighDecember 10, 2020
• rh-nodejs10-npm Red Hat Prototype Pollution CVE-2020-7774 Fix available EPSS 69.6% 7.3 HighNovember 17, 2020
• rh-nodejs10-npm Red Hat Regular Expression Denial of Service (ReDoS) CVE-2020-7754 Fix available 7.5 HighOctober 16, 2020
• rh-nodejs10-npm Red Hat The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js... CVE-2020-8252 Fix available 7.8 HighSeptember 18, 2020
• rh-nodejs10-npm Red Hat Prototype Pollution in Ajv CVE-2020-15366 Fix available 5.6 MediumJuly 15, 2020
• rh-nodejs10-npm Red Hat Sensitive information exposure through logs in npm cli CVE-2020-15095 Fix available 4.4 MediumJuly 7, 2020
• rh-nodejs10-npm Red Hat napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,... CVE-2020-8174 Fix available 8.1 HighJune 6, 2020
• rh-nodejs10-npm Red Hat Denial of service in nghttp2 CVE-2020-11080 Fix available 3.7 LowJune 3, 2020
• rh-nodejs10-npm Red Hat yargs-parser Vulnerable to Prototype Pollution CVE-2020-7608 Fix available 5.3 MediumMarch 16, 2020
• rh-nodejs10-npm Red Hat An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An... CVE-2020-10531 Fix available 8.8 HighMarch 12, 2020
• rh-nodejs10-npm Red Hat Prototype Pollution in minimist CVE-2020-7598 Public exploitFix available 5.6 MediumMarch 11, 2020
• rh-nodejs10-npm Red Hat Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of... CVE-2019-15606 Fix available EPSS 20.0% 9.8 CriticalFebruary 7, 2020
• rh-nodejs10-npm Red Hat Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when... CVE-2019-15604 Fix available EPSS 20.0% 7.5 HighFebruary 7, 2020
• rh-nodejs10-npm Red Hat HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer... CVE-2019-15605 Public exploitFix available EPSS 57.1% 9.8 CriticalFebruary 7, 2020
• rh-nodejs10-npm Red Hat dot-prop Prototype Pollution vulnerability CVE-2020-8116 Fix available 7.3 HighFebruary 4, 2020
• rh-nodejs10-npm Red Hat Arbitrary File Overwrite in npm CLI CVE-2019-16777 Fix available 7.7 HighDecember 13, 2019
• rh-nodejs10-npm Red Hat Unauthorized File Access in npm CLI before before version 6.13.3 CVE-2019-16776 Fix available 7.7 HighDecember 13, 2019
• rh-nodejs10-npm Red Hat Unauthorized File Access in npm CLI before before version 6.13.3 CVE-2019-16775 Fix available 7.7 HighDecember 13, 2019
• rh-nodejs10-npm Red Hat Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service CVE-2019-9518 Fix available EPSS 25.4% 7.5 HighAugust 13, 2019
• rh-nodejs10-npm Red Hat Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service CVE-2019-9517 Fix available EPSS 27.0% 7.5 HighAugust 13, 2019
• rh-nodejs10-npm Red Hat Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service CVE-2019-9516 Fix available EPSS 57.5% 7.5 HighAugust 13, 2019
• rh-nodejs10-npm Red Hat Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service CVE-2019-9515 Fix available EPSS 87.3% 7.5 HighAugust 13, 2019
• rh-nodejs10-npm Red Hat Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service CVE-2019-9514 Fix available EPSS 82.8% 7.5 HighAugust 13, 2019
• rh-nodejs10-npm Red Hat Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service CVE-2019-9513 Public exploitFix available EPSS 81.6% 7.5 HighAugust 13, 2019
• rh-nodejs10-npm Red Hat Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service CVE-2019-9512 Fix available EPSS 83.4% 7.5 HighAugust 13, 2019
• rh-nodejs10-npm Red Hat Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service CVE-2019-9511 Public exploitFix available EPSS 59.5% 7.5 HighAugust 13, 2019
• rh-nodejs10-npm Red Hat In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before... CVE-2019-5737 Public exploitFix available EPSS 16.2% 7.5 HighMarch 18, 2019
• rh-nodejs10-npm Red Hat Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in... CVE-2018-12123 Fix available 4.3 MediumNovember 28, 2018
• rh-nodejs10-npm Red Hat Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial... CVE-2018-12122 Fix available EPSS 41.3% 7.5 HighNovember 28, 2018
• rh-nodejs10-npm Red Hat Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with... CVE-2018-12121 Fix available EPSS 10.2% 7.5 HighNovember 28, 2018
• rh-nodejs10-npm Red Hat In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer... CVE-2018-7166 Fix available 7.5 HighAugust 21, 2018