rh-nodejs12-nodejs-nodemon vulnerabilities (Red Hat)

20 vulnerabilities.

• rh-nodejs12-nodejs-nodemon Red Hat Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an... CVE-2021-22940 Fix available EPSS 13.9% 7.5 HighAugust 16, 2021
• rh-nodejs12-nodejs-nodemon Red Hat If the Node.js https API was used incorrectly and "undefined" was in passed for the ... CVE-2021-22939 Fix available EPSS 14.7% 5.3 MediumAugust 16, 2021
• rh-nodejs12-nodejs-nodemon Red Hat Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS,... CVE-2021-22931 Fix available EPSS 22.0% 9.8 CriticalAugust 16, 2021
• rh-nodejs12-nodejs-nodemon Red Hat A flaw was found in c-ares library, where a missing input validation check of host names returned... CVE-2021-3672 Fix available 5.6 MediumAugust 10, 2021
• rh-nodejs12-nodejs-nodemon Red Hat Use After Free in node.js CVE-2021-22930 Fix available EPSS 36.5% 9.8 CriticalAugust 6, 2021
• rh-nodejs12-nodejs-nodemon Red Hat Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization CVE-2021-32804 Public exploitFix available EPSS 15.1% 8.2 HighAugust 3, 2021
• rh-nodejs12-nodejs-nodemon Red Hat Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning CVE-2021-32803 Fix available 8.2 HighAugust 3, 2021
• rh-nodejs12-nodejs-nodemon Red Hat Out-of-Bounds Read in Node.js CVE-2021-22918 Fix available EPSS 23.1% 5.3 MediumJuly 2, 2021
• rh-nodejs12-nodejs-nodemon Red Hat Regular Expression Denial of Service (ReDoS) CVE-2020-28469 Fix available 5.3 MediumJune 3, 2021
• rh-nodejs12-nodejs-nodemon Red Hat ReDoS in normalize-url CVE-2021-33502 Fix available 7.5 HighMay 24, 2021
• rh-nodejs12-nodejs-nodemon Red Hat Regular Expression Denial of Service (ReDoS) CVE-2021-23343 Fix available 5.3 MediumMay 4, 2021
• rh-nodejs12-nodejs-nodemon Red Hat Regular Expression Denial of Service (ReDoS) CVE-2021-23362 Fix available 5.3 MediumMarch 23, 2021
• rh-nodejs12-nodejs-nodemon Red Hat Regular Expression Denial of Service (ReDoS) CVE-2021-27290 Fix available 7.5 HighMarch 12, 2021
• rh-nodejs12-nodejs-nodemon Red Hat Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in... CVE-2020-8287 Public exploitFix available EPSS 16.3% 6.5 MediumJanuary 6, 2021
• rh-nodejs12-nodejs-nodemon Red Hat Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug... CVE-2020-8265 Fix available 8.1 HighJanuary 6, 2021
• rh-nodejs12-nodejs-nodemon Red Hat Prototype Pollution CVE-2020-7788 Fix available 7.3 HighDecember 10, 2020
• rh-nodejs12-nodejs-nodemon Red Hat Regular Expression Denial of Service (ReDoS) CVE-2020-7754 Fix available 7.5 HighOctober 16, 2020
• rh-nodejs12-nodejs-nodemon Red Hat Prototype Pollution in set-value CVE-2019-10747 Fix available 9.8 CriticalAugust 23, 2019
• rh-nodejs12-nodejs-nodemon Red Hat Prototype Pollution in mixin-deep CVE-2019-10746 Fix available 9.8 CriticalAugust 23, 2019
• rh-nodejs12-nodejs-nodemon Red Hat Prototype Pollution in deep-extend CVE-2018-3750 Fix available 9.8 CriticalJuly 3, 2018