rh-nodejs12-npm vulnerabilities (Red Hat)

51 vulnerabilities.

• rh-nodejs12-npm Red Hat Prototype Pollution in minimist CVE-2021-44906 Public exploitFix available 9.8 CriticalMarch 17, 2022
• rh-nodejs12-npm Red Hat Due to the formatting logic of the "console.table()" function it was not safe to allow user... CVE-2022-21824 Fix available EPSS 21.5% 8.2 HighJanuary 18, 2022
• rh-nodejs12-npm Red Hat Moderate: nodejs:14 security update CVE-2021-44533 Fix available 5.3 MediumJanuary 18, 2022
• rh-nodejs12-npm Red Hat Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names)... CVE-2021-44532 Fix available EPSS 10.4% 5.3 MediumJanuary 18, 2022
• rh-nodejs12-npm Red Hat Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to... CVE-2021-44531 Fix available 7.4 HighJanuary 18, 2022
• rh-nodejs12-npm Red Hat The parser in accepts requests with a space (SP) right after the header name before the colon.... CVE-2021-22959 Fix available 6.5 MediumNovember 15, 2021
• rh-nodejs12-npm Red Hat Prototype Pollution in kriszyp/json-schema CVE-2021-3918 Fix available 9.8 CriticalNovember 13, 2021
• rh-nodejs12-npm Red Hat The parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body... CVE-2021-22960 Fix available 6.5 MediumNovember 3, 2021
• rh-nodejs12-npm Red Hat Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links CVE-2021-37712 Fix available 8.2 HighAugust 31, 2021
• rh-nodejs12-npm Red Hat Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links CVE-2021-37701 Fix available 8.2 HighAugust 31, 2021
• rh-nodejs12-npm Red Hat Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an... CVE-2021-22940 Fix available EPSS 13.9% 7.5 HighAugust 16, 2021
• rh-nodejs12-npm Red Hat If the Node.js https API was used incorrectly and "undefined" was in passed for the ... CVE-2021-22939 Fix available EPSS 14.7% 5.3 MediumAugust 16, 2021
• rh-nodejs12-npm Red Hat Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS,... CVE-2021-22931 Fix available EPSS 22.0% 9.8 CriticalAugust 16, 2021
• rh-nodejs12-npm Red Hat A flaw was found in c-ares library, where a missing input validation check of host names returned... CVE-2021-3672 Fix available 5.6 MediumAugust 10, 2021
• rh-nodejs12-npm Red Hat Use After Free in node.js CVE-2021-22930 Fix available EPSS 36.5% 9.8 CriticalAugust 6, 2021
• rh-nodejs12-npm Red Hat Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization CVE-2021-32804 Public exploitFix available EPSS 15.1% 8.2 HighAugust 3, 2021
• rh-nodejs12-npm Red Hat Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning CVE-2021-32803 Fix available 8.2 HighAugust 3, 2021
• rh-nodejs12-npm Red Hat Out-of-Bounds Read in Node.js CVE-2021-22918 Fix available EPSS 23.1% 5.3 MediumJuly 2, 2021
• rh-nodejs12-npm Red Hat Regular Expression Denial of Service (ReDoS) CVE-2020-28469 Fix available 5.3 MediumJune 3, 2021
• rh-nodejs12-npm Red Hat ReDoS in normalize-url CVE-2021-33502 Fix available 7.5 HighMay 24, 2021
• rh-nodejs12-npm Red Hat Regular Expression Denial of Service (ReDoS) CVE-2021-23343 Fix available 5.3 MediumMay 4, 2021
• rh-nodejs12-npm Red Hat Regular Expression Denial of Service (ReDoS) CVE-2021-23362 Fix available 5.3 MediumMarch 23, 2021
• rh-nodejs12-npm Red Hat Regular Expression Denial of Service (ReDoS) CVE-2021-27290 Fix available 7.5 HighMarch 12, 2021
• rh-nodejs12-npm Red Hat Node.js bad CVE-2021-22884 Fix available EPSS 36.8% 7.5 HighFebruary 24, 2021
• rh-nodejs12-npm Red Hat Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack... CVE-2021-22883 Fix available EPSS 77.4% 7.5 HighFebruary 24, 2021
• rh-nodejs12-npm Red Hat Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in... CVE-2020-8287 Public exploitFix available EPSS 16.3% 6.5 MediumJanuary 6, 2021
• rh-nodejs12-npm Red Hat Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug... CVE-2020-8265 Fix available 8.1 HighJanuary 6, 2021
• rh-nodejs12-npm Red Hat Prototype Pollution CVE-2020-7788 Fix available 7.3 HighDecember 10, 2020
• rh-nodejs12-npm Red Hat Uncontrolled Resource Consumption in node CVE-2020-8277 Public exploitFix available EPSS 54.2% 7.5 HighNovember 19, 2020
• rh-nodejs12-npm Red Hat Prototype Pollution CVE-2020-7774 Fix available EPSS 69.6% 7.3 HighNovember 17, 2020
• rh-nodejs12-npm Red Hat Regular Expression Denial of Service (ReDoS) CVE-2020-7754 Fix available 7.5 HighOctober 16, 2020
• rh-nodejs12-npm Red Hat Node.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver... CVE-2020-8201 Fix available 7.4 HighSeptember 18, 2020
• rh-nodejs12-npm Red Hat The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js... CVE-2020-8252 Fix available 7.8 HighSeptember 18, 2020
• rh-nodejs12-npm Red Hat Prototype Pollution in Ajv CVE-2020-15366 Fix available 5.6 MediumJuly 15, 2020
• rh-nodejs12-npm Red Hat Sensitive information exposure through logs in npm cli CVE-2020-15095 Fix available 4.4 MediumJuly 7, 2020
• rh-nodejs12-npm Red Hat TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and ... CVE-2020-8172 Fix available 7.4 HighJune 8, 2020
• rh-nodejs12-npm Red Hat napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,... CVE-2020-8174 Fix available 8.1 HighJune 6, 2020
• rh-nodejs12-npm Red Hat Denial of service in nghttp2 CVE-2020-11080 Fix available 3.7 LowJune 3, 2020
• rh-nodejs12-npm Red Hat yargs-parser Vulnerable to Prototype Pollution CVE-2020-7608 Fix available 5.3 MediumMarch 16, 2020
• rh-nodejs12-npm Red Hat An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An... CVE-2020-10531 Fix available 8.8 HighMarch 12, 2020
• rh-nodejs12-npm Red Hat Prototype Pollution in minimist CVE-2020-7598 Public exploitFix available 5.6 MediumMarch 11, 2020
• rh-nodejs12-npm Red Hat Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of... CVE-2019-15606 Fix available EPSS 20.0% 9.8 CriticalFebruary 7, 2020
• rh-nodejs12-npm Red Hat Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when... CVE-2019-15604 Fix available EPSS 20.0% 7.5 HighFebruary 7, 2020
• rh-nodejs12-npm Red Hat HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer... CVE-2019-15605 Public exploitFix available EPSS 57.1% 9.8 CriticalFebruary 7, 2020
• rh-nodejs12-npm Red Hat dot-prop Prototype Pollution vulnerability CVE-2020-8116 Fix available 7.3 HighFebruary 4, 2020
• rh-nodejs12-npm Red Hat Arbitrary File Overwrite in npm CLI CVE-2019-16777 Fix available 7.7 HighDecember 13, 2019
• rh-nodejs12-npm Red Hat Unauthorized File Access in npm CLI before before version 6.13.3 CVE-2019-16776 Fix available 7.7 HighDecember 13, 2019
• rh-nodejs12-npm Red Hat Unauthorized File Access in npm CLI before before version 6.13.3 CVE-2019-16775 Fix available 7.7 HighDecember 13, 2019
• rh-nodejs12-npm Red Hat Prototype Pollution in set-value CVE-2019-10747 Fix available 9.8 CriticalAugust 23, 2019
• rh-nodejs12-npm Red Hat Prototype Pollution in mixin-deep CVE-2019-10746 Fix available 9.8 CriticalAugust 23, 2019
• Show olderLoading…