rh-nodejs14-nodejs vulnerabilities (Red Hat)

56 vulnerabilities.

• rh-nodejs14-nodejs Red Hat An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount... CVE-2024-27983 Public exploitFix available EPSS 87.2% 8.2 HighApril 4, 2024
• rh-nodejs14-nodejs Red Hat A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP... CVE-2024-22019 Fix available 7.5 HighFebruary 16, 2024
• rh-nodejs14-nodejs Red Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• rh-nodejs14-nodejs Red Hat 0-byte UDP payload DoS in c-ares CVE-2023-32067 Fix available 7.5 HighMay 25, 2023
• rh-nodejs14-nodejs Red Hat Insufficient randomness in generation of DNS query IDs in c-ares CVE-2023-31147 Fix available 5.9 MediumMay 25, 2023
• rh-nodejs14-nodejs Red Hat Buffer Underwrite in ares_inet_net_pton() CVE-2023-31130 Fix available 4.1 MediumMay 25, 2023
• rh-nodejs14-nodejs Red Hat AutoTools does not set CARES_RANDOM_FILE during cross compilation CVE-2023-31124 Fix available 3.7 LowMay 25, 2023
• rh-nodejs14-nodejs Red Hat An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21... CVE-2023-23920 Fix available 4.2 MediumFebruary 23, 2023
• rh-nodejs14-nodejs Red Hat A privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3... CVE-2023-23918 Fix available 7.5 HighFebruary 23, 2023
• rh-nodejs14-nodejs Red Hat A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the... CVE-2022-4904 Fix available 8.6 HighFebruary 15, 2023
• rh-nodejs14-nodejs Red Hat http-cache-semantics vulnerable to Regular Expression Denial of Service CVE-2022-25881 Fix available 5.3 MediumJanuary 31, 2023
• rh-nodejs14-nodejs Red Hat decode-uri-component vulnerable to Denial of Service (DoS) CVE-2022-38900 Fix available EPSS 23.6% 7.5 HighNovember 28, 2022
• rh-nodejs14-nodejs Red Hat qs vulnerable to Prototype Pollution CVE-2022-24999 Public exploitFix available EPSS 15.7% 7.5 HighNovember 26, 2022
• rh-nodejs14-nodejs Red Hat A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19... CVE-2022-43548 Fix available EPSS 14.8% 8.1 HighNovember 13, 2022
• rh-nodejs14-nodejs Red Hat minimatch ReDoS vulnerability CVE-2022-3517 Fix available 7.5 HighOctober 17, 2022
• rh-nodejs14-nodejs Red Hat The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that... CVE-2022-35256 Fix available 6.5 MediumOctober 1, 2022
• rh-nodejs14-nodejs Red Hat glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service CVE-2021-35065 Fix available 7.5 HighJuly 18, 2022
• rh-nodejs14-nodejs Red Hat The llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line... CVE-2022-32215 Fix available EPSS 70.2% 6.5 MediumJuly 14, 2022
• rh-nodejs14-nodejs Red Hat llhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields CVE-2022-32214 Fix available EPSS 81.8% 6.5 MediumJuly 14, 2022
• rh-nodejs14-nodejs Red Hat llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding CVE-2022-32213 Fix available EPSS 44.8% 6.5 MediumJuly 14, 2022
• rh-nodejs14-nodejs Red Hat A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due... CVE-2022-32212 Fix available 8.1 HighJuly 14, 2022
• rh-nodejs14-nodejs Red Hat Got allows a redirect to a UNIX socket CVE-2022-33987 Fix available 5.3 MediumJune 18, 2022
• rh-nodejs14-nodejs Red Hat Prototype Pollution in minimist CVE-2021-44906 Public exploitFix available 9.8 CriticalMarch 17, 2022
• rh-nodejs14-nodejs Red Hat Due to the formatting logic of the "console.table()" function it was not safe to allow user... CVE-2022-21824 Fix available EPSS 21.5% 8.2 HighJanuary 18, 2022
• rh-nodejs14-nodejs Red Hat Moderate: nodejs:14 security update CVE-2021-44533 Fix available 5.3 MediumJanuary 18, 2022
• rh-nodejs14-nodejs Red Hat Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names)... CVE-2021-44532 Fix available EPSS 10.4% 5.3 MediumJanuary 18, 2022
• rh-nodejs14-nodejs Red Hat Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to... CVE-2021-44531 Fix available 7.4 HighJanuary 18, 2022
• rh-nodejs14-nodejs Red Hat Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch CVE-2022-0235 Fix available 8.8 HighJanuary 16, 2022
• rh-nodejs14-nodejs Red Hat The parser in accepts requests with a space (SP) right after the header name before the colon.... CVE-2021-22959 Fix available 6.5 MediumNovember 15, 2021
• rh-nodejs14-nodejs Red Hat Prototype Pollution in kriszyp/json-schema CVE-2021-3918 Fix available 9.8 CriticalNovember 13, 2021
• rh-nodejs14-nodejs Red Hat The parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body... CVE-2021-22960 Fix available 6.5 MediumNovember 3, 2021
• rh-nodejs14-nodejs Red Hat Inefficient Regular Expression Complexity in chalk/ansi-regex CVE-2021-3807 Fix available 7.5 HighSeptember 17, 2021
• rh-nodejs14-nodejs Red Hat Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links CVE-2021-37712 Fix available 8.2 HighAugust 31, 2021
• rh-nodejs14-nodejs Red Hat Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links CVE-2021-37701 Fix available 8.2 HighAugust 31, 2021
• rh-nodejs14-nodejs Red Hat Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an... CVE-2021-22940 Fix available EPSS 13.9% 7.5 HighAugust 16, 2021
• rh-nodejs14-nodejs Red Hat If the Node.js https API was used incorrectly and "undefined" was in passed for the ... CVE-2021-22939 Fix available EPSS 14.7% 5.3 MediumAugust 16, 2021
• rh-nodejs14-nodejs Red Hat Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS,... CVE-2021-22931 Fix available EPSS 22.0% 9.8 CriticalAugust 16, 2021
• rh-nodejs14-nodejs Red Hat A flaw was found in c-ares library, where a missing input validation check of host names returned... CVE-2021-3672 Fix available 5.6 MediumAugust 10, 2021
• rh-nodejs14-nodejs Red Hat Use After Free in node.js CVE-2021-22930 Fix available EPSS 36.5% 9.8 CriticalAugust 6, 2021
• rh-nodejs14-nodejs Red Hat Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization CVE-2021-32804 Public exploitFix available EPSS 15.1% 8.2 HighAugust 3, 2021
• rh-nodejs14-nodejs Red Hat Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning CVE-2021-32803 Fix available 8.2 HighAugust 3, 2021
• rh-nodejs14-nodejs Red Hat Out-of-Bounds Read in Node.js CVE-2021-22918 Fix available EPSS 23.1% 5.3 MediumJuly 2, 2021
• rh-nodejs14-nodejs Red Hat Regular Expression Denial of Service (ReDoS) CVE-2020-28469 Fix available 5.3 MediumJune 3, 2021
• rh-nodejs14-nodejs Red Hat ReDoS in normalize-url CVE-2021-33502 Fix available 7.5 HighMay 24, 2021
• rh-nodejs14-nodejs Red Hat Regular Expression Denial of Service (ReDoS) CVE-2021-23343 Fix available 5.3 MediumMay 4, 2021
• rh-nodejs14-nodejs Red Hat Regular Expression Denial of Service (ReDoS) CVE-2021-23362 Fix available 5.3 MediumMarch 23, 2021
• rh-nodejs14-nodejs Red Hat Regular Expression Denial of Service (ReDoS) CVE-2021-27290 Fix available 7.5 HighMarch 12, 2021
• rh-nodejs14-nodejs Red Hat Node.js bad CVE-2021-22884 Fix available EPSS 36.8% 7.5 HighFebruary 24, 2021
• rh-nodejs14-nodejs Red Hat Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack... CVE-2021-22883 Fix available EPSS 77.4% 7.5 HighFebruary 24, 2021
• rh-nodejs14-nodejs Red Hat Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in... CVE-2020-8287 Public exploitFix available EPSS 16.3% 6.5 MediumJanuary 6, 2021
• Show olderLoading…