rh-nodejs14-nodejs-nodemon vulnerabilities (Red Hat)
31 vulnerabilities.
-
rh-nodejs14-nodejs-nodemonRed Hat qs vulnerable to Prototype Pollution 7.5 High -
rh-nodejs14-nodejs-nodemonRed Hat A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19... 8.1 High -
rh-nodejs14-nodejs-nodemonRed Hat minimatch ReDoS vulnerability 7.5 High -
rh-nodejs14-nodejs-nodemonRed Hat glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service 7.5 High -
rh-nodejs14-nodejs-nodemonRed Hat The llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line... 6.5 Medium -
rh-nodejs14-nodejs-nodemonRed Hat llhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields 6.5 Medium -
rh-nodejs14-nodejs-nodemonRed Hat llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding 6.5 Medium -
rh-nodejs14-nodejs-nodemonRed Hat A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due... 8.1 High -
rh-nodejs14-nodejs-nodemonRed Hat Got allows a redirect to a UNIX socket 5.3 Medium -
rh-nodejs14-nodejs-nodemonRed Hat Prototype Pollution in minimist 9.8 Critical -
rh-nodejs14-nodejs-nodemonRed Hat Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch 8.8 High -
rh-nodejs14-nodejs-nodemonRed Hat The parser in accepts requests with a space (SP) right after the header name before the colon.... 6.5 Medium -
rh-nodejs14-nodejs-nodemonRed Hat Prototype Pollution in kriszyp/json-schema 9.8 Critical -
rh-nodejs14-nodejs-nodemonRed Hat The parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body... 6.5 Medium -
rh-nodejs14-nodejs-nodemonRed Hat Inefficient Regular Expression Complexity in chalk/ansi-regex 7.5 High -
rh-nodejs14-nodejs-nodemonRed Hat Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links 8.2 High -
rh-nodejs14-nodejs-nodemonRed Hat Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links 8.2 High -
rh-nodejs14-nodejs-nodemonRed Hat Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an... 7.5 High -
rh-nodejs14-nodejs-nodemonRed Hat If the Node.js https API was used incorrectly and "undefined" was in passed for the ... 5.3 Medium -
rh-nodejs14-nodejs-nodemonRed Hat Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS,... 9.8 Critical -
rh-nodejs14-nodejs-nodemonRed Hat A flaw was found in c-ares library, where a missing input validation check of host names returned... 5.6 Medium -
rh-nodejs14-nodejs-nodemonRed Hat Use After Free in node.js 9.8 Critical -
rh-nodejs14-nodejs-nodemonRed Hat Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization 8.2 High -
rh-nodejs14-nodejs-nodemonRed Hat Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning 8.2 High -
rh-nodejs14-nodejs-nodemonRed Hat Out-of-Bounds Read in Node.js 5.3 Medium -
rh-nodejs14-nodejs-nodemonRed Hat Regular Expression Denial of Service (ReDoS) 5.3 Medium -
rh-nodejs14-nodejs-nodemonRed Hat ReDoS in normalize-url 7.5 High -
rh-nodejs14-nodejs-nodemonRed Hat Regular Expression Denial of Service (ReDoS) 5.3 Medium -
rh-nodejs14-nodejs-nodemonRed Hat Regular Expression Denial of Service (ReDoS) 5.3 Medium -
rh-nodejs14-nodejs-nodemonRed Hat Regular Expression Denial of Service (ReDoS) 7.5 High -
rh-nodejs14-nodejs-nodemonRed Hat Prototype Pollution 7.3 High