nodejs vulnerabilities (Rocky Linux)
133 vulnerabilities.
nodejsRocky Linuxllhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields6.5 MediumnodejsRocky Linuxllhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding6.5 MediumnodejsRocky LinuxA OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due...8.1 HighnodejsRocky LinuxGot allows a redirect to a UNIX socket5.3 MediumnodejsRocky LinuxPrototype Pollution in minimist9.8 CriticalnodejsRocky LinuxDue to the formatting logic of the "console.table()" function it was not safe to allow user...8.2 HighnodejsRocky LinuxModerate: nodejs:14 security update5.3 MediumnodejsRocky LinuxNode.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names)...5.3 MediumnodejsRocky LinuxAccepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to...7.4 HighnodejsRocky LinuxExposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch8.8 HighnodejsRocky LinuxThe parser in accepts requests with a space (SP) right after the header name before the colon....6.5 MediumnodejsRocky LinuxThe npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if...9.0 CriticalnodejsRocky LinuxPrototype Pollution in kriszyp/json-schema9.8 CriticalnodejsRocky LinuxThe parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body...6.5 MediumnodejsRocky LinuxInefficient Regular Expression Complexity in chalk/ansi-regex7.5 HighnodejsRocky LinuxArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links8.2 HighnodejsRocky LinuxArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links8.2 HighnodejsRocky LinuxNode.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an...7.5 HighnodejsRocky LinuxIf the Node.js https API was used incorrectly and "undefined" was in passed for the ...5.3 MediumnodejsRocky LinuxNode.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS,...9.8 CriticalnodejsRocky LinuxA flaw was found in c-ares library, where a missing input validation check of host names returned...5.6 MediumnodejsRocky LinuxUse After Free in node.js9.8 CriticalnodejsRocky LinuxArbitrary File Creation/Overwrite due to insufficient absolute path sanitization8.2 HighnodejsRocky LinuxArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning8.2 HighnodejsRocky LinuxOut-of-Bounds Read in Node.js5.3 MediumnodejsRocky LinuxRegular Expression Denial of Service (ReDoS)5.3 MediumnodejsRocky LinuxReDoS in normalize-url7.5 HighnodejsRocky LinuxRegular Expression Denial of Service (ReDoS)5.3 MediumnodejsRocky LinuxRegular Expression Denial of Service (ReDoS)5.3 MediumnodejsRocky LinuxRegular Expression Denial of Service (ReDoS)7.5 HighnodejsRocky LinuxNode.js bad7.5 HighnodejsRocky LinuxNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack...7.5 HighnodejsRocky LinuxPrototype Pollution7.3 High