nodejs vulnerabilities (Rocky Linux)
133 vulnerabilities.
nodejsRocky LinuxThe C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user...7.5 HighnodejsRocky LinuxIn Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in ...3.7 LownodejsRocky LinuxAn integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated...6.9 MediumnodejsRocky Linuxc-ares has a use-after-free in read_answers()8.3 HighnodejsRocky LinuxA memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY...5.3 MediumnodejsRocky LinuxWith the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker...7.7 HighnodejsRocky LinuxUndici Uses Insufficiently Random Values6.8 MediumnodejsRocky LinuxA vulnerability has been identified in Node.js, affecting users of the experimental permission...3.3 LownodejsRocky LinuxA vulnerability has been identified in Node.js, affecting users of the experimental permission...2.9 LownodejsRocky LinuxA security flaw in Node.js allows a bypass of network import restrictions. By embedding non...6.5 MediumnodejsRocky LinuxThe team has identified a critical vulnerability in the http server of the most recent version of...6.5 MediumnodejsRocky LinuxReading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage5.3 MediumnodejsRocky LinuxAn attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount...8.2 HighnodejsRocky Linuxnode-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation6.5 MediumnodejsRocky Linuxc-ares out of bounds read in ares__read_line()4.4 MediumnodejsRocky LinuxA vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack...6.5 MediumnodejsRocky LinuxThe Node.js Permission Model does not clarify in the documentation that wildcards should be only...5.0 MediumnodejsRocky LinuxNode.js depends on multiple built-in utility functions to normalize paths provided to node:fs...7.9 HighnodejsRocky LinuxNode.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked...7.4 HighnodejsRocky Linuxsetuid() does not affect libuv's internal io_uring operations if initialized before the call to...7.3 HighnodejsRocky LinuxThe permission model protects itself against path traversal attacks by calling path.resolve() on...7.9 HighnodejsRocky LinuxA vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP...7.5 HighnodejsRocky LinuxOn Linux, Node.js ignores certain environment variables if those may have been set by an...7.5 HighnodejsRocky LinuxA privilege escalation vulnerability exists in the experimental policy mechanism in all active...7.5 HighnodejsRocky LinuxThe use of `module.constructor.createRequire()` can bypass the policy mechanism and require...8.8 HighnodejsRocky LinuxThe use of `Module._load()` can bypass the policy mechanism and require modules outside of the...9.8 CriticalnodejsRocky LinuxEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighnodejsRocky LinuxThe generateKeys() API function returned from crypto.createDiffieHellman() only generates missing...7.5 HighnodejsRocky Linuxllhttp vulnerable to HTTP request smuggling7.5 HighnodejsRocky LinuxWhen an invalid public key is used to create an x509 certificate using the crypto.X509Certificate...5.3 MediumnodejsRocky LinuxThe use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism...7.5 HighnodejsRocky Linux0-byte UDP payload DoS in c-ares7.5 HighnodejsRocky LinuxInsufficient randomness in generation of DNS query IDs in c-ares5.9 MediumnodejsRocky LinuxBuffer Underwrite in ares_inet_net_pton()4.1 MediumnodejsRocky LinuxAutoTools does not set CARES_RANDOM_FILE during cross compilation3.7 LownodejsRocky LinuxAn untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21...4.2 MediumnodejsRocky LinuxA cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in...7.5 HighnodejsRocky LinuxA privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3...7.5 HighnodejsRocky LinuxCRLF Injection in Nodejs ‘undici’ via host6.5 MediumnodejsRocky LinuxUndici vulnerable to Regular Expression Denial of Service in Headers7.5 HighnodejsRocky LinuxA flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the...8.6 HighnodejsRocky Linuxhttp-cache-semantics vulnerable to Regular Expression Denial of Service5.3 MediumnodejsRocky Linuxdecode-uri-component vulnerable to Denial of Service (DoS)7.5 HighnodejsRocky Linuxqs vulnerable to Prototype Pollution7.5 HighnodejsRocky LinuxA OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19...8.1 HighnodejsRocky Linuxminimatch ReDoS vulnerability7.5 HighnodejsRocky LinuxA weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with...9.1 CriticalnodejsRocky LinuxThe llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that...6.5 MediumnodejsRocky Linuxglob-parent 6.0.0 vulnerable to Regular Expression Denial of Service7.5 HighnodejsRocky LinuxThe llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line...6.5 Medium- Show moreLoading…