nodejs16 vulnerabilities (SUSE)
73 vulnerabilities.
nodejs16SUSEA vulnerability has been identified in the Node.js (.msi version) installation process,...7.5 Highnodejs16SUSEThe use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism...7.5 Highnodejs16SUSE0-byte UDP payload DoS in c-ares7.5 Highnodejs16SUSEInsufficient randomness in generation of DNS query IDs in c-ares5.9 Mediumnodejs16SUSEBuffer Underwrite in ares_inet_net_pton()4.1 Mediumnodejs16SUSEAutoTools does not set CARES_RANDOM_FILE during cross compilation3.7 Lownodejs16SUSEAn untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21...4.2 Mediumnodejs16SUSEA cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in...7.5 Highnodejs16SUSEA privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3...7.5 Highnodejs16SUSECRLF Injection in Nodejs ‘undici’ via host6.5 Mediumnodejs16SUSEUndici vulnerable to Regular Expression Denial of Service in Headers7.5 Highnodejs16SUSEhttp-cache-semantics vulnerable to Regular Expression Denial of Service5.3 Mediumnodejs16SUSEA OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19...8.1 Highnodejs16SUSEA weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with...9.1 Criticalnodejs16SUSEThe llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that...6.5 Mediumnodejs16SUSECRLF Injection in Nodejs ‘undici’ via Content-Type5.3 Mediumnodejs16SUSE`undici.request` vulnerable to SSRF using absolute URL on `pathname`5.3 Mediumnodejs16SUSECRLF injection in request headers5.3 Mediumnodejs16SUSEThe llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line...6.5 Mediumnodejs16SUSEllhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields6.5 Mediumnodejs16SUSEllhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding6.5 Mediumnodejs16SUSEA OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due...8.1 Highnodejs16SUSEnpm packing does not respect root-level ignore files in workspaces7.5 High