nodejs18 vulnerabilities (SUSE)
83 vulnerabilities.
nodejs18SUSENode.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked...7.4 Highnodejs18SUSEA vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP...7.5 Highnodejs18SUSEOn Linux, Node.js ignores certain environment variables if those may have been set by an...7.5 Highnodejs18SUSEImproper Domain Lookup that potentially leads to SSRF attacks in libuv7.3 Highnodejs18SUSEMaliciously crafted export names in an imported WebAssembly module can inject JavaScript code....5.3 Mediumnodejs18SUSEWhen the Node.js policy feature checks the integrity of a resource against a trusted manifest,...7.5 Highnodejs18SUSEUndici's cookie header not cleared on cross-origin redirect in fetch3.9 Lownodejs18SUSEA privilege escalation vulnerability exists in the experimental policy mechanism in all active...7.5 Highnodejs18SUSEThe use of `module.constructor.createRequire()` can bypass the policy mechanism and require...8.8 Highnodejs18SUSEThe use of `Module._load()` can bypass the policy mechanism and require modules outside of the...9.8 Criticalnodejs18SUSEEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highnodejs18SUSEThe generateKeys() API function returned from crypto.createDiffieHellman() only generates missing...7.5 Highnodejs18SUSEllhttp vulnerable to HTTP request smuggling7.5 Highnodejs18SUSEWhen an invalid public key is used to create an x509 certificate using the crypto.X509Certificate...5.3 Mediumnodejs18SUSEA vulnerability has been identified in the Node.js (.msi version) installation process,...7.5 Highnodejs18SUSEThe use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism...7.5 Highnodejs18SUSE0-byte UDP payload DoS in c-ares7.5 Highnodejs18SUSEInsufficient randomness in generation of DNS query IDs in c-ares5.9 Mediumnodejs18SUSEBuffer Underwrite in ares_inet_net_pton()4.1 Mediumnodejs18SUSEAutoTools does not set CARES_RANDOM_FILE during cross compilation3.7 Lownodejs18SUSEAn untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21...4.2 Mediumnodejs18SUSEA cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in...7.5 Highnodejs18SUSEA privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3...7.5 Highnodejs18SUSECRLF Injection in Nodejs ‘undici’ via host6.5 Mediumnodejs18SUSEUndici vulnerable to Regular Expression Denial of Service in Headers7.5 Highnodejs18SUSEhttp-cache-semantics vulnerable to Regular Expression Denial of Service5.3 Mediumnodejs18SUSEA OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19...8.1 Highnodejs18SUSEA weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with...9.1 Criticalnodejs18SUSEThe llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that...6.5 Mediumnodejs18SUSEThe llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line...6.5 Mediumnodejs18SUSEllhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields6.5 Mediumnodejs18SUSEllhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding6.5 Mediumnodejs18SUSEA OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due...8.1 High