nodejs20 vulnerabilities (SUSE)
73 vulnerabilities.
nodejs20SUSEWith the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker...7.7 Highnodejs20SUSEUndici Uses Insufficiently Random Values6.8 Mediumnodejs20SUSERegular Expression Denial of Service (ReDoS) in cross-spawn8.7 Highnodejs20SUSEThe Permission Model assumes that any path starting with two backslashes \ has a four-character...3.6 Lownodejs20SUSEBypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with...8.1 Highnodejs20SUSEA vulnerability has been identified in Node.js, affecting users of the experimental permission...3.3 Lownodejs20SUSEA vulnerability has been identified in Node.js, affecting users of the experimental permission...2.9 Lownodejs20SUSEA security flaw in Node.js allows a bypass of network import restrictions. By embedding non...6.5 Mediumnodejs20SUSEDue to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a...8.1 Highnodejs20SUSEThe team has identified a critical vulnerability in the http server of the most recent version of...6.5 Mediumnodejs20SUSEUndici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect2.6 Lownodejs20SUSEUndici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline3.9 Lownodejs20SUSEAn attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount...8.2 Highnodejs20SUSEProxy-Authorization header not cleared on cross-origin redirect in fetch in Undici3.9 Lownodejs20SUSEA vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack...6.5 Mediumnodejs20SUSEThe Node.js Permission Model does not clarify in the documentation that wildcards should be only...5.0 Mediumnodejs20SUSENode.js depends on multiple built-in utility functions to normalize paths provided to node:fs...7.9 Highnodejs20SUSENode.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked...7.4 Highnodejs20SUSEsetuid() does not affect libuv's internal io_uring operations if initialized before the call to...7.3 Highnodejs20SUSEThe permission model protects itself against path traversal attacks by calling path.resolve() on...7.9 Highnodejs20SUSEA vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP...7.5 Highnodejs20SUSEOn Linux, Node.js ignores certain environment variables if those may have been set by an...7.5 Highnodejs20SUSEImproper Domain Lookup that potentially leads to SSRF attacks in libuv7.3 High