nodejs8 vulnerabilities (SUSE)
40 vulnerabilities.
-
nodejs8SUSE Prototype Pollution in kriszyp/json-schema 9.8 Critical -
nodejs8SUSE Inefficient Regular Expression Complexity in chalk/ansi-regex 7.5 High -
nodejs8SUSE Use After Free in node.js 9.8 Critical -
nodejs8SUSE Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization 8.2 High -
nodejs8SUSE Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning 8.2 High -
nodejs8SUSE Regular Expression Denial of Service (ReDoS) 5.3 Medium -
nodejs8SUSE Regular Expression Denial of Service (ReDoS) 5.3 Medium -
nodejs8SUSE Regular Expression Denial of Service (ReDoS) 7.5 High -
nodejs8SUSE Node.js bad 7.5 High -
nodejs8SUSE Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in... 6.5 Medium -
nodejs8SUSE Prototype Pollution 7.3 High -
nodejs8SUSE Sensitive information exposure through logs in npm cli 4.4 Medium -
nodejs8SUSE napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,... 8.1 High -
nodejs8SUSE Denial of service in nghttp2 3.7 Low -
nodejs8SUSE Prototype Pollution in minimist 5.6 Medium -
nodejs8SUSE Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of... 9.8 Critical -
nodejs8SUSE Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when... 7.5 High -
nodejs8SUSE HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer... 9.8 Critical -
nodejs8SUSE Arbitrary File Overwrite in npm CLI 7.7 High -
nodejs8SUSE Unauthorized File Access in npm CLI before before version 6.13.3 7.7 High -
nodejs8SUSE Unauthorized File Access in npm CLI before before version 6.13.3 7.7 High -
nodejs8SUSE Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service 7.5 High -
nodejs8SUSE Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service 7.5 High -
nodejs8SUSE Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service 7.5 High -
nodejs8SUSE Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service 7.5 High -
nodejs8SUSE Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service 7.5 High -
nodejs8SUSE Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service 7.5 High -
nodejs8SUSE Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service 7.5 High -
nodejs8SUSE Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service 7.5 High -
nodejs8SUSE Arbitrary File Overwrite in fstream 7.5 High -
nodejs8SUSE In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before... 7.5 High -
nodejs8SUSE Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in... 4.3 Medium -
nodejs8SUSE Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial... 7.5 High -
nodejs8SUSE Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with... 7.5 High -
nodejs8SUSE Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can... 7.5 High -
nodejs8SUSE In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ... 7.5 High -
nodejs8SUSE Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could... 7.5 High -
nodejs8SUSE All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker... 7.5 High -
nodejs8SUSE Client DoS due to large DH parameter 7.5 High -
nodejs8SUSE nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20... 7.5 High