nodejs vulnerabilities (Ubuntu)
205 vulnerabilities.
-
nodejsUbuntu A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not... 3.6 Low -
nodejsUbuntu A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the... 3.7 Low -
nodejsUbuntu A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to... 6.7 Medium -
nodejsUbuntu A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, ... 4.8 Medium -
nodejsUbuntu A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the... 3.3 Low -
nodejsUbuntu A flaw in Node.js TLS hostname verification can cause a server certificate to be validated... 7.4 High -
nodejsUbuntu A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address... 7.4 High -
nodejsUbuntu A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated... 7.4 High -
nodejsUbuntu A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response... 6.5 Medium -
nodejsUbuntu QUIC STREAM Fragment Metadata DoS 7.5 High -
nodejsUbuntu Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC 5.3 Medium -
nodejsUbuntu QUIC: Unbounded RETIRE_CONNECTION_ID Backlog 7.5 High -
nodejsUbuntu Timing Side-Channel in SM2 Signature Generation 3.7 Low -
nodejsUbuntu Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS 5.3 Medium -
nodejsUbuntu NULL Pointer Dereference in CMP Client Revocation Response Handling 5.3 Medium -
nodejsUbuntu QUIC Connection-Level Flow Control is Not Enforced for Streams 5.3 Medium -
nodejsUbuntu Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake 7.5 High -
nodejsUbuntu Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V 3.7 Low -
nodejsUbuntu Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves 3.7 Low -
nodejsUbuntu QUIC Unvalidated Amplification Credit may be Over Accounted 3.7 Low -
nodejsUbuntu Excessive Memory Allocation in Relative CRLDP Processing 5.3 Medium -
nodejsUbuntu DTLS Retransmits Handshake Messages From a Stale Buffer Offset 8.2 High -
nodejsUbuntu Use-After-Free in X.509 Extension Cache Under Concurrent Use 7.5 High -
nodejsUbuntu Invalid Pointer Dereference in CMP Server via Crafted protectionAlg 7.5 High -
nodejsUbuntu QUIC ACK-only Packet Retention Can Cause Memory Exhaustion 7.5 High -
nodejsUbuntu CMP Indefinite Cache Growth of ExtraCerts 5.9 Medium -
nodejsUbuntu Untrusted Sender DN Used as Format String in CMP Response Validation 9.8 Critical -
nodejsUbuntu Heap Buffer Overflow in CMS Key Unwrapping 7.5 High -
nodejsUbuntu Excessive Memory Use Buffering DTLS Records for a Future Epoch 7.5 High -
nodejsUbuntu QUIC Server May Trigger Double Free When Processing INITIAL Packet 7.5 High -
nodejsUbuntu RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate 7.5 High -
nodejsUbuntu AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher() 9.1 Critical -
nodejsUbuntu Unbounded Memory Growth in QUIC Server Incoming Channel Queue 7.5 High -
nodejsUbuntu A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding... 3.7 Low -
nodejsUbuntu Client-Side Memory Leak in OCSP Response Checking 7.5 High -
nodejsUbuntu A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly... 7.5 High -
nodejsUbuntu A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in... 6.2 Medium -
nodejsUbuntu A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding... 3.7 Low -
nodejsUbuntu A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response... 5.9 Medium -
nodejsUbuntu A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync... 5.3 Medium -
nodejsUbuntu A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory... 7.5 High -
nodejsUbuntu A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites)... 3.3 Low -
nodejsUbuntu A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree... 7.5 High -
nodejsUbuntu A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions,... 4.1 Medium -
nodejsUbuntu A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()`... 3.3 Low -
nodejsUbuntu An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname... 6.3 Medium -
nodejsUbuntu A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before... 3.7 Low -
nodejsUbuntu A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a... 5.3 Medium -
nodejsUbuntu A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()`... 1.8 Low -
nodejsUbuntu Out-of-Bounds Read in CMS Password-Based Decryption 7.5 High - Show olderLoading…