nodejs vulnerabilities (openEuler)
72 vulnerabilities.
nodejsopenEulerModerate: nodejs:14 security update5.3 MediumnodejsopenEulerNode.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names)...5.3 MediumnodejsopenEulerAccepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to...7.4 HighnodejsopenEulerThe parser in accepts requests with a space (SP) right after the header name before the colon....6.5 MediumnodejsopenEulerPrototype Pollution in kriszyp/json-schema9.8 CriticalnodejsopenEulerThe parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body...6.5 MediumnodejsopenEulerUNIX Symbolic Link (Symlink) Following in @npmcli/arborist8.2 HighnodejsopenEulerUNIX Symbolic Link (Symlink) Following in @npmcli/arborist8.2 HighnodejsopenEulerUse After Free in node.js9.8 CriticalnodejsopenEulerIncorrect Permission Assignment for Critical Resource in Node7.8 HighnodejsopenEulerOut-of-Bounds Read in Node.js5.3 MediumnodejsopenEulerCA certificate check bypass with X509_V_FLAG_X509_STRICT7.4 HighnodejsopenEulerRegular Expression Denial of Service (ReDoS)7.5 HighnodejsopenEulerNode.js bad7.5 HighnodejsopenEulerNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack...7.5 HighnodejsopenEulerNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in...6.5 MediumnodejsopenEulerNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug...8.1 HighnodejsopenEulerPrototype Pollution7.3 HighnodejsopenEulerPrototype Pollution7.3 HighnodejsopenEulerRegular Expression Denial of Service (ReDoS)7.5 HighnodejsopenEulerPrototype Pollution in Ajv5.6 MediumnodejsopenEulerSensitive information exposure through logs in npm cli4.4 Medium