nodejs20 vulnerabilities (openSUSE)
57 vulnerabilities.
-
nodejs20openSUSE A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a... 5.9 Medium -
nodejs20openSUSE We have identified a bug in Node.js error handling where "Maximum call stack size exceeded"... 5.9 Medium -
nodejs20openSUSE A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to... 7.5 High -
nodejs20openSUSE A flaw in Node.js's permission model allows a file's access and modification timestamps to be... 2.8 Low -
nodejs20openSUSE A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are... 7.1 High -
nodejs20openSUSE A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow... 7.1 High -
nodejs20openSUSE Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion 5.9 Medium -
nodejs20openSUSE A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX`... 6.5 Medium -
nodejs20openSUSE The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user... 7.5 High -
nodejs20openSUSE In Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in ... 3.7 Low -
nodejs20openSUSE A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY... 5.3 Medium -
nodejs20openSUSE With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker... 7.7 High -
nodejs20openSUSE Undici Uses Insufficiently Random Values 6.8 Medium -
nodejs20openSUSE Regular Expression Denial of Service (ReDoS) in cross-spawn 8.7 High -
nodejs20openSUSE The Permission Model assumes that any path starting with two backslashes \ has a four-character... 3.6 Low -
nodejs20openSUSE Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with... 8.1 High -
nodejs20openSUSE A vulnerability has been identified in Node.js, affecting users of the experimental permission... 3.3 Low -
nodejs20openSUSE A vulnerability has been identified in Node.js, affecting users of the experimental permission... 2.9 Low -
nodejs20openSUSE A security flaw in Node.js allows a bypass of network import restrictions. By embedding non... 6.5 Medium -
nodejs20openSUSE Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a... 8.1 High -
nodejs20openSUSE The team has identified a critical vulnerability in the http server of the most recent version of... 6.5 Medium -
nodejs20openSUSE Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect 2.6 Low -
nodejs20openSUSE Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline 3.9 Low -
nodejs20openSUSE An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount... 8.2 High -
nodejs20openSUSE Proxy-Authorization header not cleared on cross-origin redirect in fetch in Undici 3.9 Low -
nodejs20openSUSE A vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack... 6.5 Medium -
nodejs20openSUSE The Node.js Permission Model does not clarify in the documentation that wildcards should be only... 5.0 Medium -
nodejs20openSUSE Node.js depends on multiple built-in utility functions to normalize paths provided to node:fs... 7.9 High -
nodejs20openSUSE Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked... 7.4 High -
nodejs20openSUSE setuid() does not affect libuv's internal io_uring operations if initialized before the call to... 7.3 High -
nodejs20openSUSE The permission model protects itself against path traversal attacks by calling path.resolve() on... 7.9 High -
nodejs20openSUSE A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP... 7.5 High -
nodejs20openSUSE On Linux, Node.js ignores certain environment variables if those may have been set by an... 7.5 High -
nodejs20openSUSE Improper Domain Lookup that potentially leads to SSRF attacks in libuv 7.3 High -
nodejs20openSUSE Various `node:fs` functions allow specifying paths as either strings or `Uint8Array` objects. In... 9.8 Critical -
nodejs20openSUSE A previously disclosed vulnerability (CVE-2023-30584) was patched insufficiently in commit... 7.7 High -
nodejs20openSUSE Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code.... 5.3 Medium -
nodejs20openSUSE When the Node.js policy feature checks the integrity of a resource against a trusted manifest,... 7.5 High -
nodejs20openSUSE Undici's cookie header not cleared on cross-origin redirect in fetch 3.9 Low -
nodejs20openSUSE The use of the deprecated API `process.binding()` can bypass the permission model through path... 7.5 High -
nodejs20openSUSE A vulnerability has been identified in Node.js version 20, affecting users of the experimental... 5.3 Medium -
nodejs20openSUSE `fs.mkdtemp()` and `fs.mkdtempSync()` can be used to bypass the permission model check using a... 5.3 Medium -
nodejs20openSUSE A vulnerability has been discovered in Node.js version 20, specifically within the experimental... 8.8 High -
nodejs20openSUSE A privilege escalation vulnerability exists in the experimental policy mechanism in all active... 7.5 High -
nodejs20openSUSE The use of `module.constructor.createRequire()` can bypass the policy mechanism and require... 8.8 High -
nodejs20openSUSE The use of `Module._load()` can bypass the policy mechanism and require modules outside of the... 9.8 Critical -
nodejs20openSUSE Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
nodejs20openSUSE A vulnerability in Node.js version 20 allows for bypassing restrictions set by the --experimental... 7.5 High -
nodejs20openSUSE A vulnerability has been discovered in Node.js version 20, specifically within the experimental... 7.7 High -
nodejs20openSUSE fs.openAsBlob() can bypass the experimental permission model when using the file system read... 7.5 High - Show olderLoading…