nodejs24 vulnerabilities (openSUSE)
67 vulnerabilities.
nodejs24openSUSEA flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are...7.1 Highnodejs24openSUSEA flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow...7.1 Highnodejs24openSUSEUndici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion5.9 Mediumnodejs24openSUSEThe C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user...7.5 Highnodejs24openSUSEIn Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in ...3.7 Lownodejs24openSUSEA memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY...5.3 Mediumnodejs24openSUSEWith the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker...7.7 Highnodejs24openSUSEUndici Uses Insufficiently Random Values6.8 Mediumnodejs24openSUSERegular Expression Denial of Service (ReDoS) in cross-spawn8.7 Highnodejs24openSUSEThe Permission Model assumes that any path starting with two backslashes \ has a four-character...3.6 Lownodejs24openSUSEBypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with...8.1 Highnodejs24openSUSEA vulnerability has been identified in Node.js, affecting users of the experimental permission...3.3 Lownodejs24openSUSEA vulnerability has been identified in Node.js, affecting users of the experimental permission...2.9 Lownodejs24openSUSEA security flaw in Node.js allows a bypass of network import restrictions. By embedding non...6.5 Mediumnodejs24openSUSEA flaw in Node.js URL processing causes an assertion failure in native code when `url.format()`...5.7 Mediumnodejs24openSUSEA memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields...6.5 Medium