The Node.js Project Node.js vulnerabilities

• node.js Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in... CVE-2018-12123 Fix available 4.3 MediumNovember 28, 2018
• node.js, suse enterprise storage, linux enterprise server +1 more +3 more Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial... CVE-2018-12122 Fix available EPSS 41.3% 7.5 HighNovember 28, 2018
• node.js, redhat enterprise linux, enterprise linux desktop +5 more +7 more Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with... CVE-2018-12121 Fix available EPSS 10.2% 7.5 HighNovember 28, 2018
• node.js Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by... CVE-2018-12120 Fix available 8.1 HighNovember 28, 2018
• node.js, suse enterprise storage, linux enterprise server +1 more +3 more Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can... CVE-2018-12116 Fix available 7.5 HighNovember 28, 2018
• node.js In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer... CVE-2018-7166 Fix available 7.5 HighAugust 21, 2018
• node.js, redhat openshift container platform +1 more In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ... CVE-2018-12115 Fix available 7.5 HighAugust 21, 2018
• node.js Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could... CVE-2018-7167 Fix available 7.5 HighJune 13, 2018
• node.js Node.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM. A bug... CVE-2018-7164 Fix available 7.5 HighJune 13, 2018
• node.js All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can... CVE-2018-7162 Fix available 7.5 HighJune 13, 2018
• node.js All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker... CVE-2018-7161 Fix available 7.5 HighJune 13, 2018
• node.js Withdrawn Advisory: Node.js Inspector RCE via DNS Rebinding CVE-2018-7160 Fix available 8.8 HighMay 9, 2018
• node.js The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header,... CVE-2018-7159 Fix available 5.3 MediumApril 16, 2018
• node.js The `'path'` module in the Node.js 4.x release line contains a potential regular expression... CVE-2018-7158 Fix available 7.5 HighApril 16, 2018
• node.js Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the... CVE-2017-15897 Fix available 3.1 LowDecember 11, 2017
• node.js Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read()... CVE-2017-15896 Fix available 9.1 CriticalDecember 11, 2017