Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Enterprise Linux 8/nodejs
Red Hat
· Package
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
node-tar: Process crash via PAX numeric path type confusion
CVE-2026-59871 · GHSA-W8WR-V893-VJVP
tar
Confidential Compute Attestation/openshift-sandboxed-containers/osc-pccs
npm
Red Hat
Medium
Fix reported
2026-09-10
undici vulnerable to cross-user information disclosure via shared cache whitespace bypass
CVE-2026-9678 · GHSA-PR7R-676H-XCF6
undici
Cryostat 4/cryostat-openshift-console-plugin-npm
npm
Red Hat
Medium
Fix reported
2026-09-10
undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
CVE-2026-9679 · GHSA-P88M-4JFJ-68FV
undici
Cryostat 4/cryostat-openshift-console-plugin-npm
npm
Red Hat
Medium
Fix reported
2026-09-10
undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching
CVE-2026-11525 · GHSA-G8M3-5G58-FQ7M
undici
Cryostat 4/cryostat-openshift-console-plugin-npm
npm
Red Hat
Low
Fix reported
2026-09-10
undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse
CVE-2026-6733 · GHSA-35P6-XMWP-9G52
undici
Cryostat 4/cryostat-openshift-console-plugin-npm
npm
Red Hat
Low
Fix reported
2026-09-10
node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records
CVE-2026-59875 · GHSA-GVWX-54WH-QM9J
tar
Confidential Compute Attestation/openshift-sandboxed-containers/osc-pccs
npm
Red Hat
Medium
Fix reported
2026-09-10
nodejs: Unitialized buffer due to incorrect encoding
CVE-2017-15897
Red Hat Enterprise Linux 8/nodejs
Red Hat Software Collections/rh-nodejs8-nodejs
Red Hat
Low
No fix reported
Not recorded
