Security
فارسی
All products

Red Hat Enterprise Linux 8/nodejs:20/nodejs

Red Hat · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
brace-expansion: Zero-step sequence causes process hang and memory exhaustionCVE-2026-33750 · GHSA-F886-M6HF-6M8V brace-expansionCryostat 4/brace-expansion npmRed Hat Medium Fix reported
minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segmentsCVE-2026-27903 · GHSA-7R86-CG39-JMMJ minimatchCryostat 4/io.cryostat-cryostat npmRed Hat High Fix reported
@isaacs/brace-expansion has Uncontrolled Resource ConsumptionCVE-2026-25547 · GHSA-7H2J-956F-4VF2 @isaacs/brace-expansionCryostat 4/io.cryostat-cryostat npmRed Hat High Fix reported
glob CLI: Command injection via -c/--cmd executes matches with shell:trueCVE-2025-64756 · GHSA-5J98-MCP5-4VW2 globLogging Subsystem for Red Hat OpenShift/openshift-logging/logging-curator5-rhel9 npmRed Hat High Fix reported
node-tar has a race condition leading to uninitialized memory exposureCVE-2025-64118 · GHSA-29XP-372Q-XQPH tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat Medium Fix reported
brace-expansion Regular Expression Denial of Service vulnerabilityCVE-2025-5889 · GHSA-V6H2-P8H4-QCJW brace-expansionCryostat 4/io.cryostat-cryostat npmRed Hat Low Fix reported
Regular Expression Denial of Service (ReDoS) in cross-spawnCVE-2024-21538 · GHSA-3XGQ-45JJ-V275 cross-spawnCryostat 3/cross-spawn npmRed Hat High Fix reported
c-ares: c-ares: Denial of Service due to query termination after maximum attemptsCVE-2025-62408 Red Hat Enterprise Linux 10/c-aresRed Hat Enterprise Linux 10/nodejs22 Red Hat Medium No fix reported
Node.js: Node.js: Denial of Service via malformed Internationalized Domain Name processingCVE-2026-21712 Red Hat Enterprise Linux 10/nodejs22Red Hat Enterprise Linux 8/nodejs:20/nodejs Red Hat Medium No fix reported
nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash collisionsCVE-2026-21717 Red Hat Enterprise Linux 10/nodejs22Red Hat Enterprise Linux 8/nodejs:20/nodejs Red Hat Medium No fix reported
Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE framesCVE-2026-21714 Red Hat Enterprise Linux 10/nodejs22Red Hat Enterprise Linux 8/nodejs:20/nodejs Red Hat Medium No fix reported
Node.js: Node.js: Information disclosure via timing oracle in HMAC verificationCVE-2026-21713 Red Hat Enterprise Linux 10/nodejs22Red Hat Enterprise Linux 8/nodejs:20/nodejs Red Hat Medium No fix reported
nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix.CVE-2026-21716 Red Hat Enterprise Linux 10/nodejs22Red Hat Enterprise Linux 8/nodejs:20/nodejs Red Hat Low No fix reported
Node.js: Node.js: Information disclosure due to `fs.realpathSync.native()` bypassing filesystem read restrictionsCVE-2026-21715 Red Hat Enterprise Linux 10/nodejs22Red Hat Enterprise Linux 8/nodejs:20/nodejs Red Hat Low No fix reported