Security
فارسی
All products

Red Hat Enterprise Linux 8/nodejs:16/nodejs

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Undici's cookie header not cleared on cross-origin redirect in fetchCVE-2023-45143 · GHSA-WQQ4-5WPV-MX2G undiciOpenShift Serverless/node-undici npmRed Hat Low Fix reported
Packing does not respect root-level ignore files in workspacesCVE-2022-29244 · GHSA-HJ9C-8JMM-8C52 npmRed Hat Enterprise Linux 8/nodejs:16/nodejs npmRed Hat High Fix reported
nodejs: code injection via WebAssembly export namesCVE-2023-39333 Red Hat Enterprise Linux 8/nodejs:16/nodejsRed Hat Enterprise Linux 9/nodejs Red Hat Low No fix reported
nodejs: integrity checks according to policies can be circumventedCVE-2023-38552 Red Hat Enterprise Linux 8/nodejs:16/nodejsRed Hat Enterprise Linux 9/nodejs Red Hat Medium No fix reported
nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding (Marvin)CVE-2023-46809 Red Hat Enterprise Linux 8/nodejs:16/nodejsRed Hat Enterprise Linux 9/nodejs Red Hat Medium No fix reported
c-ares: Out of bounds read in ares__read_line()CVE-2024-25629 Red Hat Enterprise Linux 10/c-aresRed Hat Enterprise Linux 6/c-ares Red Hat Low No fix reported
nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of serviceCVE-2024-22025 Red Hat Enterprise Linux 8/nodejs:16/nodejs Red Hat Medium No fix reported
nodejs: HTTP Request Smuggling via Content Length ObfuscationCVE-2024-27982 Red Hat Enterprise Linux 8/nodejs:16/nodejsRed Hat Software Collections/rh-nodejs14-nodejs Red Hat Medium No fix reported
nodejs: CONTINUATION frames DoSCVE-2024-27983 Red Hat Enterprise Linux 8/nodejs:16/nodejs Red Hat High No fix reported
nghttp2: CONTINUATION frames DoSCVE-2024-28182 Red Hat Enterprise Linux 8/nodejs:16/nodejsRed Hat Software Collections/httpd24-nghttp2 Red Hat Medium No fix reported