Red Hat Enterprise Linux 9/nodejs

Red Hat · Package

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
semver vulnerable to Regular Expression Denial of ServiceCVE-2022-25883 · GHSA-C2QF-RXJJ-QQGW	semver Migration Toolkit for Applications 6/mta/mta-ui-rhel9	npmRed Hat	High	Fix reported	2026-09-10
Inefficient Regular Expression Complexity in chalk/ansi-regexCVE-2021-3807 · GHSA-93Q8-GQ69-WQMW	ansi-regex Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8	npmRed Hat	High	Fix reported	2026-09-10
Undici's cookie header not cleared on cross-origin redirect in fetchCVE-2023-45143 · GHSA-WQQ4-5WPV-MX2G	undici OpenShift Serverless/node-undici	npmRed Hat	Low	Fix reported	2026-02-04
Regular Expression Denial of Service (ReDoS)CVE-2021-27290 · GHSA-VX3P-948G-6VHQ	ssri Logging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8	npmRed Hat	High	Fix reported	2023-11-08
nodejs: code injection via WebAssembly export namesCVE-2023-39333	Red Hat Enterprise Linux 8/nodejs:16/nodejs Red Hat Enterprise Linux 9/nodejs	Red Hat	Low	No fix reported	Not recorded
nodejs: integrity checks according to policies can be circumventedCVE-2023-38552	Red Hat Enterprise Linux 8/nodejs:16/nodejs Red Hat Enterprise Linux 9/nodejs	Red Hat	Medium	No fix reported	Not recorded
libuv: Improper Domain Lookup that potentially leads to SSRF attacksCVE-2024-24806	Red Hat Enterprise Linux 9/nodejs	Red Hat	Medium	No fix reported	Not recorded
nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding (Marvin)CVE-2023-46809	Red Hat Enterprise Linux 8/nodejs:16/nodejs Red Hat Enterprise Linux 9/nodejs	Red Hat	Medium	No fix reported	Not recorded