Red Hat Software Collections/rh-nodejs6-nodejs

Red Hat · Package

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
c-ares: NAPTR parser out of bounds accessCVE-2017-1000381	Red Hat Enterprise Linux 5/c-ares Red Hat Enterprise Linux 6/c-ares	Red Hat	Medium	No fix reported	Not recorded
nodejs: HTTP parser allowed for spaces inside Content-Length header valuesCVE-2018-7159	Red Hat Software Collections/rh-nodejs4-nodejs Red Hat Software Collections/rh-nodejs6-nodejs	Red Hat	Low	No fix reported	Not recorded
nodejs: Inspector DNS rebinding vulnerabilityCVE-2018-7160	Red Hat Software Collections/rh-nodejs6-nodejs	Red Hat	Medium	No fix reported	Not recorded
nodejs: Denial of Service by calling Buffer.fill() or Buffer.alloc() with specially crafted parametersCVE-2018-7167	Red Hat Mobile Application Platform 4/nodejs Red Hat OpenShift Enterprise 3/jenkins-slave-nodejs	Red Hat	Medium	No fix reported	Not recorded
nodejs: Debugger port 5858 listens on any interface by defaultCVE-2018-12120	Red Hat OpenShift Container Platform 3.10/nodejs Red Hat OpenShift Container Platform 3.2/nodejs	Red Hat	Medium	No fix reported	Not recorded
nodejs: Hostname spoofing in URL parser for javascript protocolCVE-2018-12123	Red Hat OpenShift Container Platform 3.10/nodejs Red Hat OpenShift Container Platform 3.2/nodejs	Red Hat	Low	No fix reported	Not recorded
nodejs: Slowloris HTTP Denial of ServiceCVE-2018-12122	Red Hat OpenShift Container Platform 3.10/nodejs Red Hat OpenShift Container Platform 3.2/nodejs	Red Hat	Low	No fix reported	Not recorded
nodejs: HTTP request splittingCVE-2018-12116	Red Hat OpenShift Container Platform 3.10/nodejs Red Hat OpenShift Container Platform 3.2/nodejs	Red Hat	Medium	No fix reported	Not recorded