ROS-20220125-10

A vulnerability in the Node.js software platform is related to the formatting logic of the console.table() function.
Exploitation of the vulnerability could allow an attacker acting remotely to send a special request
and assign an empty string to the prototype object’s numeric keys

A vulnerability in the Node.js software platform is related to incorrect validation of the subject and issuer fields of the
of a certificate. Exploitation of the vulnerability could allow an attacker acting remotely to create a
certificate with special names and perform a spoofing attack.

A vulnerability in the Node.js software platform is related to insufficient validation of alternative subject names
URIS. Exploitation of the vulnerability could allow an attacker acting remotely to bypass intermediate
name-restricted intermediate links and perform a spoofing attack

A vulnerability in the Node.js software platform is related to insufficient certificate validation during the
SAN (alternate entity names) conversion to string format. Exploitation of the vulnerability could
allow a remote attacker to inject special characters into the string and perform a spoofing attack.
spoofing attack