AZL-32282 CVE-2021-22931 affecting package python-gevent for versions less than 21.1.2-3

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames leading to Domain Hijacking and injection...

ALPINE-CVE-2021-22931

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames leading to Domain Hijacking and injection...

ALPINE-CVE-2021-22939

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted...

CVE-2021-22939

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted...

Denial Of Service (DoS)

nodejs-current is vulnerable to Denial Of Service DoS. The vulnerability exists due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames...

Denial Of Service (DoS)

nodejs is vulnerable to Denial Of Service DoS. A use-after-free allows an attacker to exploit a memory corruption vulnerability to crash the application or change process behavior...

nodejs:14 security, bug fix, and enhancement update

nodejs 1:14.17.3-2 - Resolves: RHBZ1980032, RHBZ1978203 - Resolves RHBZ1842826 - Don't use patch3 1:14.17.3-1 - Resolves: RHBZ1980032, RHBZ1978203 - Resolves RHBZ1842826 - Resolves CVE-2021-22918libuv, use system cipher list 1:14.16.0-3 - Resolves: RHBZ1930775 - Always build with systemtap...

CVE-2019-5737 affecting package nodejs 8.11.4-7

CVE-2019-5737 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CVE-2018-12122 affecting package nodejs 8.11.4-7

CVE-2018-12122 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CVE-2018-7161 affecting package nodejs 8.11.4-7

CVE-2018-7161 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CVE-2018-0734 affecting package nodejs 8.11.4-7

CVE-2018-0734 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CVE-2018-7162 affecting package nodejs 8.11.4-7

CVE-2018-7162 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CVE-2018-1000168 affecting package nodejs 8.11.4-7

CVE-2018-1000168 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CVE-2018-12116 affecting package nodejs 8.11.4-7

CVE-2018-12116 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CVE-2021-22918 affecting package nodejs 14.17.0-1

CVE-2021-22918 affecting package nodejs 14.17.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-8174 affecting package nodejs 8.11.4-7

CVE-2020-8174 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CVE-2018-7167 affecting package nodejs 8.11.4-7

CVE-2018-7167 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CVE-2018-7164 affecting package nodejs 8.11.4-7

CVE-2018-7164 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CVE-2018-12121 affecting package nodejs 8.11.4-7

CVE-2018-12121 affecting package nodejs 8.11.4-7. An upgraded version of the package is available that resolves this issue...

CentOS 8 : nodejs:12 (CESA-2021:3073)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3073 advisory. - libuv: out-of-bounds read in uvidnatoascii can lead to information disclosures or crashes CVE-2021-22918 - nodejs-hosted-git-info: Regular Expression...