4 matches found
CVE-2022-21824
Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be "proto ". The prototype pollution has...
CVE-2021-44531
Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and
CVE-2021-44533
Node.js < 12.22.9, < 14.18.3, < 16.13.2, and
CVE-2021-44532
Node.js < 12.22.9, < 14.18.3, < 16.13.2, and