Read the docs
Red Hat Security Advisory

RHSA-2019:1821

rh-nodejs8-nodejs security update

Released 2019-07-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 6 records

TI-2018-08695 CVE-2018-12122 · GHSA-6mxm-8w9r-4997

Uncontrolled resource consumption in NodeJS Node.js

Priority HIGH 67

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connection…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.41288 Published 2018-11-28 Partial fix CWE-400
TI-2018-08694 CVE-2018-12121 · GHSA-2p2c-vwq7-7vg6

Uncontrolled resource consumption in NodeJS Node.js

Priority MEDIUM 51

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.10207 Published 2018-11-28 Partial fix CWE-400
TI-2019-04062 CVE-2019-5737 · GHSA-24mv-c2pp-2q4f

Uncontrolled resource consumption in NodeJS Node.js

Priority MEDIUM 49

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in keep-alive mode and…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.16184 Published 2019-03-28 Partial fix · 6.17.0, 8.15.1 +2 CWE-400
TI-2018-08696 CVE-2018-12123 · GHSA-f6m9-hpfw-xjw4

Improper input validation in NodeJS Node.js

Priority LOW 27

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascript protocol: If a Node.js application is using url.parse() to determine the URL hostname, that hostna…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.04032 Published 2018-11-28 Partial fix CWE-115