TI-2020-06291 CVE-2020-7774 · GHSA-c4w7-xm78-47vh
Prototype pollution in y18n
Priority HIGH 79
The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.
RHSA-2020:5305
rh-nodejs12-nodejs security update
Released 2020-12-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-nodejs12-nodejs-12.19.1-2.el7, rh-nodejs12-nodejs-devel-12.19.1-2.el7, rh-nodejs12-nodejs-docs-12.19.1-2.el7 +1
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-nodejs12-nodejs-12.19.1-2.el7, rh-nodejs12-nodejs-devel-12.19.1-2.el7, rh-nodejs12-nodejs-docs-12.19.1-2.el7 +1
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-nodejs12-nodejs-12.19.1-2.el7, rh-nodejs12-nodejs-devel-12.19.1-2.el7, rh-nodejs12-nodejs-docs-12.19.1-2.el7 +1
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-nodejs12-nodejs-12.19.1-2.el7, rh-nodejs12-nodejs-devel-12.19.1-2.el7, rh-nodejs12-nodejs-docs-12.19.1-2.el7 +1
Fixes 4 records
TI-2020-06694 CVE-2020-8277 · GHSA-m5pg-8h68-j225
Uncontrolled resource consumption in NodeJS Node
Priority HIGH 65
A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the application to resolve a D…
TI-2020-12113 CVE-2020-15366 · GHSA-v88g-cgmw-v5xw
An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator)…
Priority LOW 30
An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2.
TI-2020-06130 CVE-2020-7608 · GHSA-p9pc-299p-vxgp
yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload.
Priority LOW 25
yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload.