TI-2020-06291 CVE-2020-7774 · GHSA-c4w7-xm78-47vh
Prototype pollution in y18n
Priority HIGH 79
The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.
RHSA-2021:0551
nodejs:14 security and bug fix update
Released 2021-02-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) nodejs-1:14.15.4-2.module+el8.3.0+9635+ffdf8381.aarch64::nodejs:14, nodejs-1:14.15.4-2.module+el8.3.0+9635+ffdf8381.ppc64le::nodejs:14, nodejs-1:14.15.4-2.module+el8.3.0+9635+ffdf8381.s390x::nodejs:14 +19
Fixes 7 records
TI-2020-06694 CVE-2020-8277 · GHSA-m5pg-8h68-j225
Uncontrolled resource consumption in NodeJS Node
Priority HIGH 65
A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the application to resolve a D…
TI-2020-06304 CVE-2020-7788 · GHSA-qqgx-2p2h-9c37
Prototype pollution in ini
Priority MEDIUM 55
This affects the package ini before 1.3.6.
TI-2020-06683 CVE-2020-8265 · GHSA-879w-9vpf-9pw9
Use after free in NodeJS Node
Priority MEDIUM 47
Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation.
TI-2020-06704 CVE-2020-8287 · GHSA-f33f-hhx9-6j4m
Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header…
Priority MEDIUM 45
Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields).
TI-2020-06272 CVE-2020-7754 · GHSA-pw54-mh39-w3hc
Regular expression denial of service (ReDoS) in npm-user-validate
Priority LOW 39
This affects the package npm-user-validate before 1.0.1.
TI-2020-12113 CVE-2020-15366 · GHSA-v88g-cgmw-v5xw
An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator)…
Priority LOW 30
An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2.