TI-2021-05779 CVE-2021-22918 · GHSA-x3cj-3539-rcpx
Out-of-bounds read in NodeJS Node
Priority MEDIUM 44
Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII.
RHSA-2021:2931
rh-nodejs12-nodejs and rh-nodejs12-nodejs-nodemon security update
Released 2021-07-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-nodejs12-nodejs-12.22.2-1.el7, rh-nodejs12-nodejs-devel-12.22.2-1.el7, rh-nodejs12-nodejs-docs-12.22.2-1.el7 +2
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-nodejs12-nodejs-12.22.2-1.el7, rh-nodejs12-nodejs-devel-12.22.2-1.el7, rh-nodejs12-nodejs-docs-12.22.2-1.el7 +2
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-nodejs12-nodejs-12.22.2-1.el7, rh-nodejs12-nodejs-devel-12.22.2-1.el7, rh-nodejs12-nodejs-docs-12.22.2-1.el7 +2
Fixes 4 records
TI-2021-08824 CVE-2021-27290 · GHSA-vx3p-948g-6vhq
ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is…
Priority MEDIUM 40
ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service.
TI-2021-12904 CVE-2021-33502 · GHSA-px4h-xg32-q955
The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for…
Priority LOW 36
The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expression denial of service) issue because it has exponential performance for data: URLs.
TI-2021-06057 CVE-2021-23362 · GHSA-43f8-2h32-f4cj
Regular expression denial of service (ReDoS) in hosted-git-info
Priority LOW 30
The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js.