TI-2021-05779 CVE-2021-22918 · GHSA-x3cj-3539-rcpx
Out-of-bounds read in NodeJS Node
Priority MEDIUM 44
Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII.
RHSA-2021:3074
nodejs:14 security, bug fix, and enhancement update
Released 2021-08-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) nodejs-1:14.17.3-2.module+el8.4.0+11738+3bd42762.aarch64::nodejs:14, nodejs-1:14.17.3-2.module+el8.4.0+11738+3bd42762.ppc64le::nodejs:14, nodejs-1:14.17.3-2.module+el8.4.0+11738+3bd42762.s390x::nodejs:14 +19
Fixes 3 records
TI-2021-08824 CVE-2021-27290 · GHSA-vx3p-948g-6vhq
ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is…
Priority MEDIUM 40
ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service.
TI-2021-06057 CVE-2021-23362 · GHSA-43f8-2h32-f4cj
Regular expression denial of service (ReDoS) in hosted-git-info
Priority LOW 30
The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js.