TI-2020-06304 CVE-2020-7788 · GHSA-qqgx-2p2h-9c37
Prototype pollution in ini
Priority MEDIUM 55
This affects the package ini before 1.3.6.
RHSA-2021:5171
nodejs:16 security, bug fix, and enhancement update
Released 2021-12-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) nodejs-1:16.13.1-3.module+el8.5.0+13548+45d748af.aarch64::nodejs:16, nodejs-1:16.13.1-3.module+el8.5.0+13548+45d748af.ppc64le::nodejs:16, nodejs-1:16.13.1-3.module+el8.5.0+13548+45d748af.s390x::nodejs:16 +19
Fixes 7 records
TI-2021-02827 CVE-2021-3918 · GHSA-896r-f27r-55mw
Prototype Pollution in kriszyp/json-schema
Priority MEDIUM 49
json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
TI-2021-02738 CVE-2021-3807 · GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex
Priority MEDIUM 45
ansi-regex is vulnerable to Inefficient Regular Expression Complexity
TI-2020-17282 CVE-2020-28469 · GHSA-ww39-953v-wcq6
Regular expression denial of service (ReDoS) in glob-parent
Priority MEDIUM 40
This affects the package glob-parent before 5.1.2.
TI-2021-12904 CVE-2021-33502 · GHSA-px4h-xg32-q955
The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for…
Priority LOW 36
The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expression denial of service) issue because it has exponential performance for data: URLs.
TI-2021-05820 CVE-2021-22959 · GHSA-mhxq-vjjq-pcvf
The parser in accepts requests with a space (SP) right after the header name before the…
Priority LOW 35
The parser in accepts requests with a space (SP) right after the header name before the colon.
TI-2021-05821 CVE-2021-22960 · GHSA-px8h-5r3g-hj68
The parse function in llhttp < 2.1.4 and < 6.0.6.
Priority LOW 34
The parse function in llhttp < 2.1.4 and < 6.0.6.