TI-2021-02827 CVE-2021-3918 · GHSA-896r-f27r-55mw
Prototype Pollution in kriszyp/json-schema
Priority MEDIUM 49
json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
RHSA-2022:0041
rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update
Released 2022-01-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for RHEL Workstation(v. 7) rh-nodejs14-nodejs-14.18.2-1.el7, rh-nodejs14-nodejs-devel-14.18.2-1.el7, rh-nodejs14-nodejs-docs-14.18.2-1.el7 +2
- Red Hat Software Collections for RHEL(v. 7) rh-nodejs14-nodejs-14.18.2-1.el7, rh-nodejs14-nodejs-devel-14.18.2-1.el7, rh-nodejs14-nodejs-docs-14.18.2-1.el7 +2
Fixes 6 records
TI-2021-02738 CVE-2021-3807 · GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex
Priority MEDIUM 45
ansi-regex is vulnerable to Inefficient Regular Expression Complexity
TI-2021-15576 CVE-2021-37701 · GHSA-9r2w-394v-53qc
Path traversal in npm node-tar
Priority MEDIUM 43
The npm package "tar" (aka node-tar) before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability.
TI-2021-15587 CVE-2021-37712 · GHSA-qq89-hq3f-393p
Path traversal in npm node-tar
Priority MEDIUM 41
The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability.
TI-2021-05820 CVE-2021-22959 · GHSA-mhxq-vjjq-pcvf
The parser in accepts requests with a space (SP) right after the header name before the…
Priority LOW 35
The parser in accepts requests with a space (SP) right after the header name before the colon.
TI-2021-05821 CVE-2021-22960 · GHSA-px8h-5r3g-hj68
The parse function in llhttp < 2.1.4 and < 6.0.6.
Priority LOW 34
The parse function in llhttp < 2.1.4 and < 6.0.6.