TI-2020-06304 CVE-2020-7788 · GHSA-qqgx-2p2h-9c37
Prototype pollution in ini
Priority MEDIUM 55
This affects the package ini before 1.3.6.
RHSA-2022:0246
nodejs:14 security, bug fix, and enhancement update
Released 2022-01-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.4) nodejs-1:14.18.2-2.module+el8.4.0+13643+6c0ebf22.aarch64::nodejs:14, nodejs-1:14.18.2-2.module+el8.4.0+13643+6c0ebf22.ppc64le::nodejs:14, nodejs-1:14.18.2-2.module+el8.4.0+13643+6c0ebf22.s390x::nodejs:14 +19
Fixes 9 records
TI-2021-02827 CVE-2021-3918 · GHSA-896r-f27r-55mw
Prototype Pollution in kriszyp/json-schema
Priority MEDIUM 49
json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
TI-2021-02738 CVE-2021-3807 · GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex
Priority MEDIUM 45
ansi-regex is vulnerable to Inefficient Regular Expression Complexity
TI-2021-15576 CVE-2021-37701 · GHSA-9r2w-394v-53qc
Path traversal in npm node-tar
Priority MEDIUM 43
The npm package "tar" (aka node-tar) before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability.
TI-2021-15587 CVE-2021-37712 · GHSA-qq89-hq3f-393p
Path traversal in npm node-tar
Priority MEDIUM 41
The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability.
TI-2020-17282 CVE-2020-28469 · GHSA-ww39-953v-wcq6
Regular expression denial of service (ReDoS) in glob-parent
Priority MEDIUM 40
This affects the package glob-parent before 5.1.2.
TI-2021-12904 CVE-2021-33502 · GHSA-px4h-xg32-q955
The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for…
Priority LOW 36
The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expression denial of service) issue because it has exponential performance for data: URLs.
TI-2021-05820 CVE-2021-22959 · GHSA-mhxq-vjjq-pcvf
The parser in accepts requests with a space (SP) right after the header name before the…
Priority LOW 35
The parser in accepts requests with a space (SP) right after the header name before the colon.
TI-2021-05821 CVE-2021-22960 · GHSA-px8h-5r3g-hj68
The parse function in llhttp < 2.1.4 and < 6.0.6.
Priority LOW 34
The parse function in llhttp < 2.1.4 and < 6.0.6.