TI-2022-09440 CVE-2022-25881 · GHSA-rc47-6667-2j5j
Regular expression denial of service in http-cache-semantics
Priority HIGH 68
This affects versions of the package http-cache-semantics before 4.1.1.
RHSA-2023:1743
nodejs:14 security, bug fix, and enhancement update
Released 2023-04-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) nodejs-1:14.21.3-1.module+el8.7.0+18531+81d21ca6.aarch64::nodejs:14, nodejs-1:14.21.3-1.module+el8.7.0+18531+81d21ca6.ppc64le::nodejs:14, nodejs-1:14.21.3-1.module+el8.7.0+18531+81d21ca6.s390x::nodejs:14 +19
Fixes 7 records
TI-2022-18347 CVE-2022-38900 · GHSA-w573-4hg7-7wgq
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
Priority HIGH 66
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
TI-2021-14025 CVE-2021-35065 · GHSA-cj88-88mr-972w
The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial…
Priority HIGH 66
The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.
TI-2022-04495 CVE-2022-4904 · GHSA-v7h6-g695-5j7q
Improper input validation in c-ares
Priority MEDIUM 46
A flaw was found in the c-ares package.
TI-2023-09716 CVE-2023-23918 · GHSA-33p5-m25c-cp6w
Incorrect authorization in NodeJS Node
Priority MEDIUM 43
A privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3 that made it possible to bypass the experimental Permissions (https://nodejs.org/api/permissions.html) feature in Node.js an…
TI-2022-03245 CVE-2022-3517 · GHSA-f8q6-p94x-37v3
Uncontrolled resource consumption in minimatch
Priority MEDIUM 43
A vulnerability was found in the minimatch package.
TI-2023-09718 CVE-2023-23920 · GHSA-fj8r-46q3-hp4r
Untrusted search path in NodeJS Node
Priority LOW 20
An untrusted search path vulnerability exists in Node.js.