TI-2022-09440 CVE-2022-25881 · GHSA-rc47-6667-2j5j
Regular expression denial of service in http-cache-semantics
Priority HIGH 68
This affects versions of the package http-cache-semantics before 4.1.1.
RHSA-2023:1744
rh-nodejs14-nodejs security, bug fix, and enhancement update
Released 2023-04-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for RHEL Workstation(v. 7) rh-nodejs14-3.6-2.el7, rh-nodejs14-nodejs-14.21.3-2.el7, rh-nodejs14-nodejs-devel-14.21.3-2.el7 +5
- Red Hat Software Collections for RHEL(v. 7) rh-nodejs14-3.6-2.el7, rh-nodejs14-nodejs-14.21.3-2.el7, rh-nodejs14-nodejs-devel-14.21.3-2.el7 +5
Fixes 5 records
TI-2022-18347 CVE-2022-38900 · GHSA-w573-4hg7-7wgq
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
Priority HIGH 66
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
TI-2022-04495 CVE-2022-4904 · GHSA-v7h6-g695-5j7q
Improper input validation in c-ares
Priority MEDIUM 46
A flaw was found in the c-ares package.
TI-2023-09716 CVE-2023-23918 · GHSA-33p5-m25c-cp6w
Incorrect authorization in NodeJS Node
Priority MEDIUM 43
A privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3 that made it possible to bypass the experimental Permissions (https://nodejs.org/api/permissions.html) feature in Node.js an…
TI-2023-09718 CVE-2023-23920 · GHSA-fj8r-46q3-hp4r
Untrusted search path in NodeJS Node
Priority LOW 20
An untrusted search path vulnerability exists in Node.js.