RHSA-2024:10906

Webpack is a module bundler.

The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status.

path-to-regexp turns path strings into a regular expressions.

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion.

body-parser is Node.js body parsing middleware.

serve-static serves static files.

Send is a library for streaming files from the file system as a http response.

Express.js minimalist web framework for node.

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.