Vulnerabilities

TI-2014-04291 CVE-2014-5256 · GHSA-7wxw-9v42-w9g6

Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of…

LOW 29

Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that triggers V8 garbage collection in conjunction with a V8 interrupt, which allows remote attackers to cause a…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03292 Published 2014-09-05 Partial fix CWE-119

TI-2013-03901 CVE-2013-4450 · GHSA-qf9f-226q-7q59

The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote…

MEDIUM 49

The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of service (memory and CPU consumption) by sending a large number of pipelined requests without reading t…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.3722 Published 2013-10-21 Partial fix CWE-20

TI-2012-02067 CVE-2012-2330 · GHSA-5j8w-g8hc-6222

The Update method in src/node_http_parser.cc in Node.js before 0.6.17 and 0.7 before…

LOW 33

The Update method in src/node_http_parser.cc in Node.js before 0.6.17 and 0.7 before 0.7.8 does not properly check the length of a string, which allows remote attackers to obtain sensitive information (request header con…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02595 Published 2012-08-13 No fix listed CWE-20

Vulnerabilities

Filters

Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of…

The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote…

The Update method in src/node_http_parser.cc in Node.js before 0.6.17 and 0.7 before…