https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:13:31 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2018-12121 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2018-12121 https://cve.radiocsirt.org/vuln/cleanstart-2026-bd71263 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: nodejs</p> <p>Multiple security vulnerabilities affect the nodejs package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: nodejs</p> <p>Multiple security vulnerabilities affect the nodejs package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-bd71263 https://cve.radiocsirt.org/vuln/cnvd-2019-42558 cnvd-2019-42558 https://cve.radiocsirt.org/vuln/cnvd-2019-42558 https://cve.radiocsirt.org/vuln/euvd-2026-207724 EUVD-2026-207724 https://cve.radiocsirt.org/vuln/euvd-2026-207724 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12121 <p>Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.</p> <p>Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-12121 https://cve.radiocsirt.org/vuln/ghsa-2p2c-vwq7-7vg6 <p>Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.</p> <p>Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.</p> https://cve.radiocsirt.org/vuln/ghsa-2p2c-vwq7-7vg6 https://cve.radiocsirt.org/vuln/gsd-2018-12121 gsd-2018-12121 https://cve.radiocsirt.org/vuln/gsd-2018-12121 https://cve.radiocsirt.org/vuln/msrc_cve-2018-12121 msrc_CVE-2018-12121 https://cve.radiocsirt.org/vuln/msrc_cve-2018-12121 https://cve.radiocsirt.org/vuln/opensuse-su-2019:0089-1 <p>Security update for nodejs8</p> <p>Security update for nodejs8</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:0089-1 https://cve.radiocsirt.org/vuln/rhsa-2019:1821 <p>nodejs: HTTP request splitting nodejs: Denial of Service with large HTTP headers nodejs: Slowloris HTTP Denial of Service nodejs: Hostname spoofing in URL parser for javascript protocol nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass</p> <p>nodejs: HTTP request splitting nodejs: Denial of Service with large HTTP headers nodejs: Slowloris HTTP Denial of Service nodejs: Hostname spoofing in URL parser for javascript protocol nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass</p> https://cve.radiocsirt.org/vuln/rhsa-2019:1821 https://cve.radiocsirt.org/vuln/suse-su-2019:0117-1 <p>Security update for nodejs4</p> <p>Security update for nodejs4</p> https://cve.radiocsirt.org/vuln/suse-su-2019:0117-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12121 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs, Ubuntu:Pro:18.04:LTS: nodejs</p> <p>Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs, Ubuntu:Pro:18.04:LTS: nodejs</p> <p>Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12121 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0517 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0517