Node.js — программная платформа, основанная на движке V8 (компилирующем JavaScript в машинный код)
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 24.22.2 | 24.22.2 | ||
| 24.22.1 | 24.22.1 | ||
| 24.22.0 | 24.22.0 | ||
| 24.21.0 | 24.21.0 | ||
| 24.20.0 | 24.20.0 | ||
| 24.19.0 | 24.19.0 | ||
| 24.18.1 | 24.18.1 | ||
| 24.18.0 | 24.18.0 | ||
| 24.17.0 | 24.17.0 | ||
| 24.16.0 | 24.16.0 |
Показывать по
Количество 1 296
GHSA-q4qq-fm7q-cwp5
Multiple XSS Filter Bypasses in validator
GHSA-5726-g6r9-5f22
Potential for Script Injection in syntax-error
GHSA-xwg4-93c6-3h42
Directory Traversal in send
CVE-2014-3744
Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in an unspecified path.
CVE-2014-3744
Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in an unspecified path.
CVE-2015-7384
Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service.
CVE-2015-7384
Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a den ...
CVE-2015-7384
Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service.
CVE-2017-14849
Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules.
CVE-2017-14849
Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintende ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-q4qq-fm7q-cwp5 Multiple XSS Filter Bypasses in validator | CVSS3: 6.1 | 2% Низкий | около 9 лет назад |
| GHSA-5726-g6r9-5f22 Potential for Script Injection in syntax-error | 13% Средний | около 9 лет назад | |
| GHSA-xwg4-93c6-3h42 Directory Traversal in send | 4% Низкий | около 9 лет назад | |
 | CVE-2014-3744 Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in an unspecified path. | CVSS3: 7.5 | 34% Средний | около 9 лет назад |
 | CVE-2014-3744 Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in an unspecified path. | CVSS3: 7.5 | 34% Средний | около 9 лет назад |
| CVE-2015-7384 Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service. | CVSS3: 7.5 | 8% Низкий | около 9 лет назад |
| CVE-2015-7384 Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a den ... | CVSS3: 7.5 | 8% Низкий | около 9 лет назад |
| CVE-2015-7384 Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service. | CVSS3: 7.5 | 8% Низкий | около 9 лет назад |
| CVE-2017-14849 Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules. | CVSS3: 7.5 | 54% Средний | около 9 лет назад |
| CVE-2017-14849 Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintende ... | CVSS3: 7.5 | 54% Средний | около 9 лет назад |
Уязвимостей на страницу