Node.js — программная платформа, основанная на движке V8 (компилирующем JavaScript в машинный код)

Moderate severity vulnerability that affects validator

Potential for Script Injection in syntax-error

Denial-of-Service Memory Exhaustion in qs

Directory Traversal in send

Moderate severity vulnerability that affects validator

Moderate severity vulnerability that affects validator

Symlink Arbitrary File Overwrite in tar

Regular Expression Denial of Service in semver

Multiple XSS Filter Bypasses in validator

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.