Поиск уязвимостей
Количество 25
Количество 25
BDU:2022-00758
Уязвимость реализации способа указания всех доменных имен и IP-адресов Subject Alternative Names программной платформы Node.js, позволяющая нарушителю проводить спуфинг-атаки
ROS-20220125-10
Уязвимость программной платформы Node.js
ALT-PU-2022-1799
ALT-PU-2022-1799: package `node` update to version 14.19.1-alt1
ALT-PU-2022-1760
ALT-PU-2022-1760: package `node` update to version 16.14.2-alt1
ALT-PU-2023-1461
ALT-PU-2023-1461: package `node` update to version 16.18.1-alt1
CVE-2021-44531
Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 was accepting URI SAN types, which PKIs are often not defined to use. Additionally, when a protocol allows URI SANs, Node.js did not match the URI correctly.Versions of Node.js with the fix for this disable the URI SAN type when checking a certificate against a hostname. This behavior can be reverted through the --security-revert command-line option.
CVE-2021-44531
Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 was accepting URI SAN types, which PKIs are often not defined to use. Additionally, when a protocol allows URI SANs, Node.js did not match the URI correctly.Versions of Node.js with the fix for this disable the URI SAN type when checking a certificate against a hostname. This behavior can be reverted through the --security-revert command-line option.
CVE-2021-44531
Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 was accepting URI SAN types, which PKIs are often not defined to use. Additionally, when a protocol allows URI SANs, Node.js did not match the URI correctly.Versions of Node.js with the fix for this disable the URI SAN type when checking a certificate against a hostname. This behavior can be reverted through the --security-revert command-line option.
CVE-2021-44531
CVE-2021-44531
Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI ...
ALT-PU-2020-1090
ALT-PU-2020-1090: package `node` update to version 13.6.0-alt2
ALT-PU-2023-8738
ALT-PU-2023-8738: package `mysql-workbench-community` update to version 8.0.32-alt1
GHSA-5qpf-4xwh-5775
Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 was accepting URI SAN types, which PKIs are often not defined to use. Additionally, when a protocol allows URI SANs, Node.js did not match the URI correctly.Versions of Node.js with the fix for this disable the URI SAN type when checking a certificate against a hostname. This behavior can be reverted through the --security-revert command-line option.
ALT-PU-2022-2156
ALT-PU-2022-2156: package `MySQL` update to version 8.0.29-alt1
openSUSE-SU-2022:0113-1
Security update for nodejs12
openSUSE-SU-2022:0112-1
Security update for nodejs14
SUSE-SU-2022:0114-1
Security update for nodejs14
SUSE-SU-2022:0113-1
Security update for nodejs12
SUSE-SU-2022:0112-1
Security update for nodejs14
RLSA-2022:7830
Moderate: nodejs:14 security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-00758 Уязвимость реализации способа указания всех доменных имен и IP-адресов Subject Alternative Names программной платформы Node.js, позволяющая нарушителю проводить спуфинг-атаки | CVSS3: 7.4 | 8% Низкий | почти 5 лет назад |
 | ROS-20220125-10 Уязвимость программной платформы Node.js | почти 5 лет назад | ||
| ALT-PU-2022-1799 ALT-PU-2022-1799: package `node` update to version 14.19.1-alt1 | CVSS3: 8.2 | больше 4 лет назад | |
| ALT-PU-2022-1760 ALT-PU-2022-1760: package `node` update to version 16.14.2-alt1 | CVSS3: 8.2 | больше 4 лет назад | |
| ALT-PU-2023-1461 ALT-PU-2023-1461: package `node` update to version 16.18.1-alt1 | CVSS3: 9.8 | больше 3 лет назад | |
 | CVE-2021-44531 Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 was accepting URI SAN types, which PKIs are often not defined to use. Additionally, when a protocol allows URI SANs, Node.js did not match the URI correctly.Versions of Node.js with the fix for this disable the URI SAN type when checking a certificate against a hostname. This behavior can be reverted through the --security-revert command-line option. | CVSS3: 7.4 | 8% Низкий | больше 4 лет назад |
 | CVE-2021-44531 Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 was accepting URI SAN types, which PKIs are often not defined to use. Additionally, when a protocol allows URI SANs, Node.js did not match the URI correctly.Versions of Node.js with the fix for this disable the URI SAN type when checking a certificate against a hostname. This behavior can be reverted through the --security-revert command-line option. | CVSS3: 7.4 | 8% Низкий | почти 5 лет назад |
 | CVE-2021-44531 Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 was accepting URI SAN types, which PKIs are often not defined to use. Additionally, when a protocol allows URI SANs, Node.js did not match the URI correctly.Versions of Node.js with the fix for this disable the URI SAN type when checking a certificate against a hostname. This behavior can be reverted through the --security-revert command-line option. | CVSS3: 7.4 | 8% Низкий | больше 4 лет назад |
 | CVSS3: 7.4 | 8% Низкий | больше 4 лет назад | |
| CVE-2021-44531 Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI ... | CVSS3: 7.4 | 8% Низкий | больше 4 лет назад |
| ALT-PU-2020-1090 ALT-PU-2020-1090: package `node` update to version 13.6.0-alt2 | CVSS3: 8.8 | почти 7 лет назад | |
| ALT-PU-2023-8738 ALT-PU-2023-8738: package `mysql-workbench-community` update to version 8.0.32-alt1 | CVSS3: 9.8 | почти 4 года назад | |
| GHSA-5qpf-4xwh-5775 Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 was accepting URI SAN types, which PKIs are often not defined to use. Additionally, when a protocol allows URI SANs, Node.js did not match the URI correctly.Versions of Node.js with the fix for this disable the URI SAN type when checking a certificate against a hostname. This behavior can be reverted through the --security-revert command-line option. | CVSS3: 7.4 | 8% Низкий | больше 4 лет назад |
| ALT-PU-2022-2156 ALT-PU-2022-2156: package `MySQL` update to version 8.0.29-alt1 | CVSS3: 7.5 | больше 4 лет назад | |
 | openSUSE-SU-2022:0113-1 Security update for nodejs12 | почти 5 лет назад | ||
| openSUSE-SU-2022:0112-1 Security update for nodejs14 | почти 5 лет назад | ||
| SUSE-SU-2022:0114-1 Security update for nodejs14 | почти 5 лет назад | ||
| SUSE-SU-2022:0113-1 Security update for nodejs12 | почти 5 лет назад | ||
| SUSE-SU-2022:0112-1 Security update for nodejs14 | почти 5 лет назад | ||
 | RLSA-2022:7830 Moderate: nodejs:14 security update | около 4 лет назад |
Уязвимостей на страницу