VulnerableCode Package Details - pkg:ebuild/net-libs/nodejs@18.20.4

Search for packages

Vulnerability	Summary	Fixed by
This package is not known to be affected by vulnerabilities.

Vulnerability

Summary

Fixed by

This package is not known to be affected by vulnerabilities.

Vulnerability	Summary	Aliases
VCID-2z1f-7jkw-17av	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2024-27982
VCID-5781-s1ny-q7ey		CVE-2023-44487 GHSA-2m7v-gc89-fjqf GHSA-qppj-fm5r-hxr3 GHSA-vx74-f528-fxqg GHSA-xpw8-rcwv-8f8p GMS-2023-3377 VSV00013
VCID-5afy-ud31-hbaw	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2024-21890
VCID-67xm-uc9p-y7f2	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2024-22020
VCID-a7mj-p1d7-h3cv	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2023-39331
VCID-apbs-8ge7-dyg3	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2024-21896
VCID-bx67-aud6-b3fa	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2024-22025
VCID-e6gj-fe31-kkh5	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2023-46809
VCID-enz6-qdn6-dkgm	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2023-38552
VCID-huz5-2qv3-g3an	Exposure of Sensitive Information to an Unauthorized Actor Undici is an HTTP/1.1 client written from scratch for Node.js. Prior to version 5.26.2, Undici already cleared Authorization headers on cross-origin redirects, but does not clear `Cookie` headers. By design, `cookie` headers are forbidden request headers, disallowing them to be set in RequestInit.headers in browser environments. Since undici handles headers more liberally than the spec, there was a disconnect from the assumptions the spec made, and undici's implementation of fetch. As such this may lead to accidental leakage of cookie to a third-party site or a malicious attacker who can control the redirection target (ie. an open redirector) to leak the cookie to the third party site. This was patched in version 5.26.2. There are no known workarounds.	CVE-2023-45143 GHSA-wqq4-5wpv-mx2g
VCID-krft-297e-qfdw	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2024-36137
VCID-mqcy-2run-93d6	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2024-21892
VCID-nenk-4cgd-fugv	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2024-27983
VCID-p9sg-8byk-eydy	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2024-37372
VCID-s1a4-9r1m-8uaw	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2023-39332
VCID-vhg4-51cg-ebaa	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2024-21891
VCID-vkvx-gxbu-3uau	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2024-22019
VCID-w6yn-qt4p-vudt	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2024-22018
VCID-xva8-adbf-87h3	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2024-22017
VCID-yxvf-4pb4-d7ec	Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.	CVE-2023-39333

Vulnerability

Summary

Aliases

VCID-2z1f-7jkw-17av