Search for packages
| purl | pkg:rpm/redhat/rh-nodejs10-nodejs@10.21.0-3?arch=el7 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-17k5-vadp-4kby
Aliases: CVE-2020-11080 |
nghttp2: overly large SETTINGS frames can lead to DoS | There are no reported fixed by versions. |
|
VCID-5ht5-3ffs-mbe6
Aliases: CVE-2020-10531 |
An integer overflow flaw in ICU could possibly allow for the execution of arbitrary code. | There are no reported fixed by versions. |
|
VCID-bhnm-47u8-zfhr
Aliases: CVE-2020-7598 GHSA-vh95-rmgr-6w4m |
Prototype Pollution in minimist Affected versions of `minimist` are vulnerable to prototype pollution. Arguments are not properly sanitized, allowing an attacker to modify the prototype of `Object`, causing the addition or modification of an existing property that will exist on all objects. Parsing the argument `--__proto__.y=Polluted` adds a `y` property with value `Polluted` to all objects. The argument `--__proto__=Polluted` raises and uncaught error and crashes the application. This is exploitable if attackers have control over the arguments being passed to `minimist`. ## Recommendation Upgrade to versions 0.2.1, 1.2.3 or later. | There are no reported fixed by versions. |
|
VCID-xeay-8ec9-4bdd
Aliases: CVE-2020-8174 |
Multiple vulnerabilities have been found in NodeJS, the worst of which could result in the arbitrary execution of code. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:12:13.535557+00:00 | RedHat Importer | Affected by | VCID-5ht5-3ffs-mbe6 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10531.json | 38.0.0 |
| 2026-04-01T14:10:05.864733+00:00 | RedHat Importer | Affected by | VCID-bhnm-47u8-zfhr | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7598.json | 38.0.0 |
| 2026-04-01T14:06:35.184737+00:00 | RedHat Importer | Affected by | VCID-xeay-8ec9-4bdd | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8174.json | 38.0.0 |
| 2026-04-01T14:06:34.882095+00:00 | RedHat Importer | Affected by | VCID-17k5-vadp-4kby | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11080.json | 38.0.0 |