Search for packages
| purl | pkg:rpm/redhat/rh-nodejs8-nodejs@8.11.4-1?arch=el7 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3vdn-6af1-k3g6
Aliases: CVE-2018-7161 |
Multiple vulnerabilities have been found in Node.js, worst of which could allow remote attackers to write arbitrary files. | There are no reported fixed by versions. |
|
VCID-nkas-113k-wkbu
Aliases: CVE-2018-7159 |
nodejs: HTTP parser allowed for spaces inside Content-Length header values | There are no reported fixed by versions. |
|
VCID-rhxy-h93e-y3d4
Aliases: CVE-2018-7167 |
Multiple vulnerabilities have been found in Node.js, worst of which could allow remote attackers to write arbitrary files. | There are no reported fixed by versions. |
|
VCID-tqg7-dw5d-z3et
Aliases: CVE-2018-12115 |
Multiple vulnerabilities have been found in Node.js, worst of which could allow remote attackers to write arbitrary files. | There are no reported fixed by versions. |
|
VCID-u8pe-48f4-abc9
Aliases: CVE-2018-7160 GHSA-wq4c-wm6x-jw44 |
Authentication Bypass by Spoofing The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution. An attack is possible from malicious websites open in a web browser on the same computer, or another computer with network access to the computer running the Node.js process. A malicious website could use a DNS rebinding attack to trick the web browser to bypass same-origin-policy checks and to allow HTTP connections to localhost or to hosts on the local network. If a Node.js process with the debug port active is running on localhost or on a host on the local network, the malicious website could connect to it as a debugger, and get full code execution access. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:25:49.671848+00:00 | RedHat Importer | Affected by | VCID-nkas-113k-wkbu | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7159.json | 38.0.0 |
| 2026-04-01T14:25:49.636980+00:00 | RedHat Importer | Affected by | VCID-u8pe-48f4-abc9 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7160.json | 38.0.0 |
| 2026-04-01T14:23:56.377435+00:00 | RedHat Importer | Affected by | VCID-3vdn-6af1-k3g6 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7161.json | 38.0.0 |
| 2026-04-01T14:23:56.349402+00:00 | RedHat Importer | Affected by | VCID-rhxy-h93e-y3d4 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7167.json | 38.0.0 |
| 2026-04-01T14:22:52.380975+00:00 | RedHat Importer | Affected by | VCID-tqg7-dw5d-z3et | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12115.json | 38.0.0 |