Search for packages
| purl | pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.0-1?arch=el7 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1bhj-vafz-4ya8
Aliases: CVE-2018-12122 |
Multiple vulnerabilities have been found in Node.js, worst of which could allow remote attackers to write arbitrary files. | There are no reported fixed by versions. |
|
VCID-9v22-ened-4bg2
Aliases: CVE-2018-12123 |
Multiple vulnerabilities have been found in Node.js, worst of which could allow remote attackers to write arbitrary files. | There are no reported fixed by versions. |
|
VCID-f7ch-ze7a-d7gr
Aliases: CVE-2018-12116 |
Multiple vulnerabilities have been found in Node.js, worst of which could allow remote attackers to write arbitrary files. | There are no reported fixed by versions. |
|
VCID-mr9t-dr17-w3ah
Aliases: CVE-2018-20834 GHSA-j44m-qm6p-hp7m |
Improper Link Resolution Before File Access ('Link Following') A vulnerability was found in node-tar before version 4.4.2 (excluding version 2.2.2). An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content. A patch has been applied to node-tar v2.2.2). | There are no reported fixed by versions. |
|
VCID-us11-vy4j-pfd2
Aliases: CVE-2019-5737 |
Multiple vulnerabilities have been found in Node.js, worst of which could allow remote attackers to write arbitrary files. | There are no reported fixed by versions. |
|
VCID-zrbm-htvv-eke9
Aliases: CVE-2018-12121 |
Multiple vulnerabilities have been found in Node.js, worst of which could allow remote attackers to write arbitrary files. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||