Known vulnerabilities in rh-nodejs14-nodejs-nodemon (Red Hat package)

Vendor: Red Hat Inc.

Software: rh-nodejs14-nodejs-nodemon (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:rh-nodejs14-nodejs-nodemon_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 31

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (31)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU69942 - Incorrect Regular Expression CVE-2022-3517	CWE-185	Medium	No	No	2.0.20-2.el7	06.12.2022	SB2022120638 SB2022120639 SB2022120640 and 49 more
#VU69675 - Improper Control of Generation of Code ('Code Injection') CVE-2022-24999	CWE-94	Medium	Available	No	2.0.20-2.el7	29.11.2022	SB2022112910 SB2022112911 SB2022112943 and 49 more
#VU69354 - Reliance on Reverse DNS Resolution for a Security-Critical Action CVE-2022-43548	CWE-350	Medium	No	No	2.0.20-2.el7	15.11.2022	SB2022111599 SB20221115101 SB20221115102 and 47 more
#VU66955 - Improper Control of Generation of Code ('Code Injection') CVE-2020-7788	CWE-94	Medium	No	No	2.0.3-5.el7	05.09.2022	SB2020121120 SB2022090501 SB2022091209 and 21 more
#VU66400 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2022-33987	CWE-601	Medium	No	No	2.0.19-1.el7	11.08.2022	SB2022081124 SB2022081525 SB2022090835 and 22 more
#VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-32215	CWE-444	Medium	No	No	2.0.19-1.el7	13.07.2022	SB2022071338 SB2022071610 SB2022071611 and 54 more
#VU65278 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-32214	CWE-444	Medium	No	No	2.0.19-1.el7	13.07.2022	SB2022071338 SB2022071610 SB2022071611 and 36 more
#VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-32213	CWE-444	Medium	No	No	2.0.19-1.el7	13.07.2022	SB2022071338 SB2022071610 SB2022071611 and 55 more
#VU65273 - Improper Check or Handling of Exceptional Conditions CVE-2022-32212	CWE-703	Medium	No	No	2.0.19-1.el7	13.07.2022	SB2022071338 SB2022071610 SB2022071611 and 48 more
#VU64034 - Improper Control of Generation of Code ('Code Injection') CVE-2021-3918	CWE-94	High	No	No	2.0.3-6.el7	07.06.2022	SB2021111302 SB2022060836 SB2022071504 and 45 more
#VU64030 - Resource exhaustion CVE-2021-44906	CWE-400	High	No	No	2.0.20-2.el7	07.06.2022	SB2022060836 SB2022062103 SB2022062203 and 53 more
#VU61471 - Exposure of sensitive information to an unauthorized actor CVE-2022-0235	CWE-200	Low	No	No	2.0.20-2.el7	20.03.2022	SB2022032001 SB2022032002 SB2022032009 and 35 more
#VU61254 - Use After Free CVE-2021-22940	CWE-416	Medium	No	No	2.0.3-5.el7	11.03.2022	SB2021081615 SB2022031104 SB2022060618 and 23 more
#VU59234 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-22960	CWE-444	Medium	No	No	2.0.3-6.el7	05.01.2022	SB2022010523 SB2022010524 SB2022042806 and 40 more
#VU59233 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-22959	CWE-444	Medium	No	No	2.0.3-6.el7	05.01.2022	SB2022010523 SB2022010524 SB2022011841 and 43 more
#VU58203 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-37712	CWE-22	Medium	No	No	2.0.3-6.el7	17.11.2021	SB2021111707 SB2021111710 SB2022031104 and 24 more
#VU58202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-37701	CWE-22	Medium	No	No	2.0.3-6.el7	17.11.2021	SB2021111706 SB2021111710 SB2022031104 and 24 more
#VU57967 - Improper input validation CVE-2021-3807	CWE-20	Medium	No	No	2.0.3-6.el7	05.11.2021	SB2021110513 SB2021112603 SB2022042257 and 51 more
#VU55102 - Resource exhaustion CVE-2021-35065	CWE-400	Medium	No	No	2.0.20-2.el7	21.07.2021	SB2021072101 SB2023020668 SB2023020971 and 24 more
#VU52985 - Incorrect Regular Expression CVE-2020-28469	CWE-185	Medium	No	No	2.0.3-5.el7	10.05.2021	SB2021051002 SB2021051004 SB2021072625 and 26 more

Showing elements 1 - 20 out of 31

Known vulnerabilities in rh-nodejs14-nodejs-nodemon (Red Hat package)

Breakdown by Severity Chart

Vulnerabilities (31)

Please verify you're human