Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

nodejs node.js 6.11.1 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2017-14919
Node.js prior to 4.8.5, 6.x prior to 6.11.5, and 8.x prior to 8.8.0 allows remote malicious users to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.
Nodejs Node.js 4.8.3Nodejs Node.js 4.8.4Nodejs Node.js 6.10.2Nodejs Node.js 6.10.3Nodejs Node.js 8.3.0Nodejs Node.js 8.4.0Nodejs Node.js 8.5.0Nodejs Node.js 8.6.0Nodejs Node.js 6.11.1Nodejs Node.js 6.11.3Nodejs Node.js 8.1.2Nodejs Node.js 8.1.4Nodejs Node.js 8.2.1Nodejs Node.js 8.7.0Nodejs Node.js 6.11.4Nodejs Node.js 8.0.0Nodejs Node.js 8.1.0Nodejs Node.js 8.1.1Nodejs Node.js 4.8.2Nodejs Node.js 6.11.0Nodejs Node.js 6.11.2Nodejs Node.js 8.1.3
7.5
CVSSv3
CVE-2017-11499
Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building ...
Nodejs Node.js 8.0.0Nodejs Node.js 7.0.0Nodejs Node.js 7.4.0Nodejs Node.js 7.5.0Nodejs Node.js 7.9.0Nodejs Node.js 6.0.0Nodejs Node.js 6.11.1Nodejs Node.js 6.2.0Nodejs Node.js 6.6.0Nodejs Node.js 6.7.0Nodejs Node.js 6.9.5Nodejs Node.js 5.0.0Nodejs Node.js 5.12.0Nodejs Node.js 5.2.0Nodejs Node.js 5.7.1Nodejs Node.js 5.8.0Nodejs Node.js 4.2.1Nodejs Node.js 4.2.2Nodejs Node.js 4.3.2Nodejs Node.js 4.4.0Nodejs Node.js 4.4.7Nodejs Node.js 4.5.0
NA
CVE-2024-30260
Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici cleared Authorization and Proxy-Authorization headers for `fetch()`, but did not clear them for `undici.request()`. This vulnerability was patched in version(s) 5.28.4 and 6.11.1.
NA
CVE-2024-30261
Undici is an HTTP/1.1 client, written from scratch for Node.js. An attacker can alter the `integrity` option passed to `fetch()`, allowing `fetch()` to accept requests as valid even if they have been tampered. This vulnerability was patched in version(s) 5.28.4 and 6.11.1.
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook