Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-7162
7.5
HIGHCVSS v3
Severity scale
010
Description
All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash. This can be accomplished by sending duplicate/unexpected messages during the handshake. This vulnerability has been addressed by updating the TLS implementation.
@opencensus/nodejs
NPMOpenCensus is a toolkit for collecting application performance and behavior data.
NPMOpenCensus is a toolkit for collecting application performance and behavior data.>= 10.0.0, < 10.4.1, >= 9.0.0, < 9.11.2NVD
nodejsPython Package IndexPython bindings and utils for Node.js and io.js
Python Package IndexPython bindings and utils for Node.js and io.js>= 10.0.0, < 10.4.1, >= 9.0.0, < 9.11.2NVD
nodejs
NPM
NuGet Gallery