Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | nodejs | 10.21.0~dfsg-1~deb10u1 |
Vulnerabilities 2
-
Low 3.7
Denial of service in nghttp2
In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes (2400 individual settings entries) o…
-
Unscored —
napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.