Skip to content
OpenAdvisories

Package · Debian

libuv1

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.3
    CVE-2024-24806

    Improper Domain Lookup that potentially leads to SSRF attacks in libuv

    libuv is a multi-platform support library with a focus on asynchronous I/O. The `uv_getaddrinfo` function in `src/unix/getaddrinfo.c` (and its windows counterpart `src/win/getaddrinfo.c`), truncates hostnames to 256 characters before calling `getaddrinfo`. Th…

    libuv libuv libuv1 libuv1 Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-22918 EPSS 23%

    Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to conve…

    nodejs node nodejs libuv1 Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-8252

    The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined t…

    nodejs node nodejs libuv1 Debian Ubuntu Alpine