Skip to content
OpenAdvisories

Vendor

HackerOne

470 known vulnerabilities.

Products

RubyGems 4 hapi node module 4 sequelize node module 4 coffeescript node module 3 serve node module 2 html-janitor node module 2 ws node module 2 Nextcloud Server 2 i18next node module 2 marked node module 2 crud-file-server node module 2 private_address_check ruby gem 2 express-cart 2 nodemailer.js node module 2 remarkable node module 2 sanitize-html node module 2 m-server 2 http-live-simulator 1 lab6drewfusbyu node module 1 install-g-test node module 1 caolilinode node module 1 ibm_db node module 1 f2e-server node module 1 webrtc-native node module 1 lodash 1 desafio node module 1 phantomjs-cheniu node module 1 sencisho node module 1 hapi-auth-jwt2 node module 1 tinyserver2 node module 1 cobalt-cli node module 1 zwserver node module 1 selenium-portal node module 1 byucslabsix node module 1 react-native-baidu-voice-synthesizer node module 1 method-override node module 1 frames-compiler node module 1 npm-script-demo node module 1 jvminstall node module 1 sync-exec node module 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 3.7
    CVE-2017-16137

    Regular Expression Denial of Service in debug

    The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.

    HackerOne debug node module debug node-debug Debian Ubuntu npm
  • Low —
    CVE-2016-10538

    Arbitrary File Write in cli

    The package `node-cli` before 1.0.0 insecurely uses the lock_file and log_file. Both of these are temporary, but it allows the starting user to overwrite any file they have access to.

    HackerOne cli node module cli node-cli Ubuntu npm
  • Low —
    CVE-2016-10518

    Remote Memory Disclosure in ws

    A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by sending a ping frame. The ping functionality by default responds with a pong frame and the previously given payload of the ping frame…

    HackerOne ws node module ws node-ws Debian Ubuntu npm
  • Low —
    CVE-2016-10520

    Regular Expression Denial of Service in jadedown

    jadedown is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in.

    HackerOne jadedown node module jadedown npm
  • Low —
    CVE-2016-10552

    Resources Downloaded over Insecure Protocol in igniteui

    igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol.

    HackerOne igniteui node module igniteui npm
  • Low —
    CVE-2016-10534

    SSL Validation Defaults to False in electron-packager

    electron-packager is a command line tool that packages Electron source code into `.app` and `.exe` packages. along with Electron. The `--strict-ssl` command line option in electron-packager >= 5.2.1 <= 6.0.0 || >=6.0.0 <= 6.0.2 defaults to false if not explic…

    HackerOne electron-packager node module electron-packager npm