Node.js
Everything Vuln Post has reported about Node.js: 3 stories, newest first. Part of our Vulnerabilities coverage.
21 Oct
VulnerabilitiesA flaw in follow-redirects versions 1.16.0 up to 1.16.1 allows sensitive headers with specific characters to leak during cross-origin redirects. Version 1.16.1 patches the issue.
VulnerabilitiesA critical flaw in the Node.js webp-converter library allows attackers to run system commands via crafted file names or option strings.
VulnerabilitiesAttackers can run system commands via crafted audio paths in transcribe2texts up to version 1.0.6. The NVD rates this flaw as critical.