No weakness recorded

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). The CR charac…CVE-2023-30589NodeJS · 3.9% likely

   2 bounty reports

2. Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could…CVE-2017-15896The Node.js Project · 2.4% likely
3. A vulnerability has been identified in the Node.js (.msi version) installation process, specifically affecting Windows users who install Node.js using the .msi installer. This vul…CVE-2023-30585NodeJS · 1.5% likely
4. The generateKeys() API function returned from crypto.createDiffieHellman() only generates missing (or outdated) keys, that is, it only generates a private key if none has been set…CVE-2023-30590NodeJS · 1.5% likely

   2 bounty reports

5. When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate() API a non-expect termination occurs making it susceptible to DoS attacks when t…CVE-2023-30588NodeJS · 1.2% likely
6. The Node.js Permission Model does not clarify in the documentation that wildcards should be only used as the last character of a file path. For example: ``` --allow-fs-read=/home/…CVE-2024-21890NodeJS · CVSS 5 · 0.9% likely

   2 bounty reports

7. A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used. This flaw arises from an inadequate per…CVE-2024-22018NodeJS · CVSS 2.9 · 0.5% likely

   1 bounty report

8. A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js Permission Model do not operat…CVE-2024-36137NodeJS · CVSS 3.3 · 0.4% likely

   2 bounty reports

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.