title: Red Hat Security Advisory: nodejs:16 security, bug fix, and enhancement update
description: nodejs-semver: Regular expression denial of service nodejs: mainModule.proto bypass experimental policy mechanism nodejs: process interuption due to invalid Public Key information in x509 certificates nodejs: HTTP Request Smuggling via Empty headers separated by CR nodejs: DiffieHellman do not generate keys after setting a private key nodejs: Permissions policies can be bypassed via Module._load nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire() nodejs: Permissions policies can be bypassed via process.binding
cpes: cpe:/a:redhat:rhel_eus:8.6::appstream