Homepage

nodejs-nodemon vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the nodejs-nodemon package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • M
CVE-2024-36137

<0:3.0.1-1.module+el8.10.0+1666+930e28e8
  • M
CVE-2024-28863

<0:3.0.1-1.module+el8.10.0+1666+930e28e8
  • M
CVE-2024-22020

<0:3.0.1-1.module+el8.10.0+1666+930e28e8
  • M
CVE-2024-22018

<0:3.0.1-1.module+el8.10.0+1666+930e28e8
  • H
CVE-2024-28182

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
CVE-2024-27983

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
CVE-2024-27982

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
CVE-2024-25629

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
CVE-2024-22025

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
CVE-2024-22017

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
CVE-2024-21896

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
CVE-2024-21891

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
CVE-2024-21890

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
CVE-2024-22019

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
CVE-2024-21892

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
CVE-2023-46809

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
Information Exposure

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
CVE-2023-39333

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
Directory Traversal

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
Directory Traversal

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
Insufficient Verification of Data Authenticity

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • H
CVE-2023-44487

<0:3.0.1-1.module+el8.8.0+1459+02651ab6
  • M
CVE-2023-30590

<0:2.0.20-2.module+el8.7.0+1177+510ae886
  • M
CVE-2023-30589

<0:2.0.20-2.module+el8.7.0+1177+510ae886
  • M
CVE-2023-30588

<0:2.0.20-2.module+el8.7.0+1177+510ae886
  • M
CVE-2023-30581

<0:2.0.20-2.module+el8.7.0+1177+510ae886
  • H
Use of Insufficiently Random Values

<0:2.0.20-2.module+el8.7.0+1177+510ae886
  • H
Out-of-bounds Write

<0:2.0.20-2.module+el8.7.0+1177+510ae886
  • H
Use of Insufficiently Random Values

<0:2.0.20-2.module+el8.7.0+1177+510ae886
  • H
CVE-2023-32067

<0:2.0.20-2.module+el8.7.0+1177+510ae886
  • H
Improper Input Validation

<0:2.0.20-3.module+el8.7.0+1178+d52dba78
  • M
Inefficient Regular Expression Complexity

<0:2.0.20-2.module+el8.7.0+1108+49363b0d
  • M
Arbitrary Code Injection

<0:2.0.20-2.module+el8.7.0+1108+49363b0d
  • H
Untrusted Search Path

<0:2.0.20-3.module+el8.7.0+1178+d52dba78
  • M
CVE-2023-23919

<0:2.0.20-3.module+el8.7.0+1178+d52dba78
  • H
Incorrect Authorization

<0:2.0.20-3.module+el8.7.0+1178+d52dba78
  • H
Improper Validation of Specified Quantity in Input

<0:2.0.20-2.module+el8.7.0+1177+510ae886
  • H
Inefficient Regular Expression Complexity

<0:2.0.20-3.module+el8.7.0+1178+d52dba78
  • H
Inefficient Regular Expression Complexity

<0:2.0.20-3.module+el8.7.0+1178+d52dba78
  • H
Allocation of Resources Without Limits or Throttling

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
Allocation of Resources Without Limits or Throttling

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
Allocation of Resources Without Limits or Throttling

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
Allocation of Resources Without Limits or Throttling

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
Improper Privilege Management

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
Directory Traversal

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
Symlink Following

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
Allocation of Resources Without Limits or Throttling

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
Resource Exhaustion

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
CVE-2019-15606

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
HTTP Request Smuggling

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
Improper Certificate Validation

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • M
Resource Exhaustion

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • M
Arbitrary Argument Injection

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • M
Improper Input Validation

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • H
Integer Underflow

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
Improper Certificate Validation

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • M
HTTP Request Smuggling

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • M
HTTP Request Smuggling

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • M
Use After Free

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • M
CVE-2020-7754

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • H
CVE-2021-22884

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
Missing Release of Resource after Effective Lifetime

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • M
Directory Traversal

<0:2.0.15-1.module+el8.5.0+721+4c107270
  • M
Directory Traversal

<0:2.0.15-1.module+el8.5.0+721+4c107270
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0:2.0.20-2.module+el8.7.0+1108+49363b0d
  • M
Information Exposure

<0:2.0.20-2.module+el8.7.0+1108+49363b0d
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0:2.0.19-2.module+el8.6.0+1003+ae94235a
  • M
Improper Certificate Validation

<0:2.0.19-2.module+el8.6.0+1003+ae94235a
  • M
Improper Certificate Validation

<0:2.0.19-2.module+el8.6.0+1003+ae94235a
  • M
Improper Certificate Validation

<0:2.0.19-2.module+el8.6.0+1003+ae94235a
  • M
OS Command Injection

<0:2.0.20-2.module+el8.7.0+1108+49363b0d
  • H
Inefficient Regular Expression Complexity

<0:2.0.20-3.module+el8.7.0+1178+d52dba78
  • H
Integer Overflow or Wraparound

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
Allocation of Resources Without Limits or Throttling

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
CVE-2019-9513

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
Allocation of Resources Without Limits or Throttling

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • M
Buffer Overflow

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • M
Information Exposure Through Log Files

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • H
Improper Enforcement of Message or Data Structure

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • M
Resource Exhaustion

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0:1.18.3-1.module+el8.3.0+101+f84c7154
  • M
CVE-2021-27290

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • M
Inefficient Regular Expression Complexity

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • M
Out-of-bounds Read

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • H
Directory Traversal

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • H
Link Following

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • H
CVE-2021-23343

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • H
Use After Free

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • H
Improper Certificate Validation

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • H
Improper Input Validation

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • H
Use After Free

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • H
Cross-site Scripting (XSS)

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0:2.0.15-1.module+el8.5.0+721+4c107270
  • M
Inefficient Regular Expression Complexity

<0:2.0.15-1.module+el8.5.0+721+4c107270
  • M
Inefficient Regular Expression Complexity

<0:2.0.15-1.module+el8.5.0+721+4c107270
  • M
HTTP Request Smuggling

<0:2.0.15-1.module+el8.5.0+721+4c107270
  • M
HTTP Request Smuggling

<0:2.0.15-1.module+el8.5.0+721+4c107270
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0:2.0.3-1.module+el8.4.0+638+5344c6f7
  • M
Resource Exhaustion

<0:2.0.15-1.module+el8.5.0+721+4c107270
  • H
Insufficient Verification of Data Authenticity

<0:2.0.15-1.module+el8.5.0+721+4c107270
  • M
CVE-2022-33987

<0:2.0.19-2.module+el8.6.0+1003+ae94235a
  • M
HTTP Request Smuggling

<0:2.0.19-2.module+el8.6.0+1003+ae94235a
  • M
HTTP Request Smuggling

<0:2.0.19-2.module+el8.6.0+1003+ae94235a
  • M
HTTP Request Smuggling

<0:2.0.19-2.module+el8.6.0+1003+ae94235a
  • H
HTTP Request Smuggling

<0:2.0.19-2.module+el8.6.0+1003+ae94235a
  • M
OS Command Injection

<0:2.0.19-2.module+el8.6.0+1003+ae94235a
  • H
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

<0:2.0.19-2.module+el8.6.0+1003+ae94235a
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0:2.0.20-2.module+el8.7.0+1108+49363b0d