hanguanqiang
42a8df2fe5
1.According to the description above error line in node_http2.cc,this should be checking whether frame->hd.type is NGHTTP2_GOAWAY,and the value of NGHTTP2_GOAWAY is 0x07,however,it is written as 0x03 here,which i think it is an error;2.correct the error of http2 header frame content based on http2 related protocal so that make UT script exited successfully
2025-04-11 09:16:12 +08:00
starlet-dx
1b66043531
Fix CVE-2025-23085
2025-03-06 10:27:53 +08:00
starlet-dx
bf7be5724d
Fix CVE-2023-46809,CVE-2024-22019,CVE-2024-22025,CVE-2024-27982 and CVE-2024-27983
2024-09-19 15:59:56 +08:00
starlet-dx
3956f1c25b
Fix CVE-2023-44487
...
(cherry picked from commit 73698fdbab5fe8fa0d5f028fde34423683570858)
2024-02-06 18:08:06 +08:00
starlet-dx
235363be93
Fix CVE-2023-0464 and CVE-2023-0465
2024-02-05 18:21:04 +08:00
wk333
d15dac7e21
Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error
2023-10-26 14:21:11 +08:00
wk333
ce983ceded
Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,CVE-2023-32559,CVE-2022-35256
...
(cherry picked from commit d16c67a1e4f5190cc8a07fbc940bd65334982f9d)
2023-08-29 17:49:48 +08:00
starlet-dx
786f6af5b0
Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450
...
(cherry picked from commit 513c5295e7d476bb37a344d0d4c738f66ec5d285)
2023-02-23 10:01:34 +08:00
liyuxiang
6fba86357e
CVE-2022-43548
...
(cherry picked from commit cb94aa0a201a37cc53fe413d74b19753a3f6d9a3)
2022-11-17 10:03:24 +08:00
wk333
c1080a0861
Update to 12.22.11, fix some cves.
2022-03-28 16:50:59 +08:00
starlet-dx
b7ab70e71e
fix CVE-2021-22930
2021-10-21 14:32:28 +08:00
zhouwenpei
2a49384c96
fix CVE-2021-22918
2021-07-20 10:22:20 +08:00
liudabo
8de6e0b7f5
fix CVE
2021-03-15 14:27:27 +08:00
markeryang
8880531b63
fix CVE
2021-02-05 16:54:03 +08:00
wangxiao65
0a72de9fff
fix CVE-2020-8252
2020-12-15 14:18:42 +08:00
jackie_wu
9816e33f63
fix conflicts between help and docs packages
2020-11-28 16:52:13 +08:00
gaozhekang
6171cf3fb9
src: avoid OOB read in URL parser
...
This is not a big concern, because right now, all (non-test) inputs
to the parser are `'\0'`-terminated, but we should be future-proof
here and not perform these OOB reads.
2020-11-06 14:53:38 +08:00
jeff200902
973a6b48a1
Upgrade from 10.11 to 10.21
2020-10-14 10:40:07 +08:00
zhanghua1831
75590792db
CVE-2018-12121 CVE-2018-12123
2020-09-21 18:28:29 +08:00
jpzhang
22fed16111
Fix dist miss problem
2020-08-28 15:07:52 +08:00
hanxinke
061ccdbe31
nodejs: use nodejs-provided libuv library
2020-08-05 17:53:02 +08:00
sherlock2010
1517ec371b
Rebuild for nodejs
2020-05-18 19:25:07 +08:00
daidai_is_here
a4899b80e4
fix cve-2019-5737
2020-03-20 17:12:32 +08:00
HukunaMatata
809c9f4a1a
package init
2020-03-06 18:04:34 +08:00
