Node.js is vulnerable to Denial of Service. An attacker may trigger Denial of Service by sending DNS request and getting the application to resolve a DNS record with a larger number of response.
access.redhat.com/errata/RHSA-2020:5305
access.redhat.com/security/updates/classification/#moderate
hackerone.com/reports/1033107
lists.fedoraproject.org/archives/list/[email protected]/message/A7WH7W46OZSEUHWBHD7TCH3LRFY52V6Z/
lists.fedoraproject.org/archives/list/[email protected]/message/BEJBY3RJB3XWUOJFGZM5E3EMQ7MFM3UT/
lists.fedoraproject.org/archives/list/[email protected]/message/EEIV4CH6KNVZK63Y6EKVN2XDW7IHSJBJ/
lists.fedoraproject.org/archives/list/[email protected]/message/VXLJY4764LYVJPC7NCDLE2UMQ3QC5OI2/
nodejs.org/en/blog/vulnerability/november-2020-security-releases/
security.gentoo.org/glsa/202012-11
security.gentoo.org/glsa/202101-07
www.oracle.com//security-alerts/cpujul2021.html
www.oracle.com/security-alerts/cpuApr2021.html
www.oracle.com/security-alerts/cpuapr2022.html
www.oracle.com/security-alerts/cpujan2021.html
www.oracle.com/security-alerts/cpuoct2021.html