Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update

CVE-2020-7788 — nodejs-ini: Prototype pollution via malicious INI file CVE-2020-28469 — nodejs-glob-parent: Regular expression denial of service CVE-2021-3672 — c-ares: Missing input validation of host names may lead to domain hijacking CVE-2021-22930 — nodejs: Use-after-free on close http2 on stream canceling CVE-2021-22931 — nodejs: Improper handling of untypical characters in domain names CVE-2021-22939 — nodejs: Incomplete validation of tls rejectUnauthorized parameter CVE-2021-22940 — nodejs: Use-after-free on close http2 on stream canceling CVE-2021-23343 — nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe CVE-2021-32803 — nodejs-tar: Insufficient symlink protection allowing arbitrary file creation and overwrite CVE-2021-32804 — nodejs-tar: Insufficient absolute path sanitization allowing arbitrary file creation and overwrite