CVE-2022-36127 Service unavailability impact in NodeJS agent(version <= 0.5.0)

2022-07-1811:30:13

apache

www.cve.org

0.001 Low

EPSS

Percentile

30.7%

JSON

A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has this agent installed to be unavailable if the OAP is unhealthy and NodeJS agent can’t establish the connection.

CNA Affected

[
  {
    "product": "Apache SkyWalking NodeJS Agent",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "0.5.0",
        "status": "affected",
        "version": "Apache SkyWalking NodeJS Agent",
        "versionType": "custom"
      }
    ]
  }
]