Node.js is a platform built on Chrome’s JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices.

OSVersionArchitecturePackageVersionFilename
Fedora33anynodejs< 14.18.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Fedora	33	any	nodejs	< 14.18.1	UNKNOWN

fedora 2

nessus 27

ibm 25

openvas 15

archlinux 3

freebsd 1

altlinux 1

nodejsblog 1

mageia 1

alpinelinux 2

prion 2

hackerone 2

ubuntucve 2

redhatcve 2

veracode 2

cve 2

osv 7

debiancve 2

debian 1

redhat 5

rocky 3

suse 5

almalinux 2

oraclelinux 2

oracle 1

fedora

[SECURITY] Fedora 35 Update: nodejs-16.11.1-1.fc35

2021-10-29 23:27:03

[SECURITY] Fedora 34 Update: nodejs-14.18.1-1.fc34

2021-10-23 03:22:47

nessus

Node.js Multiple Vulnerabilities (October 12th 2021 Security Releases)

2021-10-19 00:00:00

FreeBSD : Node.js -- October 2021 Security Releases (a9c5e89d-2d15-11ec-8363-0022489ad614)

2021-10-18 00:00:00

RHEL 7 : rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon (RHSA-2022:0041)

2022-01-07 00:00:00

ibm

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Node.js

2021-12-17 04:21:37

Security Bulletin: IBM DataPower affected by vulnerabilities in Node.js

2022-03-02 15:24:25

Security Bulletin: IBM Cloud Pak for Integration is vulnerable to Node.js vulnerabilities (CVE-2021-22959 and CVE-2021-22960)

2022-01-13 15:45:49

openvas

Mageia: Security Advisory (MGASA-2021-0592)

2022-01-28 00:00:00

Fedora: Security Advisory for nodejs (FEDORA-2021-9818cabe0d)

2021-10-30 00:00:00

Fedora: Security Advisory for nodejs (FEDORA-2021-cbad295a90)

2021-10-24 00:00:00

archlinux

[ASA-202110-4] nodejs: url request injection

2021-10-21 00:00:00

[ASA-202110-6] nodejs-lts-erbium: multiple issues

2021-10-21 00:00:00

[ASA-202110-5] nodejs-lts-fermium: multiple issues

2021-10-21 00:00:00

freebsd

Node.js -- October 2021 Security Releases

2021-10-12 00:00:00

altlinux

Security fix for the ALT Linux 10 package node version 14.18.2-alt1

2021-12-23 00:00:00

nodejsblog

October 12th 2021 Security Releases

2021-10-12 00:00:00

mageia

Updated nodejs packages fix security vulnerability

2021-12-30 19:41:51

alpinelinux

CVE-2021-22960

2021-11-03 20:15:00

CVE-2021-22959

2021-11-15 15:15:00

prion

Design/Logic Flaw

2021-11-15 15:15:00

Design/Logic Flaw

2021-11-03 20:15:00

hackerone

Node.js: HTTP Request Smuggling due to accepting space before colon

2021-06-20 11:10:00

Node.js: HTTP Request Smuggling due to ignoring chunk extensions

2021-06-19 08:43:05

ubuntucve

CVE-2021-22959

2021-11-15 00:00:00

CVE-2021-22960

2021-11-03 00:00:00

redhatcve

CVE-2021-22959

2021-10-14 12:15:38

CVE-2021-22960

2021-10-14 12:15:38

veracode

HTTP Request Smuggling (HRS)

2021-10-13 17:26:57

HTTP Request Smuggling

2021-10-13 17:27:33

cve

CVE-2021-22959

2021-11-15 15:15:00

CVE-2021-22960

2021-11-03 20:15:00

osv

CVE-2021-22960

2021-11-03 20:15:08

CVE-2021-22959

2021-11-15 15:15:06

nodejs - security update

2022-06-27 00:00:00

debiancve

CVE-2021-22959

2021-11-15 15:15:00

CVE-2021-22960

2021-11-03 20:15:00

debian

[SECURITY] [DSA 5170-1] nodejs security update

2022-06-27 18:43:09

redhat

(RHSA-2022:0041) Moderate: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update

2022-01-06 18:27:51

(RHSA-2021:5171) Moderate: nodejs:16 security, bug fix, and enhancement update

2021-12-15 19:09:29

(RHSA-2022:0246) Moderate: nodejs:14 security, bug fix, and enhancement update

2022-01-25 08:40:34

rocky

nodejs:16 security, bug fix, and enhancement update

2021-12-15 19:09:29

nodejs:14 security, bug fix, and enhancement update

2022-02-01 20:08:39

12 bug fix and enhancement update

2022-06-21 11:47:44

suse

Security update for nodejs14 (important)

2021-12-07 00:00:00

Security update for nodejs12 (important)

2021-12-06 00:00:00

Security update for nodejs12 (important)

2021-12-12 00:00:00

almalinux

Moderate: nodejs:16 security, bug fix, and enhancement update

2021-12-15 19:09:29

Moderate: nodejs:14 security, bug fix, and enhancement update

2022-02-01 20:08:39

oraclelinux

nodejs:16 security, bug fix, and enhancement update

2021-12-16 00:00:00

nodejs:14 security, bug fix, and enhancement update

2022-02-02 00:00:00

oracle

Oracle Critical Patch Update Advisory - January 2022

2022-01-18 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

65.2%

JSON

Related for FEDORA:075BE30AAB8A