Node.js is a platform built on Chrome’s JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices.

OSVersionArchitecturePackageVersionFilename
Fedora35anynodejs< 16.13.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Fedora	35	any	nodejs	< 16.13.2	UNKNOWN

fedora 1

photon 3

openvas 16

ibm 29

nodejsblog 1

nessus 28

altlinux 1

redos 1

mageia 1

freebsd 2

rocky 3

almalinux 2

oraclelinux 2

osv 14

redhat 6

suse 3

debian 2

hackerone 2

veracode 4

ubuntucve 4

prion 4

debiancve 4

alpinelinux 4

redhatcve 4

cve 5

cbl_mariner 8

f5 1

oracle 4

fedora

[SECURITY] Fedora 34 Update: nodejs-14.18.3-1.fc34

2022-01-20 08:35:12

photon

Important Photon OS Security Update - PHSA-2022-0164

2022-03-22 00:00:00

Important Photon OS Security Update - PHSA-2022-4.0-0164

2022-03-22 00:00:00

Important Photon OS Security Update - PHSA-2022-0453

2022-03-23 00:00:00

openvas

Fedora: Security Advisory for nodejs (FEDORA-2022-78090d2099)

2022-01-21 00:00:00

SUSE: Security Advisory (SUSE-SU-2022:0113-1)

2022-01-20 00:00:00

Fedora: Security Advisory for nodejs (FEDORA-2022-0eda327cb4)

2022-01-21 00:00:00

ibm

Security Bulletin: Vulnerabilities in the Open Source Node.js runtime affect IBM Event Streams (CVE-2021-44533, CVE-2022-21824, CVE-2021-44531, CVE-2021-44532)

2022-07-12 15:05:41

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple CVEs in Node.js

2022-04-08 14:56:49

Security Bulletin: A security vulnerability in Node.js affects IBM Cloud Pak for Watson AIOps Infrastructure Automation

2022-10-21 17:36:25

nodejsblog

January 10th 2022 Security Releases

2022-01-11 00:00:00

nessus

openSUSE 15 Security Update : nodejs14 (openSUSE-SU-2022:0112-1)

2022-01-19 00:00:00

Node.js 12.x < 12.22.9 / 14.x < 14.18.3 / 16.x < 16.13.2 / 17.x < 17.3.1 Multiple Vulnerabilities (January 10th 2022 Security Releases).

2022-02-03 00:00:00

openSUSE 15 Security Update : nodejs12 (openSUSE-SU-2022:0113-1)

2022-01-19 00:00:00

altlinux

Security fix for the ALT Linux 10 package node version 16.13.2-alt1

2022-03-18 00:00:00

redos

ROS-20220125-10

2022-01-25 00:00:00

mageia

Updated nodejs packages fix security vulnerability

2022-02-22 23:15:16

freebsd

Node.js -- January 2022 Security Releases

2022-01-10 00:00:00

MySQL -- Multiple vulnerabilities

2022-07-19 00:00:00

rocky

nodejs:14 security update

2022-11-08 10:51:23

nodejs:16 security, bug fix, and enhancement update

2022-12-15 15:42:25

12 bug fix and enhancement update

2022-06-21 11:47:44

almalinux

Moderate: nodejs:14 security update

2022-11-08 00:00:00

Moderate: nodejs:16 security, bug fix, and enhancement update

2022-12-15 00:00:00

oraclelinux

nodejs:14 security update

2022-11-15 00:00:00

nodejs:16 security, bug fix, and enhancement update

2022-12-16 00:00:00

osv

Moderate: nodejs:14 security update

2022-11-08 00:00:00

Moderate: nodejs:14 security update

2022-11-08 10:51:23

nodejs - security update

2022-06-27 00:00:00

redhat

(RHSA-2022:7830) Moderate: nodejs:14 security update

2022-11-08 10:51:23

(RHSA-2022:7044) Moderate: rh-nodejs14-nodejs security update

2022-10-19 09:58:44

(RHSA-2022:9073) Moderate: nodejs:16 security, bug fix, and enhancement update

2022-12-15 15:42:25

suse

Security update for nodejs12 (moderate)

2022-04-17 00:00:00

Security update for chromium (important)

2022-04-13 00:00:00

Security update for nodejs10 (important)

2022-05-17 00:00:00

debian

[SECURITY] [DSA 5170-1] nodejs security update

2022-06-27 18:43:09

[SECURITY] [DLA 3137-1] nodejs security update

2022-10-05 15:18:22

hackerone

Node.js: Node.js Certificate Verification Bypass via String Injection

2021-12-17 14:57:13

Node.js: Prototype pollution via console.table properties

2021-12-20 00:35:48

veracode

Improper Certificate Validation

2022-01-12 19:19:21

Improper Certificate Validation

2022-01-12 19:27:10

Arbitrary Code Execution

2022-01-12 19:19:15

ubuntucve

CVE-2021-44531

2022-02-24 00:00:00

CVE-2021-44533

2022-02-24 00:00:00

CVE-2021-44532

2022-02-24 00:00:00

prion

Design/Logic Flaw

2022-02-24 19:15:00

Code injection

2022-02-24 19:15:00

Design/Logic Flaw

2022-02-24 19:15:00

debiancve

CVE-2021-44531

2022-02-24 19:15:00

CVE-2021-44532

2022-02-24 19:15:00

CVE-2022-21824

2022-02-24 19:15:00

alpinelinux

CVE-2021-44533

2022-02-24 19:15:00

CVE-2021-44531

2022-02-24 19:15:00

CVE-2021-44532

2022-02-24 19:15:00

redhatcve

CVE-2021-44533

2022-01-14 20:45:33

CVE-2021-44531

2022-01-14 19:54:26

CVE-2022-21824

2022-01-14 20:45:44

cve

CVE-2021-4453

2022-02-25 19:40:14

CVE-2021-44532

2022-02-24 19:15:00

CVE-2021-44531

2022-02-24 19:15:00

cbl_mariner

CVE-2021-44531 affecting package nodejs 14.18.1-1

2022-03-19 16:40:55

CVE-2021-44531 affecting package nodejs 14.17.2-2

2022-04-09 06:52:23

CVE-2022-21824 affecting package nodejs 14.18.1-1

2022-03-19 16:40:55

K35802610 : Multiple MySQL vulnerabilities CVE-2022-21569, CVE-2022-21824, CVE-2022-22968, CVE-2022-27778

2022-09-06 00:00:00

oracle

Oracle Critical Patch Update Advisory - July 2022

2022-07-19 00:00:00

Oracle Critical Patch Update Advisory - April 2023

2023-04-18 00:00:00

Oracle Critical Patch Update Advisory - January 2023

2023-01-17 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.004 Low

EPSS

Percentile

74.7%

JSON

Related for FEDORA:2A1363108D8D