Every CVE Search/ Get API key

CVE-2021-22930

Use After Free in node.js

9.8 CriticalFix available

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

36.5%Up 35.9 points since Oct 8, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

Record
CVE-2021-22930
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-416
Updated
2026-11-02
CVE List No score

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

Record
CVE-2021-22930
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2021-10059 No score

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

Record
EUVD-2021-10059
Updated
2026-11-02
GitHub AdvisoriesGHSA-gqhp-5j32-xwmm 9.8

Use After Free in node.js

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

Record
GHSA-gqhp-5j32-xwmm
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVALPINE-CVE-2021-22930 9.8

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

Record
ALPINE-CVE-2021-22930
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVAZL-6742 9.8

CVE-2021-22930 affecting package nodejs for versions less than 16.14.0-1

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

Record
AZL-6742
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 37 moreShow less
OSVBELL-CVE-2021-22930 9.8

CVE-2021-22930 does not affect BellSoft software

Record
BELL-CVE-2021-22930
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

Record
CVE-2021-22930
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-22930 9.8

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

Record
DEBIAN-CVE-2021-22930
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2021-1409 7.5

nodejs security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices.

Security Fix(es):

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.(CVE-2021-22930)

Record
OESA-2021-1409
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2021:3280 9.8

Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update

Record
RHSA-2021:3280
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3281 9.8

Red Hat Security Advisory: rh-nodejs12-nodejs and rh-nodejs12-nodejs-nodemon security update

Record
RHSA-2021:3281
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3623 9.8

Red Hat Security Advisory: nodejs:12 security and bug fix update

Record
RHSA-2021:3623
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3638 9.8

Red Hat Security Advisory: nodejs:12 security and bug fix update

Record
RHSA-2021:3638
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3639 9.8

Red Hat Security Advisory: nodejs:12 security and bug fix update

Record
RHSA-2021:3639
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3666 9.8

Red Hat Security Advisory: nodejs:14 security and bug fix update

Record
RHSA-2021:3666
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2021:3623 9.8

Important: nodejs:12 security and bug fix update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • nodejs: Use-after-free on close http2 on stream canceling (CVE-2021-22930)

  • nodejs: Use-after-free on close http2 on stream canceling (CVE-2021-22940)

  • c-ares: Missing input validation of host names may lead to domain hijacking (CVE-2021-3672)

  • nodejs: Improper handling of untypical characters in domain names (CVE-2021-22931)

  • nodejs-tar: Insufficient symlink protection allowing arbitrary file creation and overwrite (CVE-2021-32803)

  • nodejs-tar: Insufficient absolute path sanitization allowing arbitrary file creation and overwrite (CVE-2021-32804)

  • nodejs: Incomplete validation of tls rejectUnauthorized parameter (CVE-2021-22939)

  • nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe (CVE-2021-23343)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • nodejs:12/nodejs: Make FIPS options always available (BZ#1993927)
Record
RLSA-2021:3623
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2021:3666 9.8

Important: nodejs:14 security and bug fix update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • nodejs: Use-after-free on close http2 on stream canceling (CVE-2021-22930)

  • nodejs: Use-after-free on close http2 on stream canceling (CVE-2021-22940)

  • c-ares: Missing input validation of host names may lead to domain hijacking (CVE-2021-3672)

  • nodejs: Improper handling of untypical characters in domain names (CVE-2021-22931)

  • nodejs-tar: Insufficient symlink protection allowing arbitrary file creation and overwrite (CVE-2021-32803)

  • nodejs-tar: Insufficient absolute path sanitization allowing arbitrary file creation and overwrite (CVE-2021-32804)

  • nodejs: Incomplete validation of tls rejectUnauthorized parameter (CVE-2021-22939)

  • nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe (CVE-2021-23343)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • nodejs:14/nodejs: Make FIPS options always available (BZ#1993924)
Record
RLSA-2021:3666
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-22930 9.8

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

Record
UBUNTU-CVE-2021-22930
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2021:3623 No score

Important: nodejs:12 security and bug fix update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • nodejs: Use-after-free on close http2 on stream canceling (CVE-2021-22930)

  • nodejs: Use-after-free on close http2 on stream canceling (CVE-2021-22940)

  • c-ares: Missing input validation of host names may lead to domain hijacking (CVE-2021-3672)

  • nodejs: Improper handling of untypical characters in domain names (CVE-2021-22931)

  • nodejs-tar: Insufficient symlink protection allowing arbitrary file creation and overwrite (CVE-2021-32803)

  • nodejs-tar: Insufficient absolute path sanitization allowing arbitrary file creation and overwrite (CVE-2021-32804)

  • nodejs: Incomplete validation of tls rejectUnauthorized parameter (CVE-2021-22939)

  • nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe (CVE-2021-23343)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • nodejs:12/nodejs: Make FIPS options always available (BZ#1993927)
Record
ALSA-2021:3623
Updated
2026-11-02
OSVALSA-2021:3666 No score

Important: nodejs:14 security and bug fix update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • nodejs: Use-after-free on close http2 on stream canceling (CVE-2021-22930)

  • nodejs: Use-after-free on close http2 on stream canceling (CVE-2021-22940)

  • c-ares: Missing input validation of host names may lead to domain hijacking (CVE-2021-3672)

  • nodejs: Improper handling of untypical characters in domain names (CVE-2021-22931)

  • nodejs-tar: Insufficient symlink protection allowing arbitrary file creation and overwrite (CVE-2021-32803)

  • nodejs-tar: Insufficient absolute path sanitization allowing arbitrary file creation and overwrite (CVE-2021-32804)

  • nodejs: Incomplete validation of tls rejectUnauthorized parameter (CVE-2021-22939)

  • nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe (CVE-2021-23343)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • nodejs:14/nodejs: Make FIPS options always available (BZ#1993924)
Record
ALSA-2021:3666
Updated
2026-11-02
OSVBIT-node-2021-22930 No score

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

Record
BIT-node-2021-22930
Updated
2026-11-02
OSVBIT-node-min-2021-22930 No score

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

Record
BIT-node-min-2021-22930
Updated
2026-11-02
OSVMGASA-2021-0394 No score

Updated nodejs packages fix security vulnerability

Updated nodejs packages fix security vulnerability:

Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior (CVE-2021-22930)

Record
MGASA-2021-0394
Updated
2026-11-02
OSVopenSUSE-SU-2021:1214-1 No score

Security update for nodejs12

This update for nodejs12 fixes the following issues:

Update to 12.22.5:

  • CVE-2021-3672/CVE-2021-22931: Improper handling of untypical characters in domain names (bsc#1189370, bsc#1188881)
  • CVE-2021-22940: Use after free on close http2 on stream canceling (bsc#1189368)
  • CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (bsc#1189369)
  • CVE-2021-22930: http2: fixes use after free on close http2 on stream canceling (bsc#1188917)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:1214-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:1239-1 No score

Security update for nodejs10

This update for nodejs10 fixes the following issues:

  • CVE-2021-3672: Fixed missing input validation on hostnames (bsc#1188881).
  • CVE-2021-22930: Fixed use after free on close http2 on stream canceling (bsc#1188917).
  • CVE-2021-22939: Fixed incomplete validation of rejectUnauthorized parameter (bsc#1189369).
  • CVE-2021-22931: Fixed improper handling of untypical characters in domain names (bsc#1189370).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2021:1239-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:1313-1 No score

Security update for nodejs14

This update for nodejs14 fixes the following issues:

  • CVE-2021-3672: Fixed missing input validation on hostnames (bsc#1188881).
  • CVE-2021-22931: Fixed improper handling of untypical characters in domain names (bsc#1189370).
  • CVE-2021-22940: Use after free on close http2 on stream canceling (bsc#1189368)
  • CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (bsc#1189369)
  • CVE-2021-22930: Fixed use after free on close http2 on stream canceling (bsc#1188917).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:1313-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:1343-1 No score

Security update for nodejs8

nodejs8 was updated to fix the following security issues:

  • CVE-2021-22930: http2: fixes use after free on close in stream canceling (bsc#1188917)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:1343-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:2875-1 No score

Security update for nodejs12

This update for nodejs12 fixes the following issues:

Update to 12.22.5:

  • CVE-2021-3672/CVE-2021-22931: Improper handling of untypical characters in domain names (bsc#1189370, bsc#1188881)
  • CVE-2021-22940: Use after free on close http2 on stream canceling (bsc#1189368)
  • CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (bsc#1189369)
  • CVE-2021-22930: http2: fixes use after free on close http2 on stream canceling (bsc#1188917)
Record
openSUSE-SU-2021:2875-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:2953-1 No score

Security update for nodejs10

This update for nodejs10 fixes the following issues:

  • CVE-2021-3672: Fixed missing input validation on hostnames (bsc#1188881).
  • CVE-2021-22930: Fixed use after free on close http2 on stream canceling (bsc#1188917).
  • CVE-2021-22939: Fixed incomplete validation of rejectUnauthorized parameter (bsc#1189369).
  • CVE-2021-22931: Fixed improper handling of untypical characters in domain names (bsc#1189370).
Record
openSUSE-SU-2021:2953-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:3211-1 No score

Security update for nodejs14

This update for nodejs14 fixes the following issues:

  • CVE-2021-3672: Fixed missing input validation on hostnames (bsc#1188881).
  • CVE-2021-22931: Fixed improper handling of untypical characters in domain names (bsc#1189370).
  • CVE-2021-22940: Use after free on close http2 on stream canceling (bsc#1189368)
  • CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (bsc#1189369)
  • CVE-2021-22930: Fixed use after free on close http2 on stream canceling (bsc#1188917).
Record
openSUSE-SU-2021:3211-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:3294-1 No score

Security update for nodejs8

nodejs8 was updated to fix the following security issues:

  • CVE-2021-22930: http2: fixes use after free on close in stream canceling (bsc#1188917)
Record
openSUSE-SU-2021:3294-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11096-1 No score

nodejs14-14.17.5-1.2 on GA media

These are all security issues fixed in the nodejs14-14.17.5-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11096-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11097-1 No score

nodejs16-16.6.2-2.2 on GA media

These are all security issues fixed in the nodejs16-16.6.2-2.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11097-1
Updated
2026-11-02
OSVSUSE-SU-2021:2790-1 No score

Security update for nodejs8

This update for nodejs8 fixes the following issues:

  • CVE-2021-22930: http2: fixes use after free on close in stream canceling (bsc#1188917).
Record
SUSE-SU-2021:2790-1
Updated
2026-11-02
OSVSUSE-SU-2021:2823-1 No score

Security update for nodejs10

This update for nodejs10 fixes the following issues:

  • CVE-2021-3672: Fixed missing input validation on hostnames (bsc#1188881).
  • CVE-2021-22930: Fixed use after free on close http2 on stream canceling (bsc#1188917).
  • CVE-2021-22939: Fixed incomplete validation of rejectUnauthorized parameter (bsc#1189369).
  • CVE-2021-22931: Fixed improper handling of untypical characters in domain names (bsc#1189370).
Record
SUSE-SU-2021:2823-1
Updated
2026-11-02
OSVSUSE-SU-2021:2824-1 No score

Security update for nodejs12

This update for nodejs12 fixes the following issues:

Update to 12.22.5:

  • CVE-2021-3672/CVE-2021-22931: Improper handling of untypical characters in domain names (bsc#1189370, bsc#1188881)
  • CVE-2021-22940: Use after free on close http2 on stream canceling (bsc#1189368)
  • CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (bsc#1189369)
  • CVE-2021-22930: http2: fixes use after free on close http2 on stream canceling (bsc#1188917)
Record
SUSE-SU-2021:2824-1
Updated
2026-11-02
OSVSUSE-SU-2021:2875-1 No score

Security update for nodejs12

This update for nodejs12 fixes the following issues:

Update to 12.22.5:

  • CVE-2021-3672/CVE-2021-22931: Improper handling of untypical characters in domain names (bsc#1189370, bsc#1188881)
  • CVE-2021-22940: Use after free on close http2 on stream canceling (bsc#1189368)
  • CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (bsc#1189369)
  • CVE-2021-22930: http2: fixes use after free on close http2 on stream canceling (bsc#1188917)
Record
SUSE-SU-2021:2875-1
Updated
2026-11-02
OSVSUSE-SU-2021:2953-1 No score

Security update for nodejs10

This update for nodejs10 fixes the following issues:

  • CVE-2021-3672: Fixed missing input validation on hostnames (bsc#1188881).
  • CVE-2021-22930: Fixed use after free on close http2 on stream canceling (bsc#1188917).
  • CVE-2021-22939: Fixed incomplete validation of rejectUnauthorized parameter (bsc#1189369).
  • CVE-2021-22931: Fixed improper handling of untypical characters in domain names (bsc#1189370).
Record
SUSE-SU-2021:2953-1
Updated
2026-11-02
OSVSUSE-SU-2021:3184-1 No score

Security update for nodejs14

This update for nodejs14 fixes the following issues:

  • CVE-2021-3672: Fixed missing input validation on hostnames (bsc#1188881).
  • CVE-2021-22931: Fixed improper handling of untypical characters in domain names (bsc#1189370).
  • CVE-2021-22940: Use after free on close http2 on stream canceling (bsc#1189368)
  • CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (bsc#1189369)
  • CVE-2021-22930: Fixed use after free on close http2 on stream canceling (bsc#1188917).
Record
SUSE-SU-2021:3184-1
Updated
2026-11-02
OSVSUSE-SU-2021:3211-1 No score

Security update for nodejs14

This update for nodejs14 fixes the following issues:

  • CVE-2021-3672: Fixed missing input validation on hostnames (bsc#1188881).
  • CVE-2021-22931: Fixed improper handling of untypical characters in domain names (bsc#1189370).
  • CVE-2021-22940: Use after free on close http2 on stream canceling (bsc#1189368)
  • CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (bsc#1189369)
  • CVE-2021-22930: Fixed use after free on close http2 on stream canceling (bsc#1188917).
Record
SUSE-SU-2021:3211-1
Updated
2026-11-02
OSVSUSE-SU-2021:3294-1 No score

Security update for nodejs8

nodejs8 was updated to fix the following security issues:

  • CVE-2021-22930: http2: fixes use after free on close in stream canceling (bsc#1188917)
Record
SUSE-SU-2021:3294-1
Updated
2026-11-02
OSVSUSE-SU-2022:2855-1 No score

Security update for nodejs10

This update for nodejs10 fixes the following issues:

  • CVE-2021-22930, CVE-2021-22940: Fixed two memory corruption issues during HTTP/2 stream cancellation (bsc#1188917, bsc#1189368).
  • CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2021-22960, CVE-2021-22959: Fixed multiple HTTP request smuggling issues in the underlying HTTP parser (bsc#1201325, bsc#1201326, bsc#1201327, bsc#1191602, bsc#1191601).
  • CVE-2022-32212: Fixed a DNS rebinding issue caused by improper IPv4 validation (bsc#1201328).
Record
SUSE-SU-2022:2855-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nodejs
Alpine:v3.11
 before 12.22.4-r0
12.22.4-r0
nodejs
Alpine:v3.12
 before 12.22.4-r0
12.22.4-r0
nodejs
Alpine:v3.13
 before 14.17.4-r0
14.17.4-r0
nodejs
Alpine:v3.14
 before 14.17.4-r0
14.17.4-r0
nodejs
Alpine:v3.15
 before 14.17.4-r0
14.17.4-r0
nodejs
Alpine:v3.16
 before 14.17.4-r0
14.17.4-r0
nodejs
Alpine:v3.17
 before 14.17.4-r0
14.17.4-r0
nodejs
Alpine:v3.18
 before 14.17.4-r0
14.17.4-r0
nodejs
Alpine:v3.19
 before 14.17.4-r0
14.17.4-r0
nodejs
Alpine:v3.20
 before 14.17.4-r0
14.17.4-r0
Show 151 moreShow less
Affected packages
PackageAffectedFixed
nodejs
Alpine:v3.21
 before 14.17.4-r0
14.17.4-r0
nodejs
Alpine:v3.22
 before 14.17.4-r0
14.17.4-r0
nodejs
Alpine:v3.23
 before 14.17.4-r0
14.17.4-r0
nodejs
Alpine:v3.24
 before 14.17.4-r0
14.17.4-r0
nodejs-current
Alpine:v3.14
 before 16.6.0-r0
16.6.0-r0
nodejs-current
Alpine:v3.15
 before 16.6.0-r0
16.6.0-r0
nodejs-current
Alpine:v3.16
 before 16.6.0-r0
16.6.0-r0
nodejs-current
Alpine:v3.17
 before 16.6.0-r0
16.6.0-r0
nodejs-current
Alpine:v3.18
 before 16.6.0-r0
16.6.0-r0
nodejs-current
Alpine:v3.19
 before 16.6.0-r0
16.6.0-r0
nodejs-current
Alpine:v3.20
 before 16.6.0-r0
16.6.0-r0
nodejs-current
Alpine:v3.21
 before 16.6.0-r0
16.6.0-r0
nodejs-current
Alpine:v3.22
 before 16.6.0-r0
16.6.0-r0
nodejs-current
Alpine:v3.23
 before 16.6.0-r0
16.6.0-r0
nodejs-current
Alpine:v3.24
 before 16.6.0-r0
16.6.0-r0
nodejs
AlmaLinux:8
 before 1:12.22.5-1.module_el8.4.0+2529+af52a4c7
1:12.22.5-1.module_el8.4.0+2529+af52a4c7
nodejs
AlmaLinux:8
 before 1:12.22.5-1.module_el8.5.0+85+79a7b441
1:12.22.5-1.module_el8.5.0+85+79a7b441
nodejs-devel
AlmaLinux:8
 before 1:12.22.5-1.module_el8.5.0+85+79a7b441
1:12.22.5-1.module_el8.5.0+85+79a7b441
nodejs-devel
AlmaLinux:8
 before 1:12.22.5-1.module_el8.4.0+2529+af52a4c7
1:12.22.5-1.module_el8.4.0+2529+af52a4c7
nodejs-docs
AlmaLinux:8
 before 1:12.22.5-1.module_el8.4.0+2529+af52a4c7
1:12.22.5-1.module_el8.4.0+2529+af52a4c7
nodejs-full-i18n
AlmaLinux:8
 before 1:12.22.5-1.module_el8.5.0+85+79a7b441
1:12.22.5-1.module_el8.5.0+85+79a7b441
nodejs-full-i18n
AlmaLinux:8
 before 1:12.22.5-1.module_el8.4.0+2529+af52a4c7
1:12.22.5-1.module_el8.4.0+2529+af52a4c7
nodejs-nodemon
AlmaLinux:8
 before 2.0.3-1.module_el8.4.0+2521+c668cc9f
2.0.3-1.module_el8.4.0+2521+c668cc9f
nodejs-packaging
AlmaLinux:8
 before 17-3.module_el8.4.0+2224+b07ac28e
17-3.module_el8.4.0+2224+b07ac28e
nodejs-packaging
AlmaLinux:8
 before 17-3.module_el8.4.0+2521+c668cc9f
17-3.module_el8.4.0+2521+c668cc9f
nodejs-packaging
AlmaLinux:8
 before 17-3.module_el8.3.0+2023+d2377ea3
17-3.module_el8.3.0+2023+d2377ea3
npm
AlmaLinux:8
 before 1:6.14.14-1.12.22.5.1.module_el8.4.0+2529+af52a4c7
1:6.14.14-1.12.22.5.1.module_el8.4.0+2529+af52a4c7
npm
AlmaLinux:8
 before 1:6.14.14-1.12.22.5.1.module_el8.5.0+85+79a7b441
1:6.14.14-1.12.22.5.1.module_el8.5.0+85+79a7b441
nodejs-packaging
AlmaLinux:8
 before 23-3.module_el8.5.0+254+b4526b16
23-3.module_el8.5.0+254+b4526b16
nodejs-packaging
AlmaLinux:8
 before 23-3.module_el8.4.0+2522+3bd42762
23-3.module_el8.4.0+2522+3bd42762
nodejs
Azure Linux:2
 before 16.14.0-1
16.14.0-1
node
Bitnami
 12.0.0 up to 12.22.4, 14.0.0 up to 14.17.4, 16.0.0 up to 16.6.0
12.22.414.17.416.6.0
node-min
Bitnami
 12.0.0 up to 12.22.4, 14.0.0 up to 14.17.4, 16.0.0 up to 16.6.0
12.22.414.17.416.6.0
nodejs
Debian:12
 before 12.22.4~dfsg-1
12.22.4~dfsg-1
nodejs
Debian:13
 before 12.22.4~dfsg-1
12.22.4~dfsg-1
nodejs
Debian:14
 before 12.22.4~dfsg-1
12.22.4~dfsg-1
nodejs
Debian:10
 before 10.24.0~dfsg-1~deb10u2, plus listed versions
10.15.2~dfsg-210.15.3~dfsg-110.16.3~dfsg-110.17.0~dfsg-110.17.0~dfsg-2
Show 10 moreShow less
10.19.0~dfsg-110.19.0~dfsg-210.19.0~dfsg-310.19.0~dfsg1-110.20.0~dfsg-110.20.1~dfsg-110.21.0~dfsg-110.21.0~dfsg-1~deb10u110.23.1~dfsg-1~deb10u110.24.0~dfsg-1~deb10u1
10.24.0~dfsg-1~deb10u2
nodejs
Mageia:8
 before 14.17.4-1.mga8
14.17.4-1.mga8
nodejs
openEuler:20.03-LTS-SP1
 before 10.21.0-10.oe1
10.21.0-10.oe1
nodejs
openEuler:20.03-LTS-SP2
 before 10.21.0-9.oe1
10.21.0-9.oe1
rh-nodejs14-nodejs-nodemon
Red Hat:rhel_software_collections:3::el7
 before 0:2.0.3-5.el7
0:2.0.3-5.el7
rh-nodejs14-nodejs
Red Hat:rhel_software_collections:3::el7
 before 0:14.17.5-1.el7
0:14.17.5-1.el7
rh-nodejs14-nodejs-debuginfo
Red Hat:rhel_software_collections:3::el7
 before 0:14.17.5-1.el7
0:14.17.5-1.el7
rh-nodejs14-nodejs-devel
Red Hat:rhel_software_collections:3::el7
 before 0:14.17.5-1.el7
0:14.17.5-1.el7
rh-nodejs14-nodejs-docs
Red Hat:rhel_software_collections:3::el7
 before 0:14.17.5-1.el7
0:14.17.5-1.el7
rh-nodejs14-npm
Red Hat:rhel_software_collections:3::el7
 before 0:6.14.14-14.17.5.1.el7
0:6.14.14-14.17.5.1.el7
rh-nodejs12-nodejs
Red Hat:rhel_software_collections:3::el7
 before 0:12.22.5-1.el7
0:12.22.5-1.el7
rh-nodejs12-nodejs-debuginfo
Red Hat:rhel_software_collections:3::el7
 before 0:12.22.5-1.el7
0:12.22.5-1.el7
rh-nodejs12-nodejs-devel
Red Hat:rhel_software_collections:3::el7
 before 0:12.22.5-1.el7
0:12.22.5-1.el7
rh-nodejs12-nodejs-docs
Red Hat:rhel_software_collections:3::el7
 before 0:12.22.5-1.el7
0:12.22.5-1.el7
rh-nodejs12-nodejs-nodemon
Red Hat:rhel_software_collections:3::el7
 before 0:2.0.3-5.el7
0:2.0.3-5.el7
rh-nodejs12-npm
Red Hat:rhel_software_collections:3::el7
 before 0:6.14.14-12.22.5.1.el7
0:6.14.14-12.22.5.1.el7
nodejs
Red Hat:enterprise_linux:8::appstream
 before 1:12.22.5-1.module+el8.4.0+12242+af52a4c7
1:12.22.5-1.module+el8.4.0+12242+af52a4c7
nodejs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 1:12.22.5-1.module+el8.4.0+12242+af52a4c7
1:12.22.5-1.module+el8.4.0+12242+af52a4c7
nodejs-debugsource
Red Hat:enterprise_linux:8::appstream
 before 1:12.22.5-1.module+el8.4.0+12242+af52a4c7
1:12.22.5-1.module+el8.4.0+12242+af52a4c7
nodejs-devel
Red Hat:enterprise_linux:8::appstream
 before 1:12.22.5-1.module+el8.4.0+12242+af52a4c7
1:12.22.5-1.module+el8.4.0+12242+af52a4c7
nodejs-docs
Red Hat:enterprise_linux:8::appstream
 before 1:12.22.5-1.module+el8.4.0+12242+af52a4c7
1:12.22.5-1.module+el8.4.0+12242+af52a4c7
nodejs-full-i18n
Red Hat:enterprise_linux:8::appstream
 before 1:12.22.5-1.module+el8.4.0+12242+af52a4c7
1:12.22.5-1.module+el8.4.0+12242+af52a4c7
nodejs-nodemon
Red Hat:enterprise_linux:8::appstream
 before 0:2.0.3-1.module+el8.4.0+11732+c668cc9f
0:2.0.3-1.module+el8.4.0+11732+c668cc9f
nodejs-packaging
Red Hat:enterprise_linux:8::appstream
 before 0:17-3.module+el8.1.0+3369+37ae6a45
0:17-3.module+el8.1.0+3369+37ae6a45
npm
Red Hat:enterprise_linux:8::appstream
 before 1:6.14.14-1.12.22.5.1.module+el8.4.0+12242+af52a4c7
1:6.14.14-1.12.22.5.1.module+el8.4.0+12242+af52a4c7
nodejs
Red Hat:rhel_eus:8.2::appstream
 before 1:12.22.5-1.module+el8.2.0+12241+a3db445b
1:12.22.5-1.module+el8.2.0+12241+a3db445b
nodejs-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 1:12.22.5-1.module+el8.2.0+12241+a3db445b
1:12.22.5-1.module+el8.2.0+12241+a3db445b
nodejs-debugsource
Red Hat:rhel_eus:8.2::appstream
 before 1:12.22.5-1.module+el8.2.0+12241+a3db445b
1:12.22.5-1.module+el8.2.0+12241+a3db445b
nodejs-devel
Red Hat:rhel_eus:8.2::appstream
 before 1:12.22.5-1.module+el8.2.0+12241+a3db445b
1:12.22.5-1.module+el8.2.0+12241+a3db445b
nodejs-docs
Red Hat:rhel_eus:8.2::appstream
 before 1:12.22.5-1.module+el8.2.0+12241+a3db445b
1:12.22.5-1.module+el8.2.0+12241+a3db445b
nodejs-full-i18n
Red Hat:rhel_eus:8.2::appstream
 before 1:12.22.5-1.module+el8.2.0+12241+a3db445b
1:12.22.5-1.module+el8.2.0+12241+a3db445b
nodejs-nodemon
Red Hat:rhel_eus:8.2::appstream
 before 0:1.18.3-1.module+el8.1.0+3369+37ae6a45
0:1.18.3-1.module+el8.1.0+3369+37ae6a45
nodejs-packaging
Red Hat:rhel_eus:8.2::appstream
 before 0:17-3.module+el8.1.0+3369+37ae6a45
0:17-3.module+el8.1.0+3369+37ae6a45
npm
Red Hat:rhel_eus:8.2::appstream
 before 1:6.14.14-1.12.22.5.1.module+el8.2.0+12241+a3db445b
1:6.14.14-1.12.22.5.1.module+el8.2.0+12241+a3db445b
nodejs
Red Hat:rhel_eus:8.1::appstream
 before 1:12.22.5-1.module+el8.1.0+12238+63fe3aec
1:12.22.5-1.module+el8.1.0+12238+63fe3aec
nodejs-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 1:12.22.5-1.module+el8.1.0+12238+63fe3aec
1:12.22.5-1.module+el8.1.0+12238+63fe3aec
nodejs-debugsource
Red Hat:rhel_eus:8.1::appstream
 before 1:12.22.5-1.module+el8.1.0+12238+63fe3aec
1:12.22.5-1.module+el8.1.0+12238+63fe3aec
nodejs-devel
Red Hat:rhel_eus:8.1::appstream
 before 1:12.22.5-1.module+el8.1.0+12238+63fe3aec
1:12.22.5-1.module+el8.1.0+12238+63fe3aec
nodejs-docs
Red Hat:rhel_eus:8.1::appstream
 before 1:12.22.5-1.module+el8.1.0+12238+63fe3aec
1:12.22.5-1.module+el8.1.0+12238+63fe3aec
nodejs-full-i18n
Red Hat:rhel_eus:8.1::appstream
 before 1:12.22.5-1.module+el8.1.0+12238+63fe3aec
1:12.22.5-1.module+el8.1.0+12238+63fe3aec
nodejs-nodemon
Red Hat:rhel_eus:8.1::appstream
 before 0:1.18.3-1.module+el8.1.0+3369+37ae6a45
0:1.18.3-1.module+el8.1.0+3369+37ae6a45
nodejs-packaging
Red Hat:rhel_eus:8.1::appstream
 before 0:17-3.module+el8.1.0+3369+37ae6a45
0:17-3.module+el8.1.0+3369+37ae6a45
npm
Red Hat:rhel_eus:8.1::appstream
 before 1:6.14.14-1.12.22.5.1.module+el8.1.0+12238+63fe3aec
1:6.14.14-1.12.22.5.1.module+el8.1.0+12238+63fe3aec
nodejs
Red Hat:enterprise_linux:8::appstream
 before 1:14.17.5-1.module+el8.4.0+12247+e2879e58
1:14.17.5-1.module+el8.4.0+12247+e2879e58
nodejs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 1:14.17.5-1.module+el8.4.0+12247+e2879e58
1:14.17.5-1.module+el8.4.0+12247+e2879e58
nodejs-debugsource
Red Hat:enterprise_linux:8::appstream
 before 1:14.17.5-1.module+el8.4.0+12247+e2879e58
1:14.17.5-1.module+el8.4.0+12247+e2879e58
nodejs-devel
Red Hat:enterprise_linux:8::appstream
 before 1:14.17.5-1.module+el8.4.0+12247+e2879e58
1:14.17.5-1.module+el8.4.0+12247+e2879e58
nodejs-docs
Red Hat:enterprise_linux:8::appstream
 before 1:14.17.5-1.module+el8.4.0+12247+e2879e58
1:14.17.5-1.module+el8.4.0+12247+e2879e58
nodejs-full-i18n
Red Hat:enterprise_linux:8::appstream
 before 1:14.17.5-1.module+el8.4.0+12247+e2879e58
1:14.17.5-1.module+el8.4.0+12247+e2879e58
nodejs-nodemon
Red Hat:enterprise_linux:8::appstream
 before 0:2.0.3-1.module+el8.3.0+6519+9f98ed83
0:2.0.3-1.module+el8.3.0+6519+9f98ed83
nodejs-packaging
Red Hat:enterprise_linux:8::appstream
 before 0:23-3.module+el8.3.0+6519+9f98ed83
0:23-3.module+el8.3.0+6519+9f98ed83
npm
Red Hat:enterprise_linux:8::appstream
 before 1:6.14.14-1.14.17.5.1.module+el8.4.0+12247+e2879e58
1:6.14.14-1.14.17.5.1.module+el8.4.0+12247+e2879e58
nodejs
Rocky Linux:8
 before 1:12.22.5-1.module+el8.4.0+647+e905fa21
1:12.22.5-1.module+el8.4.0+647+e905fa21
nodejs-nodemon
Rocky Linux:8
 before 0:2.0.3-1.module+el8.6.0+982+9fdca2d4
0:2.0.3-1.module+el8.6.0+982+9fdca2d4
nodejs-nodemon
Rocky Linux:8
 before 0:2.0.3-1.module+el8.3.0+100+234774f7
0:2.0.3-1.module+el8.3.0+100+234774f7
nodejs-nodemon
Rocky Linux:8
 before 0:2.0.3-1.module+el8.4.0+638+5344c6f7
0:2.0.3-1.module+el8.4.0+638+5344c6f7
nodejs-packaging
Rocky Linux:8
 before 0:17-3.module+el8.3.0+101+f84c7154
0:17-3.module+el8.3.0+101+f84c7154
nodejs
Rocky Linux:8
 before 1:14.17.5-1.module+el8.4.0+654+17ff1d38
1:14.17.5-1.module+el8.4.0+654+17ff1d38
nodejs-packaging
Rocky Linux:8
 before 0:23-3.module+el8.7.0+1071+4bdda2a8
0:23-3.module+el8.7.0+1071+4bdda2a8
nodejs-packaging
Rocky Linux:8
 before 0:23-3.module+el8.3.0+100+234774f7
0:23-3.module+el8.3.0+100+234774f7
nodejs-packaging
Rocky Linux:8
 before 0:23-3.module+el8.5.0+733+de4fee6c
0:23-3.module+el8.5.0+733+de4fee6c
nodejs8
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 8.17.0-3.50.1
8.17.0-3.50.1
nodejs8
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 8.17.0-3.50.1
8.17.0-3.50.1
nodejs8
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 8.17.0-3.50.1
8.17.0-3.50.1
nodejs8
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 8.17.0-3.50.1
8.17.0-3.50.1
nodejs8
SUSE:Linux Enterprise Server 15-LTSS
 before 8.17.0-3.50.1
8.17.0-3.50.1
nodejs8
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 8.17.0-3.50.1
8.17.0-3.50.1
nodejs8
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 8.17.0-3.50.1
8.17.0-3.50.1
nodejs8
SUSE:Linux Enterprise Server for SAP Applications 15
 before 8.17.0-3.50.1
8.17.0-3.50.1
nodejs8
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 8.17.0-3.50.1
8.17.0-3.50.1
nodejs8
SUSE:Manager Proxy 4.0
 before 8.17.0-3.50.1
8.17.0-3.50.1
nodejs8
SUSE:Manager Retail Branch Server 4.0
 before 8.17.0-3.50.1
8.17.0-3.50.1
nodejs8
SUSE:Manager Server 4.0
 before 8.17.0-3.50.1
8.17.0-3.50.1
nodejs8
SUSE:Enterprise Storage 6
 before 8.17.0-3.50.1
8.17.0-3.50.1
nodejs10
SUSE:Linux Enterprise Module for Web and Scripting 12
 before 10.24.1-1.42.2
10.24.1-1.42.2
nodejs12
SUSE:Linux Enterprise Module for Web and Scripting 12
 before 12.22.5-1.35.1
12.22.5-1.35.1
nodejs12
SUSE:Linux Enterprise Module for Web and Scripting 15 SP2
 before 12.22.5-4.19.1
12.22.5-4.19.1
nodejs12
SUSE:Linux Enterprise Module for Web and Scripting 15 SP3
 before 12.22.5-4.19.1
12.22.5-4.19.1
nodejs10
SUSE:Linux Enterprise Module for Web and Scripting 15 SP2
 before 10.24.1-1.39.2
10.24.1-1.39.2
nodejs14
SUSE:Linux Enterprise Module for Web and Scripting 12
 before 14.17.5-6.15.3
14.17.5-6.15.3
nodejs14
SUSE:Linux Enterprise Module for Web and Scripting 15 SP2
 before 14.17.5-5.15.5
14.17.5-5.15.5
nodejs14
SUSE:Linux Enterprise Module for Web and Scripting 15 SP3
 before 14.17.5-5.15.5
14.17.5-5.15.5
nodejs8
SUSE:Linux Enterprise Module for Web and Scripting 15 SP2
 before 8.17.0-10.15.11
8.17.0-10.15.11
nodejs10
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Linux Enterprise Server 15-LTSS
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Linux Enterprise Server 15 SP2-BCL
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Linux Enterprise Server for SAP Applications 15
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Manager Proxy 4.1
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Manager Retail Branch Server 4.1
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Manager Server 4.1
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Enterprise Storage 6
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
SUSE:Enterprise Storage 7
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
openSUSE:Leap 15.3
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs10
openSUSE:Leap 15.4
 before 10.24.1-150000.1.47.1
10.24.1-150000.1.47.1
nodejs
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
12.22.5~dfsg-5ubuntu112.22.7~dfsg-2ubuntu112.22.7~dfsg-2ubuntu312.22.9~dfsg-1ubuntu212.22.9~dfsg-1ubuntu3
Show 7 moreShow less
12.22.9~dfsg-1ubuntu3.112.22.9~dfsg-1ubuntu3.212.22.9~dfsg-1ubuntu3.312.22.9~dfsg-1ubuntu3.412.22.9~dfsg-1ubuntu3.512.22.9~dfsg-1ubuntu3.612.22.9~dfsg-1ubuntu3.6+esm2
 None known
nodejs12
openSUSE:Leap 15.2
 before 12.22.5-lp152.3.18.1
12.22.5-lp152.3.18.1
nodejs10
openSUSE:Leap 15.2
 before 10.24.1-lp152.2.18.1
10.24.1-lp152.2.18.1
nodejs14
openSUSE:Leap 15.2
 before 14.17.5-lp152.14.1
14.17.5-lp152.14.1
nodejs8
openSUSE:Leap 15.2
 before 8.17.0-lp152.3.17.1
8.17.0-lp152.3.17.1
nodejs12
openSUSE:Leap 15.3
 before 12.22.5-4.19.1
12.22.5-4.19.1
nodejs10
openSUSE:Leap 15.3
 before 10.24.1-1.39.2
10.24.1-1.39.2
nodejs14
openSUSE:Leap 15.3
 before 14.17.5-5.15.5
14.17.5-5.15.5
nodejs8
openSUSE:Leap 15.3
 before 8.17.0-10.15.11
8.17.0-10.15.11
nodejs14
openSUSE:Tumbleweed
 before 14.17.5-1.2
14.17.5-1.2
nodejs16
openSUSE:Tumbleweed
 before 16.6.2-2.2
16.6.2-2.2

History

History
RecordedChangedSources
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-22930 is a critical vulnerability (CVSS 9.8) in Nodejs Node, published August 6, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 36.5%, the 98th percentile. Fixed in nodejs 12.22.4-r0.

References

Show 161 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open