CVE-2022-38900
decode-uri-component vulnerable to Denial of Service (DoS)
7.5 HighFix available
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
23.6%Up 22.7 points since Nov 29, 2022
What each source reports
NVD Score used
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
- Record
CVE-2022-38900- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
- Record
CVE-2022-38900- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2022-7447
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
- Record
EUVD-2022-7447- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-w573-4hg7-7wgq
decode-uri-component vulnerable to Denial of Service (DoS)
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
- Record
GHSA-w573-4hg7-7wgq- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
OSVAZL-44976
CVE-2022-38900 affecting package js-jquery 3.5.0-4
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
- Record
AZL-44976- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-05
OSV
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
- Record
CVE-2022-38900- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 13 moreShow less
OSVGHSA-w573-4hg7-7wgq
decode-uri-component vulnerable to Denial of Service (DoS)
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
- Record
GHSA-w573-4hg7-7wgq- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
OSVRHSA-2023:1533
Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update
- Record
RHSA-2023:1533- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2023:1742
Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update
- Record
RHSA-2023:1742- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2023:1743
Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update
- Record
RHSA-2023:1743- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2023:1744
Red Hat Security Advisory: rh-nodejs14-nodejs security, bug fix, and enhancement update
- Record
RHSA-2023:1744- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2023:6316
Red Hat Security Advisory: pcs security, bug fix, and enhancement update
- Record
RHSA-2023:6316- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2023:1743 No score
Important: nodejs:14 security, bug fix, and enhancement update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
The following packages have been upgraded to a later upstream version: nodejs (14.21.3).
Security Fix(es):
- decode-uri-component: improper input validation resulting in DoS (CVE-2022-38900)
- glob-parent: Regular Expression Denial of Service (CVE-2021-35065)
- nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517)
- c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)
- http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)
- Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)
- Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:1743- Updated
- 2026-11-02
OSVALSA-2023:6316 No score
Low: pcs security, bug fix, and enhancement update
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
- decode-uri-component: improper input validation resulting in DoS (CVE-2022-38900)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2023:6316- Updated
- 2026-11-02
OSVCLSA-2026-1780620683 No score
TuxCare security update for decode-uri-component (1 CVE)
TuxCare rebuilt decode-uri-component to address 1 CVE. Fixed in 0.2.0-tuxcare.1.
- Record
CLSA-2026-1780620683- Updated
- 2026-11-02
OSVCLSA-2026-1790610952 No score
pcs: Fix of 7 CVEs
- CVE-2022-1049: fix pcsd PAM auth accepting expired accounts and passwords
- CVE-2022-38900: fix DoS in decode() of bundled decode-uri-component
- CVE-2022-45442: fix reflected file download in bundled sinatra attachment()
- CVE-2023-27530: fix multipart part count DoS in rack (via rack 2.2.20)
- CVE-2023-27539: fix ReDoS in rack header parsing (via rack 2.2.20)
- CVE-2024-52804: fix quadratic cookie parsing in bundled tornado
- CVE-2025-47287: fix multipart parser log flooding DoS in bundled tornado
- Record
CLSA-2026-1790610952- Updated
- 2026-11-02
OSVCLSA-2026-1790611274 No score
pcs: Fix of 7 CVEs
- CVE-2022-1049: fix pcsd PAM auth accepting expired accounts and passwords
- CVE-2022-38900: fix DoS in decode() of bundled decode-uri-component
- CVE-2022-45442: fix reflected file download in bundled sinatra attachment()
- CVE-2023-27530: fix multipart part count DoS in rack (via rack 2.2.20)
- CVE-2023-27539: fix ReDoS in rack header parsing (via rack 2.2.20)
- CVE-2024-52804: fix quadratic cookie parsing in bundled tornado
- CVE-2025-47287: fix multipart parser log flooding DoS in bundled tornado
- Record
CLSA-2026-1790611274- Updated
- 2026-11-02
OSVRLSA-2023:1743 No score
Important: nodejs:14 security, bug fix, and enhancement update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
The following packages have been upgraded to a later upstream version: nodejs (14.21.3).
Security Fix(es):
-
decode-uri-component: improper input validation resulting in DoS (CVE-2022-38900)
-
glob-parent: Regular Expression Denial of Service (CVE-2021-35065)
-
nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517)
-
c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)
-
http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)
-
Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)
-
Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2023:1743- Updated
- 2026-11-02
OSVROOT-APP-NPM-CVE-2022-38900 No score
CVE-2022-38900 in @rootio/decode-uri-component - Patched by Root
Root has patched CVE-2022-38900 in the @rootio/decode-uri-component package for Root:npm. Multiple fixed versions available.
- Record
ROOT-APP-NPM-CVE-2022-38900- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
decode-uri-componentnpm |
before 0.2.1 | 0.2.1 |
nodejsAlmaLinux:8 From an advisory covering 7 CVEs |
before 1:14.21.3-1.module_el8.7.0+3551+53700ee8 | 1:14.21.3-1.module_el8.7.0+3551+53700ee8 |
nodejs-develAlmaLinux:8 From an advisory covering 7 CVEs |
before 1:14.21.3-1.module_el8.7.0+3551+53700ee8 | 1:14.21.3-1.module_el8.7.0+3551+53700ee8 |
nodejs-docsAlmaLinux:8 From an advisory covering 7 CVEs |
before 1:14.21.3-1.module_el8.7.0+3551+53700ee8 | 1:14.21.3-1.module_el8.7.0+3551+53700ee8 |
nodejs-full-i18nAlmaLinux:8 From an advisory covering 7 CVEs |
before 1:14.21.3-1.module_el8.7.0+3551+53700ee8 | 1:14.21.3-1.module_el8.7.0+3551+53700ee8 |
nodejs-nodemonAlmaLinux:8 From an advisory covering 7 CVEs |
before 2.0.20-3.module_el8.7.0+3551+53700ee8 | 2.0.20-3.module_el8.7.0+3551+53700ee8 |
nodejs-packagingAlmaLinux:8 From an advisory covering 7 CVEs |
before 23-3.module_el8.4.0+2522+3bd42762 | 23-3.module_el8.4.0+2522+3bd42762 |
npmAlmaLinux:8 From an advisory covering 7 CVEs |
before 1:6.14.18-1.14.21.3.1.module_el8.7.0+3551+53700ee8 | 1:6.14.18-1.14.21.3.1.module_el8.7.0+3551+53700ee8 |
pcsAlmaLinux:9 |
before 0.11.6-3.el9 | 0.11.6-3.el9 |
pcs-snmpAlmaLinux:9 |
before 0.11.6-3.el9 | 0.11.6-3.el9 |
Show 51 moreShow less
| Package | Affected | Fixed |
|---|---|---|
js-jqueryAzure Linux:3 |
through 3.5.0-4 | None known |
decode-uri-componentTuxCare:npm |
0.2.0-tuxcare.0 up to 0.2.0-tuxcare.1, plus listed versions 0.2.0 |
0.2.0-tuxcare.1 |
pcsTuxCare:CentOS:8.4 From an advisory covering 7 CVEs |
before 0.10.8-1.el8.tuxcare.els2 | 0.10.8-1.el8.tuxcare.els2 |
pcs-snmpTuxCare:CentOS:8.4 From an advisory covering 7 CVEs |
before 0.10.8-1.el8.tuxcare.els2 | 0.10.8-1.el8.tuxcare.els2 |
pcsTuxCare:CentOS:8.5 From an advisory covering 7 CVEs |
before 0.10.8-1.el8.tuxcare.els2 | 0.10.8-1.el8.tuxcare.els2 |
pcs-snmpTuxCare:CentOS:8.5 From an advisory covering 7 CVEs |
before 0.10.8-1.el8.tuxcare.els2 | 0.10.8-1.el8.tuxcare.els2 |
nodejsRed Hat:rhel_eus:8.4::appstream From an advisory covering 11 CVEs |
before 1:14.21.3-1.module+el8.4.0+18317+43f5ac16 | 1:14.21.3-1.module+el8.4.0+18317+43f5ac16 |
nodejs-debuginfoRed Hat:rhel_eus:8.4::appstream From an advisory covering 11 CVEs |
before 1:14.21.3-1.module+el8.4.0+18317+43f5ac16 | 1:14.21.3-1.module+el8.4.0+18317+43f5ac16 |
nodejs-debugsourceRed Hat:rhel_eus:8.4::appstream From an advisory covering 11 CVEs |
before 1:14.21.3-1.module+el8.4.0+18317+43f5ac16 | 1:14.21.3-1.module+el8.4.0+18317+43f5ac16 |
nodejs-develRed Hat:rhel_eus:8.4::appstream From an advisory covering 11 CVEs |
before 1:14.21.3-1.module+el8.4.0+18317+43f5ac16 | 1:14.21.3-1.module+el8.4.0+18317+43f5ac16 |
nodejs-docsRed Hat:rhel_eus:8.4::appstream From an advisory covering 11 CVEs |
before 1:14.21.3-1.module+el8.4.0+18317+43f5ac16 | 1:14.21.3-1.module+el8.4.0+18317+43f5ac16 |
nodejs-full-i18nRed Hat:rhel_eus:8.4::appstream From an advisory covering 11 CVEs |
before 1:14.21.3-1.module+el8.4.0+18317+43f5ac16 | 1:14.21.3-1.module+el8.4.0+18317+43f5ac16 |
nodejs-nodemonRed Hat:rhel_eus:8.4::appstream From an advisory covering 11 CVEs |
before 0:2.0.20-3.module+el8.4.0+18317+43f5ac16 | 0:2.0.20-3.module+el8.4.0+18317+43f5ac16 |
nodejs-packagingRed Hat:rhel_eus:8.4::appstream From an advisory covering 11 CVEs |
before 0:23-3.module+el8.3.0+6519+9f98ed83 | 0:23-3.module+el8.3.0+6519+9f98ed83 |
npmRed Hat:rhel_eus:8.4::appstream From an advisory covering 11 CVEs |
before 1:6.14.18-1.14.21.3.1.module+el8.4.0+18317+43f5ac16 | 1:6.14.18-1.14.21.3.1.module+el8.4.0+18317+43f5ac16 |
nodejsRed Hat:rhel_eus:8.6::appstream From an advisory covering 16 CVEs |
before 1:14.21.3-1.module+el8.6.0+18532+cbe6f646 | 1:14.21.3-1.module+el8.6.0+18532+cbe6f646 |
nodejs-debuginfoRed Hat:rhel_eus:8.6::appstream From an advisory covering 16 CVEs |
before 1:14.21.3-1.module+el8.6.0+18532+cbe6f646 | 1:14.21.3-1.module+el8.6.0+18532+cbe6f646 |
nodejs-debugsourceRed Hat:rhel_eus:8.6::appstream From an advisory covering 16 CVEs |
before 1:14.21.3-1.module+el8.6.0+18532+cbe6f646 | 1:14.21.3-1.module+el8.6.0+18532+cbe6f646 |
nodejs-develRed Hat:rhel_eus:8.6::appstream From an advisory covering 16 CVEs |
before 1:14.21.3-1.module+el8.6.0+18532+cbe6f646 | 1:14.21.3-1.module+el8.6.0+18532+cbe6f646 |
nodejs-docsRed Hat:rhel_eus:8.6::appstream From an advisory covering 16 CVEs |
before 1:14.21.3-1.module+el8.6.0+18532+cbe6f646 | 1:14.21.3-1.module+el8.6.0+18532+cbe6f646 |
nodejs-full-i18nRed Hat:rhel_eus:8.6::appstream From an advisory covering 16 CVEs |
before 1:14.21.3-1.module+el8.6.0+18532+cbe6f646 | 1:14.21.3-1.module+el8.6.0+18532+cbe6f646 |
nodejs-nodemonRed Hat:rhel_eus:8.6::appstream From an advisory covering 16 CVEs |
before 0:2.0.20-3.module+el8.6.0+18532+cbe6f646 | 0:2.0.20-3.module+el8.6.0+18532+cbe6f646 |
nodejs-packagingRed Hat:rhel_eus:8.6::appstream From an advisory covering 16 CVEs |
before 0:23-3.module+el8.3.0+6519+9f98ed83 | 0:23-3.module+el8.3.0+6519+9f98ed83 |
npmRed Hat:rhel_eus:8.6::appstream From an advisory covering 16 CVEs |
before 1:6.14.18-1.14.21.3.1.module+el8.6.0+18532+cbe6f646 | 1:6.14.18-1.14.21.3.1.module+el8.6.0+18532+cbe6f646 |
nodejsRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:14.21.3-1.module+el8.7.0+18531+81d21ca6 | 1:14.21.3-1.module+el8.7.0+18531+81d21ca6 |
nodejs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:14.21.3-1.module+el8.7.0+18531+81d21ca6 | 1:14.21.3-1.module+el8.7.0+18531+81d21ca6 |
nodejs-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:14.21.3-1.module+el8.7.0+18531+81d21ca6 | 1:14.21.3-1.module+el8.7.0+18531+81d21ca6 |
nodejs-develRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:14.21.3-1.module+el8.7.0+18531+81d21ca6 | 1:14.21.3-1.module+el8.7.0+18531+81d21ca6 |
nodejs-docsRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:14.21.3-1.module+el8.7.0+18531+81d21ca6 | 1:14.21.3-1.module+el8.7.0+18531+81d21ca6 |
nodejs-full-i18nRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:14.21.3-1.module+el8.7.0+18531+81d21ca6 | 1:14.21.3-1.module+el8.7.0+18531+81d21ca6 |
nodejs-nodemonRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 0:2.0.20-3.module+el8.7.0+18531+81d21ca6 | 0:2.0.20-3.module+el8.7.0+18531+81d21ca6 |
nodejs-packagingRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 0:23-3.module+el8.3.0+6519+9f98ed83 | 0:23-3.module+el8.3.0+6519+9f98ed83 |
npmRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:6.14.18-1.14.21.3.1.module+el8.7.0+18531+81d21ca6 | 1:6.14.18-1.14.21.3.1.module+el8.7.0+18531+81d21ca6 |
rh-nodejs14Red Hat:rhel_software_collections:3::el7 From an advisory covering 5 CVEs |
before 0:3.6-2.el7 | 0:3.6-2.el7 |
rh-nodejs14-nodejsRed Hat:rhel_software_collections:3::el7 From an advisory covering 5 CVEs |
before 0:14.21.3-2.el7 | 0:14.21.3-2.el7 |
rh-nodejs14-nodejs-debuginfoRed Hat:rhel_software_collections:3::el7 From an advisory covering 5 CVEs |
before 0:14.21.3-2.el7 | 0:14.21.3-2.el7 |
rh-nodejs14-nodejs-develRed Hat:rhel_software_collections:3::el7 From an advisory covering 5 CVEs |
before 0:14.21.3-2.el7 | 0:14.21.3-2.el7 |
rh-nodejs14-nodejs-docsRed Hat:rhel_software_collections:3::el7 From an advisory covering 5 CVEs |
before 0:14.21.3-2.el7 | 0:14.21.3-2.el7 |
rh-nodejs14-nodejs-full-i18nRed Hat:rhel_software_collections:3::el7 From an advisory covering 5 CVEs |
before 0:14.21.3-2.el7 | 0:14.21.3-2.el7 |
rh-nodejs14-npmRed Hat:rhel_software_collections:3::el7 From an advisory covering 5 CVEs |
before 0:6.14.18-14.21.3.2.el7 | 0:6.14.18-14.21.3.2.el7 |
rh-nodejs14-runtimeRed Hat:rhel_software_collections:3::el7 From an advisory covering 5 CVEs |
before 0:3.6-2.el7 | 0:3.6-2.el7 |
rh-nodejs14-scldevelRed Hat:rhel_software_collections:3::el7 From an advisory covering 5 CVEs |
before 0:3.6-2.el7 | 0:3.6-2.el7 |
pcsRed Hat:enterprise_linux:9::highavailability |
before 0:0.11.6-3.el9 | 0:0.11.6-3.el9 |
pcs-snmpRed Hat:enterprise_linux:9::highavailability |
before 0:0.11.6-3.el9 | 0:0.11.6-3.el9 |
pcsRed Hat:enterprise_linux:9::resilientstorage |
before 0:0.11.6-3.el9 | 0:0.11.6-3.el9 |
pcs-snmpRed Hat:enterprise_linux:9::resilientstorage |
before 0:0.11.6-3.el9 | 0:0.11.6-3.el9 |
nodejsRocky Linux:8 From an advisory covering 7 CVEs |
before 1:14.21.3-1.module+el8.7.0+1183+c2c35f0a | 1:14.21.3-1.module+el8.7.0+1183+c2c35f0a |
nodejs-nodemonRocky Linux:8 From an advisory covering 7 CVEs |
before 0:2.0.20-3.module+el8.7.0+1178+d52dba78 | 0:2.0.20-3.module+el8.7.0+1178+d52dba78 |
nodejs-packagingRocky Linux:8 From an advisory covering 7 CVEs |
before 0:23-3.module+el8.7.0+1071+4bdda2a8 | 0:23-3.module+el8.7.0+1071+4bdda2a8 |
@rootio/decode-uri-componentRoot:npm |
before 0.2.0-root.io.1 | 0.2.0-root.io.10.2.0-root.io.2 |
decode-uri-componentRoot:npm |
before 0.2.0-aikido.2 | 0.2.0-aikido.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-38900 is a high vulnerability (CVSS 7.5) in Decode-uri-component Project Decode-uri-component, published November 28, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 23.6%, the 97th percentile. Fixed in decode-uri-component 0.2.1.
References
github.com/SamVerschueren/decode-uri-component/issues/5
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KAC5KQ2SEWAMQ6UZAUBZ5KXKEOESH375
Show 141 moreShow less
nvd.nist.gov/vuln/detail/CVE-2022-38900
access.redhat.com/errata/RHSA-2023:1743
bugzilla.redhat.com/2134609
errata.almalinux.org/8/ALSA-2023-1743.html
errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1790610952.html
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1533.json
cve.org/CVERecord?id=CVE-2021-35065
security.snyk.io/vuln/SNYK-JS-GLOBPARENT-1314294
nodejs.org/en/blog/vulnerability/september-2022-security-releases
huntr.dev/bounties/d26ab655-38d6-48b3-be15-f9ad6b6ae6f7
errata.rockylinux.org/RLSA-2023:1743