{"id":"CVE-2016-1000023","aliases":["EUVD-2016-1031","RHSA-2016:1582","RHSA-2016:1583","RHSA-2016:1605"],"status":"rejected","title":"Red Hat Security Advisory: nodejs010-nodejs-minimatch security update","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-10540. Reason: This candidate is a reservation duplicate of CVE-2016-10540. Notes: All CVE users should reference CVE-2016-10540 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","from":"osv"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2018-06-17T20:00:00Z","modified":"2026-06-29T10:13:17Z","fixes":[{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"nodejs010-nodejs-minimatch","fixed_in":["0:3.0.2-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"nodejs010-nodejs-minimatch","fixed_in":["0:3.0.2-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nodejs4-nodejs-minimatch","fixed_in":["0:3.0.2-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nodejs4-nodejs-minimatch","fixed_in":["0:3.0.2-1.el7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"nodejs010-nodejs-minimatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.2-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"nodejs010-nodejs-minimatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.2-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-nodejs4-nodejs-minimatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.2-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-nodejs4-nodejs-minimatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.2-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.1::el7","package":"nodejs-accepts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.1::el7","package":"nodejs-express","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.3-4.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.1::el7","package":"nodejs-mime-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23.0-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.1::el7","package":"nodejs-mime-types","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.11-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.1::el7","package":"nodejs-minimatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.2-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.1::el7","package":"nodejs-negotiator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"nodejs-accepts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"nodejs-express","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.3-4.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"nodejs-mime-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23.0-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"nodejs-mime-types","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.11-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"nodejs-minimatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.2-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"nodejs-negotiator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-1.el7"}]}],"bundled":2}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2016:1582","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348509","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1582.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000023","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000023","tags":["advisory"]},{"url":"https://nodesecurity.io/advisories/118","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1583","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1583.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1605","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347677","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1605.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000022","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000022","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000022","tags":["advisory"]},{"url":"https://nodesecurity.io/advisories/106","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2016-1000023","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-10540. Reason: This candidate is a reservation duplicate of CVE-2016-10540. Notes: All CVE users should reference CVE-2016-10540 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2018-06-17T20:00:00Z","modified":"2018-06-17T19:57:01Z","updated_at":"2026-11-02T14:33:36.802481Z"}],"euvd":[{"id":"EUVD-2016-1031","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-10540. Reason: This candidate is a reservation duplicate of CVE-2016-10540. Notes: All CVE users should reference CVE-2016-10540 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2018-06-17T20:00:00Z","modified":"2018-06-17T19:57:01Z","updated_at":"2026-11-03T03:51:40.165497Z"}],"nvd":[{"id":"CVE-2016-1000023","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-10540. Reason: This candidate is a reservation duplicate of CVE-2016-10540. Notes: All CVE users should reference CVE-2016-10540 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2018-06-17T20:29:00.26Z","modified":"2023-11-07T02:29:25.71Z","updated_at":"2026-11-02T14:03:39.621168Z"}],"osv":[{"id":"RHSA-2016:1582","title":"Red Hat Security Advisory: nodejs010-nodejs-minimatch security update","status":"published","published":"2024-09-13T12:27:53Z","modified":"2026-06-29T10:13:08Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1583","title":"Red Hat Security Advisory: rh-nodejs4-nodejs-minimatch security update","status":"published","published":"2024-09-13T12:27:58Z","modified":"2026-06-29T10:13:09Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1605","title":"Red Hat Security Advisory: Red Hat OpenShift Enterprise security update","status":"published","published":"2024-09-15T23:33:49Z","modified":"2026-06-29T10:13:17Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"}]}}