{"id":"CVE-2022-4904","aliases":["ALSA-2023:1582","ALSA-2023:1743","ALSA-2023:2654","ALSA-2023:2655","ALSA-2023:4035","ALSA-2023:6635","ALSA-2023:7116","AZL-13817","AZL-13827","AZL-13828","AZL-34775","AZL-43921","BELL-CVE-2022-4904","CLSA-2025-1744116893","CLSA-2026-1776431757","CLSA-2026-1776432133","CLSA-2026-1792443100","DEBIAN-CVE-2022-4904","DLA-3323-1","EUVD-2022-52159","GHSA-v7h6-g695-5j7q","MGASA-2023-0069","OESA-2023-1091","OESA-2023-1110","RHSA-2023:1533","RHSA-2023:1582","RHSA-2023:1742","RHSA-2023:1743","RHSA-2023:1744","RHSA-2023:2654","RHSA-2023:2655","RHSA-2023:4035","RHSA-2023:5533","RHSA-2023:6291","RHSA-2023:6635","RHSA-2023:7116","RHSA-2023:7368","RHSA-2023:7543","RLSA-2023:1582","RLSA-2023:1743","RLSA-2023:2654","RLSA-2023:2655","RLSA-2023:4035","SUSE-SU-2023:0486-1","SUSE-SU-2023:3420-1","UBUNTU-CVE-2022-4904","USN-5907-1","USN-8951-1","openSUSE-SU-2024:12674-1"],"status":"published","title":"A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the...","description":"A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01232,"percentile":0.69182,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-1284","CWE-20"],"published":"2023-02-15T00:00:00Z","modified":"2026-11-03T06:03:04Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"c-ares","fixed_in":["1.13.0-8.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"c-ares-devel","fixed_in":["1.13.0-8.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"c-ares","fixed_in":["1.19.0-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"nodejs","fixed_in":["16.20.1-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"python-gevent","fixed_in":["21.1.2-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"grpc","fixed_in":["1.62.0-2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"c-ares","fixed_in":["1.17.1-5.el9_2.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"c-ares-devel","fixed_in":["1.17.1-5.el9_2.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"c-ares","fixed_in":["1.10.0-3.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"c-ares-devel","fixed_in":["1.10.0-3.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"c-ares","fixed_in":["1.10.0-3.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"c-ares-devel","fixed_in":["1.10.0-3.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"c-ares","fixed_in":["1.10.0-3.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"c-ares-devel","fixed_in":["1.10.0-3.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"c-ares","fixed_in":["1.18.1-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"c-ares","fixed_in":["1.18.1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"c-ares","fixed_in":["1.18.1-2"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"c-ares","fixed_in":["1.14.0-1+deb10u2"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"c-ares","fixed_in":["1.17.1-1.2.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"c-ares","fixed_in":["1.16.1-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"c-ares","fixed_in":["1.16.1-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"c-ares","fixed_in":["1.18.1-4.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"c-ares","fixed_in":["1.18.1-4.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"c-ares-debuginfo","fixed_in":["0:1.17.1-5.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"c-ares-debugsource","fixed_in":["0:1.17.1-5.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"c-ares-devel","fixed_in":["0:1.17.1-5.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"c-ares","fixed_in":["0:1.17.1-5.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"c-ares-debuginfo","fixed_in":["0:1.17.1-5.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"c-ares-debugsource","fixed_in":["0:1.17.1-5.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"c-ares","fixed_in":["0:1.13.0-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"c-ares-debuginfo","fixed_in":["0:1.13.0-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"c-ares-debugsource","fixed_in":["0:1.13.0-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"c-ares-devel","fixed_in":["0:1.13.0-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"c-ares-debuginfo","fixed_in":["0:1.17.1-5.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"c-ares-debugsource","fixed_in":["0:1.17.1-5.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"c-ares-devel","fixed_in":["0:1.17.1-5.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"c-ares","fixed_in":["0:1.17.1-5.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"c-ares-debuginfo","fixed_in":["0:1.17.1-5.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"c-ares-debugsource","fixed_in":["0:1.17.1-5.el9_2.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"c-ares","fixed_in":["1.19.0-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libcares2","fixed_in":["1.9.1-9.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libcares2","fixed_in":["1.9.1-9.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libcares2","fixed_in":["1.9.1-9.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"libcares2","fixed_in":["1.9.1-9.15.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"c-ares","fixed_in":["1.10.0-3ubuntu0.2+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"c-ares","fixed_in":["1.14.0-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"c-ares","fixed_in":["1.15.0-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"c-ares","fixed_in":["1.18.1-1ubuntu0.22.04.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"c-ares","fixed_in":["1.19.0-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.module_el8.7.0+3496+a59a3324"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.module_el8.7.0+3496+a59a3324"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.module_el8.7.0+3496+a59a3324"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.module_el8.7.0+3496+a59a3324"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20-3.module_el8.7.0+3496+a59a3324"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25-1.module_el8.5.0+2605+45d748af"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.19.3-1.16.19.1.1.module_el8.7.0+3496+a59a3324"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module_el8.7.0+3551+53700ee8"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module_el8.7.0+3551+53700ee8"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module_el8.7.0+3551+53700ee8"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module_el8.7.0+3551+53700ee8"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20-3.module_el8.7.0+3551+53700ee8"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23-3.module_el8.4.0+2522+3bd42762"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.14.18-1.14.21.3.1.module_el8.7.0+3551+53700ee8"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-2.module_el9.2.0+29+de583a0b"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-2.module_el9.2.0+29+de583a0b"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-2.module_el9.2.0+29+de583a0b"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-2.module_el9.2.0+29+de583a0b"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20-2.module_el9.2.0+29+de583a0b"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.06-4.module_el9.1.0+13+d9a595ea"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-packaging-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.06-4.module_el9.1.0+13+d9a595ea"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.5.0-1.18.14.2.2.module_el9.2.0+29+de583a0b"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.el9_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.el9_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.el9_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.el9_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.19.3-1.16.19.1.1.el9_2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-3.module_el8.8.0+3587+ee652244"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-3.module_el8.8.0+3587+ee652244"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-3.module_el8.8.0+3587+ee652244"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-3.module_el8.8.0+3587+ee652244"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20-2.module_el8.8.0+3587+ee652244"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.06-4.module_el8.7.0+3343+ea2b7901"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-packaging-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.06-4.module_el8.7.0+3343+ea2b7901"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.5.0-1.18.14.2.3.module_el8.8.0+3587+ee652244"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.1-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"c-ares-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.1-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.0-8.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"c-ares-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.0-8.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.1-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.2-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"grpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.62.0-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"python-pycares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.1.1-3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.1-5.el9_2.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"c-ares-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.1-5.el9_2.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-3.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"c-ares-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-3.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-3.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"c-ares-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-3.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-3.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"c-ares-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-3.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-1+deb10u2"}]}],"versions":["1.14.0-1","1.14.0-1+deb10u1"]},{"source":"osv","ecosystem":"Mageia:8","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.1-1.2.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-4.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-4.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.4.0+18317+43f5ac16"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.4.0+18317+43f5ac16"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.4.0+18317+43f5ac16"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.4.0+18317+43f5ac16"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.4.0+18317+43f5ac16"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.4.0+18317+43f5ac16"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.20-3.module+el8.4.0+18317+43f5ac16"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23-3.module+el8.3.0+6519+9f98ed83"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.14.18-1.14.21.3.1.module+el8.4.0+18317+43f5ac16"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.module+el8.7.0+18373+704f5cef"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.module+el8.7.0+18373+704f5cef"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.module+el8.7.0+18373+704f5cef"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.module+el8.7.0+18373+704f5cef"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.module+el8.7.0+18373+704f5cef"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.module+el8.7.0+18373+704f5cef"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.20-3.module+el8.7.0+18373+704f5cef"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25-1.module+el8.5.0+10992+fac5fe06"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.19.3-1.16.19.1.1.module+el8.7.0+18373+704f5cef"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.6.0+18532+cbe6f646"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.6.0+18532+cbe6f646"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.6.0+18532+cbe6f646"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.6.0+18532+cbe6f646"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.6.0+18532+cbe6f646"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.6.0+18532+cbe6f646"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.20-3.module+el8.6.0+18532+cbe6f646"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23-3.module+el8.3.0+6519+9f98ed83"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.14.18-1.14.21.3.1.module+el8.6.0+18532+cbe6f646"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.7.0+18531+81d21ca6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.7.0+18531+81d21ca6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.7.0+18531+81d21ca6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.7.0+18531+81d21ca6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.7.0+18531+81d21ca6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.7.0+18531+81d21ca6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.20-3.module+el8.7.0+18531+81d21ca6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23-3.module+el8.3.0+6519+9f98ed83"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.14.18-1.14.21.3.1.module+el8.7.0+18531+81d21ca6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nodejs14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6-2.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nodejs14-nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:14.21.3-2.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nodejs14-nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:14.21.3-2.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nodejs14-nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:14.21.3-2.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nodejs14-nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:14.21.3-2.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nodejs14-nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:14.21.3-2.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nodejs14-npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.14.18-14.21.3.2.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nodejs14-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6-2.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-nodejs14-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6-2.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-2.module+el9.2.0.z+18497+a402347c"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-2.module+el9.2.0.z+18497+a402347c"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-2.module+el9.2.0.z+18497+a402347c"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-2.module+el9.2.0.z+18497+a402347c"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-2.module+el9.2.0.z+18497+a402347c"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-2.module+el9.2.0.z+18497+a402347c"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.20-2.module+el9.2.0.z+18497+a402347c"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.1.0+15718+e52ec601"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-packaging-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.1.0+15718+e52ec601"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.5.0-1.18.14.2.2.module+el9.2.0.z+18497+a402347c"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.20-3.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.19.3-1.16.19.1.1.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-3.module+el8.8.0+19021+4b8b11cc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-3.module+el8.8.0+19021+4b8b11cc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-3.module+el8.8.0+19021+4b8b11cc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-3.module+el8.8.0+19021+4b8b11cc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-3.module+el8.8.0+19021+4b8b11cc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-3.module+el8.8.0+19021+4b8b11cc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.20-2.module+el8.8.0+18432+27f188ac"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el8.7.0+15582+19c314fa"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-packaging-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el8.7.0+15582+19c314fa"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.5.0-1.18.14.2.3.module+el8.8.0+19021+4b8b11cc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-1.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-1.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-1.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-1.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-1.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"nodejs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-1.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"nodejs-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-1.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.19.4-1.16.20.2.1.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"c-ares-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.1-5.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"c-ares-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.1-5.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"c-ares-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.1-5.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.1-5.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"c-ares-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.1-5.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"c-ares-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.1-5.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"c-ares-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.1-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"c-ares-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.1-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"c-ares-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.1-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.1-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"c-ares-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.1-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"c-ares-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.1-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"c-ares-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"c-ares-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"c-ares-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"c-ares-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.1-5.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"c-ares-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.1-5.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"c-ares-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.1-5.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.1-5.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"c-ares-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.1-5.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"c-ares-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.1-5.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-6.el8_8.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"c-ares-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-6.el8_8.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"c-ares-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-6.el8_8.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"c-ares-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.0-6.el8_8.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.module+el8.7.0+1178+d52dba78"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.20-3.module+el8.7.0+1178+d52dba78"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25-1.module+el8.6.0+1046+80feca58"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.21.3-1.module+el8.7.0+1183+c2c35f0a"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.20-3.module+el8.7.0+1178+d52dba78"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23-3.module+el8.7.0+1071+4bdda2a8"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.7.0+40025+0e0cf6b2"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.7.0+40017+f0db1785"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.7.0+40018+a011993d"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.7.0+40022+9ecc286c"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.19.1-1.el9_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.20-3.el9_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.14.2-3.module+el8.8.0+1337+7ea46b57"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.20-2.module+el8.7.0+1177+510ae886"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el8.7.0+1072+5b168780"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libcares2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-9.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libcares2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-9.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libcares2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-9.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"libcares2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-9.15.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-3ubuntu0.2+esm4"}]}],"versions":["1.10.0-2","1.10.0-3","1.10.0-3ubuntu0.1","1.10.0-3ubuntu0.2","1.10.0-3ubuntu0.2+esm1","1.10.0-3ubuntu0.2+esm2","1.10.0-3ubuntu0.2+esm3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-1ubuntu0.2"}]}],"versions":["1.13.0-2","1.13.0-3","1.14.0-1","1.14.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-1ubuntu0.2"}]}],"versions":["1.15.0-1build1","1.15.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu0.22.04.1"}]}],"versions":["1.17.1-1ubuntu1","1.18.1-1","1.18.1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-1ubuntu0.2"}]}],"versions":["1.13.0-2","1.13.0-3","1.14.0-1","1.14.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-1ubuntu0.2"}]}],"versions":["1.15.0-1build1","1.15.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu0.22.04.1"}]}],"versions":["1.17.1-1ubuntu1","1.18.1-1","1.18.1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-3ubuntu0.2+esm4"}]}],"versions":["1.10.0-2","1.10.0-3","1.10.0-3ubuntu0.1","1.10.0-3ubuntu0.2","1.10.0-3ubuntu0.2+esm1","1.10.0-3ubuntu0.2+esm2","1.10.0-3ubuntu0.2+esm3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-1ubuntu0.2+esm3"}]}],"versions":["1.13.0-2","1.13.0-3","1.14.0-1","1.14.0-1ubuntu0.1","1.14.0-1ubuntu0.2","1.14.0-1ubuntu0.2+esm1","1.14.0-1ubuntu0.2+esm2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-1ubuntu0.5+esm1"}]}],"versions":["1.15.0-1build1","1.15.0-1ubuntu0.1","1.15.0-1ubuntu0.2","1.15.0-1ubuntu0.3","1.15.0-1ubuntu0.4","1.15.0-1ubuntu0.5"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu0.22.04.4"}]}],"versions":["1.17.1-1ubuntu1","1.18.1-1","1.18.1-1build1","1.18.1-1ubuntu0.22.04.1","1.18.1-1ubuntu0.22.04.2","1.18.1-1ubuntu0.22.04.3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.0-1.0ubuntu1.1"}]}],"versions":["1.19.1-3","1.20.1-1","1.26.0-1","1.27.0-1","1.27.0-1.0ubuntu1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.6-1ubuntu0.2"}]}],"versions":["1.34.5-1","1.34.6-1","1.34.6-1ubuntu0.1"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"c-ares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0-2.1"}]}]}],"products":[{"vendor":"c-ares","product":"c-ares"},{"vendor":"c-ares_project","product":"c-ares"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"software_collections"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168631","tags":["x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/c-ares/c-ares/issues/496","tags":["x_transferred","Exploit","Issue Tracking","report","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/202401-02","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4904","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2"},{"url":"https://github.com/advisories/GHSA-v7h6-g695-5j7q"},{"url":"https://access.redhat.com/errata/RHSA-2023:1582","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-35065","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25881","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4904","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-23918","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-23919","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-23920","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-23936","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24807","tags":["report"]},{"url":"https://bugzilla.redhat.com/2156324","tags":["report"]},{"url":"https://bugzilla.redhat.com/2165824","tags":["report"]},{"url":"https://bugzilla.redhat.com/2168631","tags":["report"]},{"url":"https://bugzilla.redhat.com/2171935","tags":["report"]},{"url":"https://bugzilla.redhat.com/2172170","tags":["report"]},{"url":"https://bugzilla.redhat.com/2172190","tags":["report"]},{"url":"https://bugzilla.redhat.com/2172204","tags":["report"]},{"url":"https://bugzilla.redhat.com/2172217","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-1582.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1743","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3517","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38900","tags":["report"]},{"url":"https://bugzilla.redhat.com/2134609","tags":["report"]},{"url":"https://bugzilla.redhat.com/2170644","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175826","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-1743.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2654","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2654.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2655","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2655.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4035","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-31124","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-31130","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-31147","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32067","tags":["report"]},{"url":"https://bugzilla.redhat.com/2209494","tags":["report"]},{"url":"https://bugzilla.redhat.com/2209497","tags":["report"]},{"url":"https://bugzilla.redhat.com/2209501","tags":["report"]},{"url":"https://bugzilla.redhat.com/2209502","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-4035.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6635","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6635.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7116","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-7116.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-4904","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1744116893.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1776431757.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1776432133.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792443100.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5180","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4904.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-4904","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0069.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31573","tags":["report"]},{"url":"https://www.debian.org/lts/security/2023/dla-3323","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1091","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1110","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1533","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2130518","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2142823","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2150323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165824","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2171935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175828","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1533.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-35065","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-35065","tags":["advisory"]},{"url":"https://security.snyk.io/vuln/SNYK-JS-GLOBPARENT-1314294","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44906","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44906","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44906","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xvch-5gv4-984h","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3517","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3517","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4904","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24999","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24999","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24999","tags":["advisory"]},{"url":"https://github.com/expressjs/express/releases/tag/4.17.3","tags":["article"]},{"url":"https://github.com/ljharb/qs/pull/428","tags":["article"]},{"url":"https://github.com/n8tz/CVE-2022-24999","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25881","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25881","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-35256","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-35256","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35256","tags":["advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2022-security-releases/#http-request-smuggling-due-to-incorrect-parsing-of-header-fields-medium-cve-2022-35256","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38900","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38900","tags":["advisory"]},{"url":"https://github.com/SamVerschueren/decode-uri-component/issues/5","tags":["article"]},{"url":"https://github.com/advisories/GHSA-w573-4hg7-7wgq","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-43548","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-43548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-43548","tags":["advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/#dns-rebinding-in-inspect-via-invalid-octal-ip-address-medium-cve-2022-43548","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-23918","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23918","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-23920","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23920","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172204","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178142","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1582.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-23919","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23919","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-23936","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23936","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24807","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24807","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1742","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040862","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044591","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2142822","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175827","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1742.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44531","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44531","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44531","tags":["advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44532","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44532","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44532","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44533","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44533","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44533","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0235","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0235","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0235","tags":["advisory"]},{"url":"https://huntr.dev/bounties/d26ab655-38d6-48b3-be15-f9ad6b6ae6f7/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21824","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21824","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175826","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1743.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1744","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153715","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1744.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178088","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2654.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178076","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2655.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209502","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4035.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-31124","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31124","tags":["advisory"]},{"url":"https://github.com/c-ares/c-ares/security/advisories/GHSA-54xr-f67r-4pc4","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-31130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31130","tags":["advisory"]},{"url":"https://github.com/c-ares/c-ares/security/advisories/GHSA-x6mf-cxr9-8q6v","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-31147","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31147","tags":["advisory"]},{"url":"https://github.com/c-ares/c-ares/security/advisories/GHSA-8r8p-23f3-64c2","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32067","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32067","tags":["advisory"]},{"url":"https://github.com/c-ares/c-ares/security/advisories/GHSA-9g78-jv2r-p7vc","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5533","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2219824","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2219838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2219841","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2219842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2223335","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2230948","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2230955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2230956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236435","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5533.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-30581","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-30581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-30581","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-30588","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-30588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-30588","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-30589","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-30589","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-30589","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-30590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-30590","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-30590","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32002","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32002","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32002","tags":["advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/august-2023-security-releases#permissions-policies-can-be-bypassed-via-module_load-highcve-2023-32002","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32006","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32006","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32006","tags":["advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/august-2023-security-releases#permissions-policies-can-impersonate-other-modules-in-using-moduleconstructorcreaterequire-mediumcve-2023-32006","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32559","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32559","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32559","tags":["advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/august-2023-security-releases#permissions-policies-can-be-bypassed-via-processbinding-mediumcve-2023-32559","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6291","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6291.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2210370","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6635.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7116.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7368","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7368.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7543","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7543.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:1582","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:1743","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:2654","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:2655","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:4035","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230486-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1208067","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4904","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233420-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-4904","tags":["report"]},{"url":"https://github.com/c-ares/c-ares/pull/497","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5907-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8951-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-22217","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-69184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-69186","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-4904","description":"A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.","status":"published","published":"2023-03-06T00:00:00Z","modified":"2025-12-02T20:25:58.78Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:34:37.599536Z"}],"euvd":[{"id":"EUVD-2022-52159","description":"A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.","status":"published","published":"2023-03-06T00:00:00Z","modified":"2025-12-02T20:25:58Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:10.716009Z"}],"ghsa":[{"id":"GHSA-v7h6-g695-5j7q","title":"A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the...","description":"A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.","status":"published","published":"2023-03-07T00:30:24Z","modified":"2025-12-02T21:32:33Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"cwes":["CWE-20","CWE-119","CWE-1284"],"updated_at":"2026-11-02T15:05:00.770101Z"}],"nvd":[{"id":"CVE-2022-4904","description":"A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.","status":"published","published":"2023-03-06T23:15:11.39Z","modified":"2026-06-17T05:22:15.58Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-20","CWE-1284"],"updated_at":"2026-11-02T14:07:36.601381Z"}],"osv":[{"id":"AZL-13817","title":"CVE-2022-4904 affecting package c-ares for versions less than 1.19.0-1","description":"A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.","status":"published","published":"2023-03-06T23:15:11Z","modified":"2026-04-21T04:23:01.749341Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"AZL-13827","title":"CVE-2022-4904 affecting package nodejs for versions less than 16.20.1-2","description":"A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.","status":"published","published":"2023-03-06T23:15:11Z","modified":"2026-04-21T04:23:02.120474Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"AZL-13828","title":"CVE-2022-4904 affecting package python-gevent for versions less than 21.1.2-3","description":"A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.","status":"published","published":"2023-03-06T23:15:11Z","modified":"2026-04-21T04:23:02.09253Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"AZL-34775","title":"CVE-2022-4904 affecting package grpc for versions less than 1.62.0-2","description":"A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.","status":"published","published":"2023-03-06T23:15:11Z","modified":"2026-04-21T04:54:43.436948Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"AZL-43921","title":"CVE-2022-4904 affecting package python-pycares 3.1.1-3","description":"A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.","status":"published","published":"2023-03-06T23:15:11Z","modified":"2026-04-21T04:31:13.042679Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"BELL-CVE-2022-4904","title":"CVE-2022-4904 does not affect BellSoft software","status":"withdrawn","published":"2023-03-06T23:15:00Z","modified":"2026-01-26T09:48:44.154909Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-4904","description":"A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.","status":"published","published":"2023-03-06T00:00:00Z","modified":"2026-10-28T02:30:41.550615904Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:44:28.090335Z"},{"id":"OESA-2023-1091","title":"c-ares security update","description":"This is c-ares, an asynchronous resolver library. It is intended for applications which need to perform DNS queries without blocking, or need to perform multiple\r\n\r\nSecurity Fix(es):\r\n\r\nIn ares_set_sortlist, it calls config_sortlist(..., sortstr) to parse the input str and initialize a sortlist configuration. However, ares_set_sortlist has not any checks about the validity of the input str. It is very easy to create an arbitrary length stack overflow with the unchecked memcpy(ipbuf, str, q-str); and memcpy(ipbufpfx, str, q-str); statements in the config_sortlist call, which could potentially cause severe security impact in practical programs.(CVE-2022-4904)","status":"published","published":"2023-02-17T11:05:34Z","modified":"2026-08-18T01:17:30.744147972Z","cvss":[{"version":"3.1","score":6.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1110","title":"c-ares security update","description":"\r\n\r\nSecurity Fix(es):\r\n\r\nIn ares_set_sortlist, it calls config_sortlist(..., sortstr) to parse the input str and initialize a sortlist configuration. However, ares_set_sortlist has not any checks about the validity of the input str. It is very easy to create an arbitrary length stack overflow with the unchecked memcpy(ipbuf, str, q-str); and memcpy(ipbufpfx, str, q-str); statements in the config_sortlist call, which could potentially cause severe security impact in practical programs.(CVE-2022-4904)","status":"published","published":"2023-02-21T11:05:35Z","modified":"2026-08-18T01:17:37.308014892Z","cvss":[{"version":"3.1","score":6.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:1533","title":"Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update","status":"published","published":"2024-10-22T00:34:37Z","modified":"2026-10-13T10:04:00Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1582","title":"Red Hat Security Advisory: nodejs:16 security, bug fix, and enhancement update","status":"published","published":"2024-10-22T00:35:12Z","modified":"2026-10-13T10:04:01Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1742","title":"Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update","status":"published","published":"2024-10-22T00:34:46Z","modified":"2026-10-16T10:02:02Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1743","title":"Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update","status":"published","published":"2024-10-22T00:35:06Z","modified":"2026-10-13T10:04:02Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1744","title":"Red Hat Security Advisory: rh-nodejs14-nodejs security, bug fix, and enhancement update","status":"published","published":"2024-09-30T14:43:51Z","modified":"2026-10-13T10:04:03Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2654","title":"Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update","status":"published","published":"2024-10-22T00:36:26Z","modified":"2026-10-13T10:04:11Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2655","title":"Red Hat Security Advisory: nodejs and nodejs-nodemon security, bug fix, and enhancement update","status":"published","published":"2024-09-29T23:58:08Z","modified":"2026-10-13T10:04:11Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:4035","title":"Red Hat Security Advisory: nodejs:18 security update","status":"published","published":"2024-09-13T21:14:08Z","modified":"2026-06-28T10:59:37Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:5533","title":"Red Hat Security Advisory: nodejs security, bug fix, and enhancement update","status":"published","published":"2024-09-29T23:58:35Z","modified":"2026-10-09T10:07:02Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6291","title":"Red Hat Security Advisory: c-ares security update","status":"published","published":"2024-09-13T21:16:19Z","modified":"2026-06-28T11:02:25Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6635","title":"Red Hat Security Advisory: c-ares security, bug fix, and enhancement update","status":"published","published":"2024-09-13T21:17:02Z","modified":"2026-06-28T11:02:43Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7116","title":"Red Hat Security Advisory: c-ares security update","status":"published","published":"2024-09-13T21:17:07Z","modified":"2026-06-28T11:03:11Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7368","title":"Red Hat Security Advisory: c-ares security update","status":"published","published":"2024-09-13T21:17:00Z","modified":"2026-06-28T11:03:17Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2023:7543","title":"Red Hat Security Advisory: c-ares security update","status":"published","published":"2024-09-13T21:17:34Z","modified":"2026-06-28T11:03:40Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RLSA-2023:2654","title":"Moderate: nodejs:18 security, bug fix, and enhancement update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version: nodejs (18.14.2).\n\nSecurity Fix(es):\n\n* glob-parent: Regular Expression Denial of Service (CVE-2021-35065)\n\n* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)\n\n* http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)\n\n* Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)\n\n* Node.js: OpenSSL error handling issues in nodejs crypto library (CVE-2023-23919)\n\n* Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)\n\n* Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)\n\n* Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-12-03T09:05:37.576021Z","modified":"2025-12-03T11:33:54.009749Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2023:4035","title":"Important: nodejs:18 security update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)\n\n* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)\n\n* c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)\n\n* c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147)\n\n* c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-08-31T16:54:34.048467Z","modified":"2026-02-05T02:30:09.946575Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2022-4904","description":"A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.","status":"published","published":"2023-02-15T00:00:00Z","modified":"2026-10-21T23:11:56.462243046Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"},{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:58.967204Z"},{"id":"ALSA-2023:1582","title":"Moderate: nodejs:16 security, bug fix, and enhancement update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version: nodejs (16.19.1).\n\nSecurity Fix(es):\n\n* glob-parent: Regular Expression Denial of Service (CVE-2021-35065)\n* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)\n* http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)\n* Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)\n* Node.js: OpenSSL error handling issues in nodejs crypto library (CVE-2023-23919)\n* Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)\n* Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)\n* Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-04-04T00:00:00Z","modified":"2026-10-29T11:02:03.175038174Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:1743","title":"Important: nodejs:14 security, bug fix, and enhancement update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version: nodejs (14.21.3).\n\nSecurity Fix(es):\n\n* decode-uri-component: improper input validation resulting in DoS (CVE-2022-38900)\n* glob-parent: Regular Expression Denial of Service (CVE-2021-35065)\n* nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517)\n* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)\n* http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)\n* Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)\n* Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-04-12T00:00:00Z","modified":"2026-10-29T11:01:36.448211693Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:2654","title":"Moderate: nodejs:18 security, bug fix, and enhancement update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version: nodejs (18.14.2).\n\nSecurity Fix(es):\n\n* glob-parent: Regular Expression Denial of Service (CVE-2021-35065)\n* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)\n* http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)\n* Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)\n* Node.js: OpenSSL error handling issues in nodejs crypto library (CVE-2023-23919)\n* Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)\n* Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)\n* Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:31:26.123864832Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:2655","title":"Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version: nodejs (16.19.1), nodejs-nodemon (2.0.20).\n\nSecurity Fix(es):\n\n* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)\n* http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)\n* Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)\n* Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)\n* Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)\n* Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:31:24.996241146Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:4035","title":"Important: nodejs:18 security update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)\n* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)\n* c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)\n* c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147)\n* c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-07-12T00:00:00Z","modified":"2026-10-29T11:02:09.088071075Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6635","title":"Moderate: c-ares security, bug fix, and enhancement update","description":"The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.\n\nThe following packages have been upgraded to a later upstream version: c-ares (1.19.1). (BZ#2210370)\n\nSecurity Fix(es):\n\n* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)\n* c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)\n* c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147)\n* c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:31:57.906958059Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:7116","title":"Moderate: c-ares security update","description":"The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.\n\nSecurity Fix(es):\n\n* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-14T00:00:00Z","modified":"2026-10-29T11:02:19.253278678Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2025-1744116893","title":"c-ares: Fix of CVE-2022-4904","description":"- CVE-2022-4904: fix missing checks in ares_set_sortlist to prevent possible\n  stack overflow","status":"published","published":"2025-04-08T12:54:58Z","modified":"2026-06-01T00:30:35.739945848Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2026-1776431757","title":"c-ares: Fix of CVE-2022-4904","description":"- CVE-2022-4904: fix stack overflow in ares_set_sortlist due\n  to missing input validation","status":"published","published":"2026-04-21T17:10:22Z","modified":"2026-06-01T00:33:18.35065175Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776432133","title":"c-ares: Fix of CVE-2022-4904","description":"- CVE-2022-4904: fix stack overflow in ares_set_sortlist due\n  to missing input validation","status":"published","published":"2026-04-17T13:22:18Z","modified":"2026-06-01T00:33:02.486753265Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1792443100","title":"c-ares: Fix of 2 CVEs","description":"- CVE-2022-4904: fix stack overflow in ares_set_sortlist due\n  to missing input validation","status":"published","published":"2026-10-19T20:51:52Z","modified":"2026-10-26T09:32:00.769643643Z","updated_at":"2026-11-02T15:43:54.378946Z"},{"id":"DEBIAN-CVE-2022-4904","description":"A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.","status":"published","published":"2023-03-06T23:15:11.39Z","modified":"2026-11-03T06:03:04.321956336Z","updated_at":"2026-11-03T06:43:01.507088Z"},{"id":"DLA-3323-1","title":"c-ares - security update","status":"published","published":"2023-02-18T00:00:00Z","modified":"2026-03-09T01:18:53.751682Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2023-0069","title":"Updated c-ares packages fix security vulnerability","description":"The config_sortlist function is missing checks about the validity of the\ninput string, which allows a possible arbitrary length stack overflow and\nthus may cause a denial of service. (CVE-2022-4904)\n","status":"published","published":"2023-02-27T20:27:16Z","modified":"2026-04-16T04:44:24.039750819Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12674-1","title":"c-ares-devel-1.19.0-2.1 on GA media","description":"These are all security issues fixed in the c-ares-devel-1.19.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:56:11.46573Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"RLSA-2023:1582","title":"Moderate: nodejs:16 security, bug fix, and enhancement update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version: nodejs (16.19.1).\n\nSecurity Fix(es):\n\n* glob-parent: Regular Expression Denial of Service (CVE-2021-35065)\n\n* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)\n\n* http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)\n\n* Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)\n\n* Node.js: OpenSSL error handling issues in nodejs crypto library (CVE-2023-23919)\n\n* Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)\n\n* Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)\n\n* Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-04-06T15:52:43.18089Z","modified":"2026-02-05T12:15:07.041362Z","updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2023:1743","title":"Important: nodejs:14 security, bug fix, and enhancement update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version: nodejs (14.21.3).\n\nSecurity Fix(es):\n\n* decode-uri-component: improper input validation resulting in DoS (CVE-2022-38900)\n\n* glob-parent: Regular Expression Denial of Service (CVE-2021-35065)\n\n* nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517)\n\n* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)\n\n* http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)\n\n* Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)\n\n* Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-04-26T15:28:13.052501Z","modified":"2026-02-04T19:30:16.769935Z","updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2023:2655","title":"Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version: nodejs (16.19.1), nodejs-nodemon (2.0.20).\n\nSecurity Fix(es):\n\n* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)\n\n* http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)\n\n* Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)\n\n* Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)\n\n* Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)\n\n* Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-05-25T19:53:09.847906Z","modified":"2026-02-04T07:40:22.276968Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2023:0486-1","title":"Security update for c-ares","description":"This update for c-ares fixes the following issues:\n\n  Updated to version 1.19.0:\n\n  - CVE-2022-4904: Fixed missing string length check in config_sortlist() (bsc#1208067).\n\n","status":"published","published":"2023-02-23T09:38:30Z","modified":"2026-02-04T02:35:25.975285Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:3420-1","title":"Security update for libcares2","description":"This update for libcares2 fixes the following issues:\n\n- CVE-2022-4904: Fixed stack overflow in ares_set_sortlist() (bsc#1208067).\n","status":"published","published":"2023-08-24T08:20:17Z","modified":"2026-02-04T02:54:42.549392Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"USN-5907-1","title":"c-ares vulnerability","description":"It was discovered that c-ares incorrectly handled certain sortlist strings.\nA remote attacker could use this issue to cause c-ares to crash, resulting\nin a denial of service, or possibly execute arbitrary code.\n","status":"published","published":"2023-03-02T12:48:30Z","modified":"2026-04-27T16:33:24.628542Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-8951-1","title":"c-ares vulnerabilities","description":"It was discovered that c-ares incorrectly parsed certain SOA replies. A\nremote attacker could possibly use this issue to cause c-ares to crash,\nresulting in a denial of service. This issue only affected Ubuntu 16.04 LTS\nand Ubuntu 18.04 LTS. (CVE-2020-22217)\n\nIt was discovered that c-ares incorrectly handled certain sortlist strings.\nA remote attacker could possibly use this issue to cause c-ares to crash,\nresulting in a denial of service, or execute arbitrary code. This issue\nonly affected Ubuntu 16.04 LTS. (CVE-2022-4904)\n\nIt was discovered that c-ares did not properly limit DNS compression\npointer hops or assembled name lengths when parsing DNS names. A remote\nattacker could possibly use this issue to cause c-ares to use excessive\nresources, resulting in a denial of service. (CVE-2026-69184)\n\nIt was discovered that c-ares did not properly validate record count fields\nbefore allocating memory when parsing DNS responses. A remote attacker\ncould possibly use this issue to cause c-ares to use excessive resources,\nresulting in a denial of service. This issue only affected Ubuntu 24.04 LTS\nand Ubuntu 26.04 LTS. (CVE-2026-69186)","status":"published","published":"2026-10-21T18:20:42Z","modified":"2026-10-22T04:42:58.035678055Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}