Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.REDHAT-RHSA-2023-1743.NASL
HistoryApr 12, 2023 - 12:00 a.m.

RHEL 8 : nodejs:14 (RHSA-2023:1743)

2023-04-1200:00:00
This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
16
rhel 8
vulnerabilities
redos
privilege escalation
untrusted search path
security advisory
node.js
package
dos
input validation
stack overflow
cve-2023-23918
cve-2023-23920

AI Score

8.1

Confidence

Low

EPSS

0.004

Percentile

73.3%

JSON

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1743 advisory.

  • The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression. (CVE-2021-35065)

  • This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library. (CVE-2022-25881)

  • A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service. (CVE-2022-3517)

  • decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. (CVE-2022-38900)

  • A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity. (CVE-2022-4904)

  • A privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3 that made it possible to bypass the experimental Permissions (https://nodejs.org/api/permissions.html) feature in Node.js and access non authorized modules by using process.mainModule.require(). This only affects users who had enabled the experimental permissions option with --experimental-policy. (CVE-2023-23918)

  • An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges.
    (CVE-2023-23920)

Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Red Hat Security Advisory RHSA-2023:1743. The text
# itself is copyright (C) Red Hat, Inc.
##

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(174181);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/01/26");

  script_cve_id(
    "CVE-2021-35065",
    "CVE-2022-3517",
    "CVE-2022-4904",
    "CVE-2022-25881",
    "CVE-2022-38900",
    "CVE-2023-23918",
    "CVE-2023-23920"
  );
  script_xref(name:"RHSA", value:"2023:1743");

  script_name(english:"RHEL 8 : nodejs:14 (RHSA-2023:1743)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Red Hat host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as
referenced in the RHSA-2023:1743 advisory.

  - The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service)
    attacks against the enclosure regular expression. (CVE-2021-35065)

  - This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via
    malicious request header values sent to a server, when that server reads the cache policy from the request
    using this library. (CVE-2022-25881)

  - A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of
    Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of
    Service. (CVE-2022-3517)

  - decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. (CVE-2022-38900)

  - A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the
    input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of
    service or a limited impact on confidentiality and integrity. (CVE-2022-4904)

  - A privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3 that made
    it possible to bypass the experimental Permissions (https://nodejs.org/api/permissions.html) feature in
    Node.js and access non authorized modules by using process.mainModule.require(). This only affects users
    who had enabled the experimental permissions option with --experimental-policy. (CVE-2023-23918)

  - An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21.3 that
    could allow an attacker to search and potentially load ICU data when running with elevated privileges.
    (CVE-2023-23920)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2021-35065");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2022-3517");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2022-4904");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2022-25881");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2022-38900");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2023-23918");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2023-23920");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/errata/RHSA-2023:1743");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2022-4904");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_cwe_id(20, 119, 400, 426, 863, 1333);
  script_set_attribute(attribute:"vendor_severity", value:"Important");

  script_set_attribute(attribute:"vuln_publication_date", value:"2022/10/17");
  script_set_attribute(attribute:"patch_publication_date", value:"2023/04/12");
  script_set_attribute(attribute:"plugin_publication_date", value:"2023/04/12");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:rhel_aus:8.8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:rhel_e4s:8.8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:rhel_eus:8.8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:rhel_tus:8.8");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:nodejs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:nodejs-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:nodejs-docs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:nodejs-full-i18n");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:nodejs-nodemon");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:nodejs-packaging");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:npm");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Red Hat Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl", "redhat_repos.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");

  exit(0);
}


include('rpm.inc');
include('rhel.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/RedHat/release');
if (isnull(os_release) || 'Red Hat' >!< os_release) audit(AUDIT_OS_NOT, 'Red Hat');
var os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:os_release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, 'Red Hat');
os_ver = os_ver[1];
if (!rhel_check_release(operator: 'ge', os_version: os_ver, rhel_version: '8')) audit(AUDIT_OS_NOT, 'Red Hat 8.x', 'Red Hat ' + os_ver);

if (!get_kb_item('Host/RedHat/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu && 'ppc' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Red Hat', cpu);

var appstreams = {
  'nodejs:14': [
    {
      'repo_relative_urls': [
        'content/dist/rhel8/8.6/aarch64/appstream/debug',
        'content/dist/rhel8/8.6/aarch64/appstream/os',
        'content/dist/rhel8/8.6/aarch64/appstream/source/SRPMS',
        'content/dist/rhel8/8.6/aarch64/baseos/debug',
        'content/dist/rhel8/8.6/aarch64/baseos/os',
        'content/dist/rhel8/8.6/aarch64/baseos/source/SRPMS',
        'content/dist/rhel8/8.6/aarch64/codeready-builder/debug',
        'content/dist/rhel8/8.6/aarch64/codeready-builder/os',
        'content/dist/rhel8/8.6/aarch64/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8.6/aarch64/highavailability/debug',
        'content/dist/rhel8/8.6/aarch64/highavailability/os',
        'content/dist/rhel8/8.6/aarch64/highavailability/source/SRPMS',
        'content/dist/rhel8/8.6/aarch64/supplementary/debug',
        'content/dist/rhel8/8.6/aarch64/supplementary/os',
        'content/dist/rhel8/8.6/aarch64/supplementary/source/SRPMS',
        'content/dist/rhel8/8.6/ppc64le/appstream/debug',
        'content/dist/rhel8/8.6/ppc64le/appstream/os',
        'content/dist/rhel8/8.6/ppc64le/appstream/source/SRPMS',
        'content/dist/rhel8/8.6/ppc64le/baseos/debug',
        'content/dist/rhel8/8.6/ppc64le/baseos/os',
        'content/dist/rhel8/8.6/ppc64le/baseos/source/SRPMS',
        'content/dist/rhel8/8.6/ppc64le/codeready-builder/debug',
        'content/dist/rhel8/8.6/ppc64le/codeready-builder/os',
        'content/dist/rhel8/8.6/ppc64le/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8.6/ppc64le/highavailability/debug',
        'content/dist/rhel8/8.6/ppc64le/highavailability/os',
        'content/dist/rhel8/8.6/ppc64le/highavailability/source/SRPMS',
        'content/dist/rhel8/8.6/ppc64le/resilientstorage/debug',
        'content/dist/rhel8/8.6/ppc64le/resilientstorage/os',
        'content/dist/rhel8/8.6/ppc64le/resilientstorage/source/SRPMS',
        'content/dist/rhel8/8.6/ppc64le/sap-solutions/debug',
        'content/dist/rhel8/8.6/ppc64le/sap-solutions/os',
        'content/dist/rhel8/8.6/ppc64le/sap-solutions/source/SRPMS',
        'content/dist/rhel8/8.6/ppc64le/sap/debug',
        'content/dist/rhel8/8.6/ppc64le/sap/os',
        'content/dist/rhel8/8.6/ppc64le/sap/source/SRPMS',
        'content/dist/rhel8/8.6/ppc64le/supplementary/debug',
        'content/dist/rhel8/8.6/ppc64le/supplementary/os',
        'content/dist/rhel8/8.6/ppc64le/supplementary/source/SRPMS',
        'content/dist/rhel8/8.6/s390x/appstream/debug',
        'content/dist/rhel8/8.6/s390x/appstream/os',
        'content/dist/rhel8/8.6/s390x/appstream/source/SRPMS',
        'content/dist/rhel8/8.6/s390x/baseos/debug',
        'content/dist/rhel8/8.6/s390x/baseos/os',
        'content/dist/rhel8/8.6/s390x/baseos/source/SRPMS',
        'content/dist/rhel8/8.6/s390x/codeready-builder/debug',
        'content/dist/rhel8/8.6/s390x/codeready-builder/os',
        'content/dist/rhel8/8.6/s390x/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8.6/s390x/highavailability/debug',
        'content/dist/rhel8/8.6/s390x/highavailability/os',
        'content/dist/rhel8/8.6/s390x/highavailability/source/SRPMS',
        'content/dist/rhel8/8.6/s390x/resilientstorage/debug',
        'content/dist/rhel8/8.6/s390x/resilientstorage/os',
        'content/dist/rhel8/8.6/s390x/resilientstorage/source/SRPMS',
        'content/dist/rhel8/8.6/s390x/sap/debug',
        'content/dist/rhel8/8.6/s390x/sap/os',
        'content/dist/rhel8/8.6/s390x/sap/source/SRPMS',
        'content/dist/rhel8/8.6/s390x/supplementary/debug',
        'content/dist/rhel8/8.6/s390x/supplementary/os',
        'content/dist/rhel8/8.6/s390x/supplementary/source/SRPMS',
        'content/dist/rhel8/8.6/x86_64/appstream/debug',
        'content/dist/rhel8/8.6/x86_64/appstream/os',
        'content/dist/rhel8/8.6/x86_64/appstream/source/SRPMS',
        'content/dist/rhel8/8.6/x86_64/baseos/debug',
        'content/dist/rhel8/8.6/x86_64/baseos/os',
        'content/dist/rhel8/8.6/x86_64/baseos/source/SRPMS',
        'content/dist/rhel8/8.6/x86_64/codeready-builder/debug',
        'content/dist/rhel8/8.6/x86_64/codeready-builder/os',
        'content/dist/rhel8/8.6/x86_64/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8.6/x86_64/highavailability/debug',
        'content/dist/rhel8/8.6/x86_64/highavailability/os',
        'content/dist/rhel8/8.6/x86_64/highavailability/source/SRPMS',
        'content/dist/rhel8/8.6/x86_64/nfv/debug',
        'content/dist/rhel8/8.6/x86_64/nfv/os',
        'content/dist/rhel8/8.6/x86_64/nfv/source/SRPMS',
        'content/dist/rhel8/8.6/x86_64/resilientstorage/debug',
        'content/dist/rhel8/8.6/x86_64/resilientstorage/os',
        'content/dist/rhel8/8.6/x86_64/resilientstorage/source/SRPMS',
        'content/dist/rhel8/8.6/x86_64/rt/debug',
        'content/dist/rhel8/8.6/x86_64/rt/os',
        'content/dist/rhel8/8.6/x86_64/rt/source/SRPMS',
        'content/dist/rhel8/8.6/x86_64/sap-solutions/debug',
        'content/dist/rhel8/8.6/x86_64/sap-solutions/os',
        'content/dist/rhel8/8.6/x86_64/sap-solutions/source/SRPMS',
        'content/dist/rhel8/8.6/x86_64/sap/debug',
        'content/dist/rhel8/8.6/x86_64/sap/os',
        'content/dist/rhel8/8.6/x86_64/sap/source/SRPMS',
        'content/dist/rhel8/8.6/x86_64/supplementary/debug',
        'content/dist/rhel8/8.6/x86_64/supplementary/os',
        'content/dist/rhel8/8.6/x86_64/supplementary/source/SRPMS',
        'content/dist/rhel8/8.8/aarch64/appstream/debug',
        'content/dist/rhel8/8.8/aarch64/appstream/os',
        'content/dist/rhel8/8.8/aarch64/appstream/source/SRPMS',
        'content/dist/rhel8/8.8/aarch64/baseos/debug',
        'content/dist/rhel8/8.8/aarch64/baseos/os',
        'content/dist/rhel8/8.8/aarch64/baseos/source/SRPMS',
        'content/dist/rhel8/8.8/aarch64/codeready-builder/debug',
        'content/dist/rhel8/8.8/aarch64/codeready-builder/os',
        'content/dist/rhel8/8.8/aarch64/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8.8/aarch64/highavailability/debug',
        'content/dist/rhel8/8.8/aarch64/highavailability/os',
        'content/dist/rhel8/8.8/aarch64/highavailability/source/SRPMS',
        'content/dist/rhel8/8.8/aarch64/supplementary/debug',
        'content/dist/rhel8/8.8/aarch64/supplementary/os',
        'content/dist/rhel8/8.8/aarch64/supplementary/source/SRPMS',
        'content/dist/rhel8/8.8/ppc64le/appstream/debug',
        'content/dist/rhel8/8.8/ppc64le/appstream/os',
        'content/dist/rhel8/8.8/ppc64le/appstream/source/SRPMS',
        'content/dist/rhel8/8.8/ppc64le/baseos/debug',
        'content/dist/rhel8/8.8/ppc64le/baseos/os',
        'content/dist/rhel8/8.8/ppc64le/baseos/source/SRPMS',
        'content/dist/rhel8/8.8/ppc64le/codeready-builder/debug',
        'content/dist/rhel8/8.8/ppc64le/codeready-builder/os',
        'content/dist/rhel8/8.8/ppc64le/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8.8/ppc64le/highavailability/debug',
        'content/dist/rhel8/8.8/ppc64le/highavailability/os',
        'content/dist/rhel8/8.8/ppc64le/highavailability/source/SRPMS',
        'content/dist/rhel8/8.8/ppc64le/resilientstorage/debug',
        'content/dist/rhel8/8.8/ppc64le/resilientstorage/os',
        'content/dist/rhel8/8.8/ppc64le/resilientstorage/source/SRPMS',
        'content/dist/rhel8/8.8/ppc64le/sap-solutions/debug',
        'content/dist/rhel8/8.8/ppc64le/sap-solutions/os',
        'content/dist/rhel8/8.8/ppc64le/sap-solutions/source/SRPMS',
        'content/dist/rhel8/8.8/ppc64le/sap/debug',
        'content/dist/rhel8/8.8/ppc64le/sap/os',
        'content/dist/rhel8/8.8/ppc64le/sap/source/SRPMS',
        'content/dist/rhel8/8.8/ppc64le/supplementary/debug',
        'content/dist/rhel8/8.8/ppc64le/supplementary/os',
        'content/dist/rhel8/8.8/ppc64le/supplementary/source/SRPMS',
        'content/dist/rhel8/8.8/s390x/appstream/debug',
        'content/dist/rhel8/8.8/s390x/appstream/os',
        'content/dist/rhel8/8.8/s390x/appstream/source/SRPMS',
        'content/dist/rhel8/8.8/s390x/baseos/debug',
        'content/dist/rhel8/8.8/s390x/baseos/os',
        'content/dist/rhel8/8.8/s390x/baseos/source/SRPMS',
        'content/dist/rhel8/8.8/s390x/codeready-builder/debug',
        'content/dist/rhel8/8.8/s390x/codeready-builder/os',
        'content/dist/rhel8/8.8/s390x/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8.8/s390x/highavailability/debug',
        'content/dist/rhel8/8.8/s390x/highavailability/os',
        'content/dist/rhel8/8.8/s390x/highavailability/source/SRPMS',
        'content/dist/rhel8/8.8/s390x/resilientstorage/debug',
        'content/dist/rhel8/8.8/s390x/resilientstorage/os',
        'content/dist/rhel8/8.8/s390x/resilientstorage/source/SRPMS',
        'content/dist/rhel8/8.8/s390x/sap/debug',
        'content/dist/rhel8/8.8/s390x/sap/os',
        'content/dist/rhel8/8.8/s390x/sap/source/SRPMS',
        'content/dist/rhel8/8.8/s390x/supplementary/debug',
        'content/dist/rhel8/8.8/s390x/supplementary/os',
        'content/dist/rhel8/8.8/s390x/supplementary/source/SRPMS',
        'content/dist/rhel8/8.8/x86_64/appstream/debug',
        'content/dist/rhel8/8.8/x86_64/appstream/os',
        'content/dist/rhel8/8.8/x86_64/appstream/source/SRPMS',
        'content/dist/rhel8/8.8/x86_64/baseos/debug',
        'content/dist/rhel8/8.8/x86_64/baseos/os',
        'content/dist/rhel8/8.8/x86_64/baseos/source/SRPMS',
        'content/dist/rhel8/8.8/x86_64/codeready-builder/debug',
        'content/dist/rhel8/8.8/x86_64/codeready-builder/os',
        'content/dist/rhel8/8.8/x86_64/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8.8/x86_64/highavailability/debug',
        'content/dist/rhel8/8.8/x86_64/highavailability/os',
        'content/dist/rhel8/8.8/x86_64/highavailability/source/SRPMS',
        'content/dist/rhel8/8.8/x86_64/nfv/debug',
        'content/dist/rhel8/8.8/x86_64/nfv/os',
        'content/dist/rhel8/8.8/x86_64/nfv/source/SRPMS',
        'content/dist/rhel8/8.8/x86_64/resilientstorage/debug',
        'content/dist/rhel8/8.8/x86_64/resilientstorage/os',
        'content/dist/rhel8/8.8/x86_64/resilientstorage/source/SRPMS',
        'content/dist/rhel8/8.8/x86_64/rt/debug',
        'content/dist/rhel8/8.8/x86_64/rt/os',
        'content/dist/rhel8/8.8/x86_64/rt/source/SRPMS',
        'content/dist/rhel8/8.8/x86_64/sap-solutions/debug',
        'content/dist/rhel8/8.8/x86_64/sap-solutions/os',
        'content/dist/rhel8/8.8/x86_64/sap-solutions/source/SRPMS',
        'content/dist/rhel8/8.8/x86_64/sap/debug',
        'content/dist/rhel8/8.8/x86_64/sap/os',
        'content/dist/rhel8/8.8/x86_64/sap/source/SRPMS',
        'content/dist/rhel8/8.8/x86_64/supplementary/debug',
        'content/dist/rhel8/8.8/x86_64/supplementary/os',
        'content/dist/rhel8/8.8/x86_64/supplementary/source/SRPMS',
        'content/dist/rhel8/8.9/aarch64/appstream/debug',
        'content/dist/rhel8/8.9/aarch64/appstream/os',
        'content/dist/rhel8/8.9/aarch64/appstream/source/SRPMS',
        'content/dist/rhel8/8.9/aarch64/baseos/debug',
        'content/dist/rhel8/8.9/aarch64/baseos/os',
        'content/dist/rhel8/8.9/aarch64/baseos/source/SRPMS',
        'content/dist/rhel8/8.9/aarch64/codeready-builder/debug',
        'content/dist/rhel8/8.9/aarch64/codeready-builder/os',
        'content/dist/rhel8/8.9/aarch64/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8.9/aarch64/highavailability/debug',
        'content/dist/rhel8/8.9/aarch64/highavailability/os',
        'content/dist/rhel8/8.9/aarch64/highavailability/source/SRPMS',
        'content/dist/rhel8/8.9/aarch64/supplementary/debug',
        'content/dist/rhel8/8.9/aarch64/supplementary/os',
        'content/dist/rhel8/8.9/aarch64/supplementary/source/SRPMS',
        'content/dist/rhel8/8.9/ppc64le/appstream/debug',
        'content/dist/rhel8/8.9/ppc64le/appstream/os',
        'content/dist/rhel8/8.9/ppc64le/appstream/source/SRPMS',
        'content/dist/rhel8/8.9/ppc64le/baseos/debug',
        'content/dist/rhel8/8.9/ppc64le/baseos/os',
        'content/dist/rhel8/8.9/ppc64le/baseos/source/SRPMS',
        'content/dist/rhel8/8.9/ppc64le/codeready-builder/debug',
        'content/dist/rhel8/8.9/ppc64le/codeready-builder/os',
        'content/dist/rhel8/8.9/ppc64le/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8.9/ppc64le/highavailability/debug',
        'content/dist/rhel8/8.9/ppc64le/highavailability/os',
        'content/dist/rhel8/8.9/ppc64le/highavailability/source/SRPMS',
        'content/dist/rhel8/8.9/ppc64le/resilientstorage/debug',
        'content/dist/rhel8/8.9/ppc64le/resilientstorage/os',
        'content/dist/rhel8/8.9/ppc64le/resilientstorage/source/SRPMS',
        'content/dist/rhel8/8.9/ppc64le/sap-solutions/debug',
        'content/dist/rhel8/8.9/ppc64le/sap-solutions/os',
        'content/dist/rhel8/8.9/ppc64le/sap-solutions/source/SRPMS',
        'content/dist/rhel8/8.9/ppc64le/sap/debug',
        'content/dist/rhel8/8.9/ppc64le/sap/os',
        'content/dist/rhel8/8.9/ppc64le/sap/source/SRPMS',
        'content/dist/rhel8/8.9/ppc64le/supplementary/debug',
        'content/dist/rhel8/8.9/ppc64le/supplementary/os',
        'content/dist/rhel8/8.9/ppc64le/supplementary/source/SRPMS',
        'content/dist/rhel8/8.9/s390x/appstream/debug',
        'content/dist/rhel8/8.9/s390x/appstream/os',
        'content/dist/rhel8/8.9/s390x/appstream/source/SRPMS',
        'content/dist/rhel8/8.9/s390x/baseos/debug',
        'content/dist/rhel8/8.9/s390x/baseos/os',
        'content/dist/rhel8/8.9/s390x/baseos/source/SRPMS',
        'content/dist/rhel8/8.9/s390x/codeready-builder/debug',
        'content/dist/rhel8/8.9/s390x/codeready-builder/os',
        'content/dist/rhel8/8.9/s390x/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8.9/s390x/highavailability/debug',
        'content/dist/rhel8/8.9/s390x/highavailability/os',
        'content/dist/rhel8/8.9/s390x/highavailability/source/SRPMS',
        'content/dist/rhel8/8.9/s390x/resilientstorage/debug',
        'content/dist/rhel8/8.9/s390x/resilientstorage/os',
        'content/dist/rhel8/8.9/s390x/resilientstorage/source/SRPMS',
        'content/dist/rhel8/8.9/s390x/sap/debug',
        'content/dist/rhel8/8.9/s390x/sap/os',
        'content/dist/rhel8/8.9/s390x/sap/source/SRPMS',
        'content/dist/rhel8/8.9/s390x/supplementary/debug',
        'content/dist/rhel8/8.9/s390x/supplementary/os',
        'content/dist/rhel8/8.9/s390x/supplementary/source/SRPMS',
        'content/dist/rhel8/8.9/x86_64/appstream/debug',
        'content/dist/rhel8/8.9/x86_64/appstream/os',
        'content/dist/rhel8/8.9/x86_64/appstream/source/SRPMS',
        'content/dist/rhel8/8.9/x86_64/baseos/debug',
        'content/dist/rhel8/8.9/x86_64/baseos/os',
        'content/dist/rhel8/8.9/x86_64/baseos/source/SRPMS',
        'content/dist/rhel8/8.9/x86_64/codeready-builder/debug',
        'content/dist/rhel8/8.9/x86_64/codeready-builder/os',
        'content/dist/rhel8/8.9/x86_64/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8.9/x86_64/highavailability/debug',
        'content/dist/rhel8/8.9/x86_64/highavailability/os',
        'content/dist/rhel8/8.9/x86_64/highavailability/source/SRPMS',
        'content/dist/rhel8/8.9/x86_64/nfv/debug',
        'content/dist/rhel8/8.9/x86_64/nfv/os',
        'content/dist/rhel8/8.9/x86_64/nfv/source/SRPMS',
        'content/dist/rhel8/8.9/x86_64/resilientstorage/debug',
        'content/dist/rhel8/8.9/x86_64/resilientstorage/os',
        'content/dist/rhel8/8.9/x86_64/resilientstorage/source/SRPMS',
        'content/dist/rhel8/8.9/x86_64/rt/debug',
        'content/dist/rhel8/8.9/x86_64/rt/os',
        'content/dist/rhel8/8.9/x86_64/rt/source/SRPMS',
        'content/dist/rhel8/8.9/x86_64/sap-solutions/debug',
        'content/dist/rhel8/8.9/x86_64/sap-solutions/os',
        'content/dist/rhel8/8.9/x86_64/sap-solutions/source/SRPMS',
        'content/dist/rhel8/8.9/x86_64/sap/debug',
        'content/dist/rhel8/8.9/x86_64/sap/os',
        'content/dist/rhel8/8.9/x86_64/sap/source/SRPMS',
        'content/dist/rhel8/8.9/x86_64/supplementary/debug',
        'content/dist/rhel8/8.9/x86_64/supplementary/os',
        'content/dist/rhel8/8.9/x86_64/supplementary/source/SRPMS',
        'content/dist/rhel8/8/aarch64/appstream/debug',
        'content/dist/rhel8/8/aarch64/appstream/os',
        'content/dist/rhel8/8/aarch64/appstream/source/SRPMS',
        'content/dist/rhel8/8/aarch64/baseos/debug',
        'content/dist/rhel8/8/aarch64/baseos/os',
        'content/dist/rhel8/8/aarch64/baseos/source/SRPMS',
        'content/dist/rhel8/8/aarch64/codeready-builder/debug',
        'content/dist/rhel8/8/aarch64/codeready-builder/os',
        'content/dist/rhel8/8/aarch64/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8/aarch64/highavailability/debug',
        'content/dist/rhel8/8/aarch64/highavailability/os',
        'content/dist/rhel8/8/aarch64/highavailability/source/SRPMS',
        'content/dist/rhel8/8/aarch64/supplementary/debug',
        'content/dist/rhel8/8/aarch64/supplementary/os',
        'content/dist/rhel8/8/aarch64/supplementary/source/SRPMS',
        'content/dist/rhel8/8/ppc64le/appstream/debug',
        'content/dist/rhel8/8/ppc64le/appstream/os',
        'content/dist/rhel8/8/ppc64le/appstream/source/SRPMS',
        'content/dist/rhel8/8/ppc64le/baseos/debug',
        'content/dist/rhel8/8/ppc64le/baseos/os',
        'content/dist/rhel8/8/ppc64le/baseos/source/SRPMS',
        'content/dist/rhel8/8/ppc64le/codeready-builder/debug',
        'content/dist/rhel8/8/ppc64le/codeready-builder/os',
        'content/dist/rhel8/8/ppc64le/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8/ppc64le/highavailability/debug',
        'content/dist/rhel8/8/ppc64le/highavailability/os',
        'content/dist/rhel8/8/ppc64le/highavailability/source/SRPMS',
        'content/dist/rhel8/8/ppc64le/resilientstorage/debug',
        'content/dist/rhel8/8/ppc64le/resilientstorage/os',
        'content/dist/rhel8/8/ppc64le/resilientstorage/source/SRPMS',
        'content/dist/rhel8/8/ppc64le/sap-solutions/debug',
        'content/dist/rhel8/8/ppc64le/sap-solutions/os',
        'content/dist/rhel8/8/ppc64le/sap-solutions/source/SRPMS',
        'content/dist/rhel8/8/ppc64le/sap/debug',
        'content/dist/rhel8/8/ppc64le/sap/os',
        'content/dist/rhel8/8/ppc64le/sap/source/SRPMS',
        'content/dist/rhel8/8/ppc64le/supplementary/debug',
        'content/dist/rhel8/8/ppc64le/supplementary/os',
        'content/dist/rhel8/8/ppc64le/supplementary/source/SRPMS',
        'content/dist/rhel8/8/s390x/appstream/debug',
        'content/dist/rhel8/8/s390x/appstream/os',
        'content/dist/rhel8/8/s390x/appstream/source/SRPMS',
        'content/dist/rhel8/8/s390x/baseos/debug',
        'content/dist/rhel8/8/s390x/baseos/os',
        'content/dist/rhel8/8/s390x/baseos/source/SRPMS',
        'content/dist/rhel8/8/s390x/codeready-builder/debug',
        'content/dist/rhel8/8/s390x/codeready-builder/os',
        'content/dist/rhel8/8/s390x/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8/s390x/highavailability/debug',
        'content/dist/rhel8/8/s390x/highavailability/os',
        'content/dist/rhel8/8/s390x/highavailability/source/SRPMS',
        'content/dist/rhel8/8/s390x/resilientstorage/debug',
        'content/dist/rhel8/8/s390x/resilientstorage/os',
        'content/dist/rhel8/8/s390x/resilientstorage/source/SRPMS',
        'content/dist/rhel8/8/s390x/sap/debug',
        'content/dist/rhel8/8/s390x/sap/os',
        'content/dist/rhel8/8/s390x/sap/source/SRPMS',
        'content/dist/rhel8/8/s390x/supplementary/debug',
        'content/dist/rhel8/8/s390x/supplementary/os',
        'content/dist/rhel8/8/s390x/supplementary/source/SRPMS',
        'content/dist/rhel8/8/x86_64/appstream/debug',
        'content/dist/rhel8/8/x86_64/appstream/os',
        'content/dist/rhel8/8/x86_64/appstream/source/SRPMS',
        'content/dist/rhel8/8/x86_64/baseos/debug',
        'content/dist/rhel8/8/x86_64/baseos/os',
        'content/dist/rhel8/8/x86_64/baseos/source/SRPMS',
        'content/dist/rhel8/8/x86_64/codeready-builder/debug',
        'content/dist/rhel8/8/x86_64/codeready-builder/os',
        'content/dist/rhel8/8/x86_64/codeready-builder/source/SRPMS',
        'content/dist/rhel8/8/x86_64/highavailability/debug',
        'content/dist/rhel8/8/x86_64/highavailability/os',
        'content/dist/rhel8/8/x86_64/highavailability/source/SRPMS',
        'content/dist/rhel8/8/x86_64/nfv/debug',
        'content/dist/rhel8/8/x86_64/nfv/os',
        'content/dist/rhel8/8/x86_64/nfv/source/SRPMS',
        'content/dist/rhel8/8/x86_64/resilientstorage/debug',
        'content/dist/rhel8/8/x86_64/resilientstorage/os',
        'content/dist/rhel8/8/x86_64/resilientstorage/source/SRPMS',
        'content/dist/rhel8/8/x86_64/rt/debug',
        'content/dist/rhel8/8/x86_64/rt/os',
        'content/dist/rhel8/8/x86_64/rt/source/SRPMS',
        'content/dist/rhel8/8/x86_64/sap-solutions/debug',
        'content/dist/rhel8/8/x86_64/sap-solutions/os',
        'content/dist/rhel8/8/x86_64/sap-solutions/source/SRPMS',
        'content/dist/rhel8/8/x86_64/sap/debug',
        'content/dist/rhel8/8/x86_64/sap/os',
        'content/dist/rhel8/8/x86_64/sap/source/SRPMS',
        'content/dist/rhel8/8/x86_64/supplementary/debug',
        'content/dist/rhel8/8/x86_64/supplementary/os',
        'content/dist/rhel8/8/x86_64/supplementary/source/SRPMS'
      ],
      'pkgs': [
        {'reference':'nodejs-14.21.3-1.module+el8.7.0+18531+81d21ca6', 'release':'8', 'el_string':'el8.7.0', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1'},
        {'reference':'nodejs-devel-14.21.3-1.module+el8.7.0+18531+81d21ca6', 'release':'8', 'el_string':'el8.7.0', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1'},
        {'reference':'nodejs-docs-14.21.3-1.module+el8.7.0+18531+81d21ca6', 'release':'8', 'el_string':'el8.7.0', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1'},
        {'reference':'nodejs-full-i18n-14.21.3-1.module+el8.7.0+18531+81d21ca6', 'release':'8', 'el_string':'el8.7.0', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1'},
        {'reference':'nodejs-nodemon-2.0.20-3.module+el8.7.0+18531+81d21ca6', 'release':'8', 'el_string':'el8.7.0', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'nodejs-packaging-23-3.module+el8.3.0+6519+9f98ed83', 'release':'8', 'el_string':'el8.3.0', 'rpm_spec_vers_cmp':TRUE, 'allowmaj':TRUE},
        {'reference':'npm-6.14.18-1.14.21.3.1.module+el8.7.0+18531+81d21ca6', 'release':'8', 'el_string':'el8.7.0', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1'}
      ]
    },
    {
      'repo_relative_urls': [
        'content/e4s/rhel8/8.8/ppc64le/appstream/debug',
        'content/e4s/rhel8/8.8/ppc64le/appstream/os',
        'content/e4s/rhel8/8.8/ppc64le/appstream/source/SRPMS',
        'content/e4s/rhel8/8.8/ppc64le/baseos/debug',
        'content/e4s/rhel8/8.8/ppc64le/baseos/os',
        'content/e4s/rhel8/8.8/ppc64le/baseos/source/SRPMS',
        'content/e4s/rhel8/8.8/ppc64le/highavailability/debug',
        'content/e4s/rhel8/8.8/ppc64le/highavailability/os',
        'content/e4s/rhel8/8.8/ppc64le/highavailability/source/SRPMS',
        'content/e4s/rhel8/8.8/ppc64le/sap-solutions/debug',
        'content/e4s/rhel8/8.8/ppc64le/sap-solutions/os',
        'content/e4s/rhel8/8.8/ppc64le/sap-solutions/source/SRPMS',
        'content/e4s/rhel8/8.8/ppc64le/sap/debug',
        'content/e4s/rhel8/8.8/ppc64le/sap/os',
        'content/e4s/rhel8/8.8/ppc64le/sap/source/SRPMS',
        'content/e4s/rhel8/8.8/x86_64/appstream/debug',
        'content/e4s/rhel8/8.8/x86_64/appstream/os',
        'content/e4s/rhel8/8.8/x86_64/appstream/source/SRPMS',
        'content/e4s/rhel8/8.8/x86_64/baseos/debug',
        'content/e4s/rhel8/8.8/x86_64/baseos/os',
        'content/e4s/rhel8/8.8/x86_64/baseos/source/SRPMS',
        'content/e4s/rhel8/8.8/x86_64/highavailability/debug',
        'content/e4s/rhel8/8.8/x86_64/highavailability/os',
        'content/e4s/rhel8/8.8/x86_64/highavailability/source/SRPMS',
        'content/e4s/rhel8/8.8/x86_64/sap-solutions/debug',
        'content/e4s/rhel8/8.8/x86_64/sap-solutions/os',
        'content/e4s/rhel8/8.8/x86_64/sap-solutions/source/SRPMS',
        'content/e4s/rhel8/8.8/x86_64/sap/debug',
        'content/e4s/rhel8/8.8/x86_64/sap/os',
        'content/e4s/rhel8/8.8/x86_64/sap/source/SRPMS',
        'content/eus/rhel8/8.8/aarch64/appstream/debug',
        'content/eus/rhel8/8.8/aarch64/appstream/os',
        'content/eus/rhel8/8.8/aarch64/appstream/source/SRPMS',
        'content/eus/rhel8/8.8/aarch64/baseos/debug',
        'content/eus/rhel8/8.8/aarch64/baseos/os',
        'content/eus/rhel8/8.8/aarch64/baseos/source/SRPMS',
        'content/eus/rhel8/8.8/aarch64/codeready-builder/debug',
        'content/eus/rhel8/8.8/aarch64/codeready-builder/os',
        'content/eus/rhel8/8.8/aarch64/codeready-builder/source/SRPMS',
        'content/eus/rhel8/8.8/aarch64/highavailability/debug',
        'content/eus/rhel8/8.8/aarch64/highavailability/os',
        'content/eus/rhel8/8.8/aarch64/highavailability/source/SRPMS',
        'content/eus/rhel8/8.8/aarch64/supplementary/debug',
        'content/eus/rhel8/8.8/aarch64/supplementary/os',
        'content/eus/rhel8/8.8/aarch64/supplementary/source/SRPMS',
        'content/eus/rhel8/8.8/ppc64le/appstream/debug',
        'content/eus/rhel8/8.8/ppc64le/appstream/os',
        'content/eus/rhel8/8.8/ppc64le/appstream/source/SRPMS',
        'content/eus/rhel8/8.8/ppc64le/baseos/debug',
        'content/eus/rhel8/8.8/ppc64le/baseos/os',
        'content/eus/rhel8/8.8/ppc64le/baseos/source/SRPMS',
        'content/eus/rhel8/8.8/ppc64le/codeready-builder/debug',
        'content/eus/rhel8/8.8/ppc64le/codeready-builder/os',
        'content/eus/rhel8/8.8/ppc64le/codeready-builder/source/SRPMS',
        'content/eus/rhel8/8.8/ppc64le/highavailability/debug',
        'content/eus/rhel8/8.8/ppc64le/highavailability/os',
        'content/eus/rhel8/8.8/ppc64le/highavailability/source/SRPMS',
        'content/eus/rhel8/8.8/ppc64le/resilientstorage/debug',
        'content/eus/rhel8/8.8/ppc64le/resilientstorage/os',
        'content/eus/rhel8/8.8/ppc64le/resilientstorage/source/SRPMS',
        'content/eus/rhel8/8.8/ppc64le/sap-solutions/debug',
        'content/eus/rhel8/8.8/ppc64le/sap-solutions/os',
        'content/eus/rhel8/8.8/ppc64le/sap-solutions/source/SRPMS',
        'content/eus/rhel8/8.8/ppc64le/sap/debug',
        'content/eus/rhel8/8.8/ppc64le/sap/os',
        'content/eus/rhel8/8.8/ppc64le/sap/source/SRPMS',
        'content/eus/rhel8/8.8/ppc64le/supplementary/debug',
        'content/eus/rhel8/8.8/ppc64le/supplementary/os',
        'content/eus/rhel8/8.8/ppc64le/supplementary/source/SRPMS',
        'content/eus/rhel8/8.8/s390x/appstream/debug',
        'content/eus/rhel8/8.8/s390x/appstream/os',
        'content/eus/rhel8/8.8/s390x/appstream/source/SRPMS',
        'content/eus/rhel8/8.8/s390x/baseos/debug',
        'content/eus/rhel8/8.8/s390x/baseos/os',
        'content/eus/rhel8/8.8/s390x/baseos/source/SRPMS',
        'content/eus/rhel8/8.8/s390x/codeready-builder/debug',
        'content/eus/rhel8/8.8/s390x/codeready-builder/os',
        'content/eus/rhel8/8.8/s390x/codeready-builder/source/SRPMS',
        'content/eus/rhel8/8.8/s390x/highavailability/debug',
        'content/eus/rhel8/8.8/s390x/highavailability/os',
        'content/eus/rhel8/8.8/s390x/highavailability/source/SRPMS',
        'content/eus/rhel8/8.8/s390x/resilientstorage/debug',
        'content/eus/rhel8/8.8/s390x/resilientstorage/os',
        'content/eus/rhel8/8.8/s390x/resilientstorage/source/SRPMS',
        'content/eus/rhel8/8.8/s390x/sap/debug',
        'content/eus/rhel8/8.8/s390x/sap/os',
        'content/eus/rhel8/8.8/s390x/sap/source/SRPMS',
        'content/eus/rhel8/8.8/s390x/supplementary/debug',
        'content/eus/rhel8/8.8/s390x/supplementary/os',
        'content/eus/rhel8/8.8/s390x/supplementary/source/SRPMS',
        'content/eus/rhel8/8.8/x86_64/appstream/debug',
        'content/eus/rhel8/8.8/x86_64/appstream/os',
        'content/eus/rhel8/8.8/x86_64/appstream/source/SRPMS',
        'content/eus/rhel8/8.8/x86_64/baseos/debug',
        'content/eus/rhel8/8.8/x86_64/baseos/os',
        'content/eus/rhel8/8.8/x86_64/baseos/source/SRPMS',
        'content/eus/rhel8/8.8/x86_64/codeready-builder/debug',
        'content/eus/rhel8/8.8/x86_64/codeready-builder/os',
        'content/eus/rhel8/8.8/x86_64/codeready-builder/source/SRPMS',
        'content/eus/rhel8/8.8/x86_64/highavailability/debug',
        'content/eus/rhel8/8.8/x86_64/highavailability/os',
        'content/eus/rhel8/8.8/x86_64/highavailability/source/SRPMS',
        'content/eus/rhel8/8.8/x86_64/resilientstorage/debug',
        'content/eus/rhel8/8.8/x86_64/resilientstorage/os',
        'content/eus/rhel8/8.8/x86_64/resilientstorage/source/SRPMS',
        'content/eus/rhel8/8.8/x86_64/sap-solutions/debug',
        'content/eus/rhel8/8.8/x86_64/sap-solutions/os',
        'content/eus/rhel8/8.8/x86_64/sap-solutions/source/SRPMS',
        'content/eus/rhel8/8.8/x86_64/sap/debug',
        'content/eus/rhel8/8.8/x86_64/sap/os',
        'content/eus/rhel8/8.8/x86_64/sap/source/SRPMS',
        'content/eus/rhel8/8.8/x86_64/supplementary/debug',
        'content/eus/rhel8/8.8/x86_64/supplementary/os',
        'content/eus/rhel8/8.8/x86_64/supplementary/source/SRPMS',
        'content/tus/rhel8/8.8/x86_64/appstream/debug',
        'content/tus/rhel8/8.8/x86_64/appstream/os',
        'content/tus/rhel8/8.8/x86_64/appstream/source/SRPMS',
        'content/tus/rhel8/8.8/x86_64/baseos/debug',
        'content/tus/rhel8/8.8/x86_64/baseos/os',
        'content/tus/rhel8/8.8/x86_64/baseos/source/SRPMS',
        'content/tus/rhel8/8.8/x86_64/highavailability/debug',
        'content/tus/rhel8/8.8/x86_64/highavailability/os',
        'content/tus/rhel8/8.8/x86_64/highavailability/source/SRPMS',
        'content/tus/rhel8/8.8/x86_64/nfv/debug',
        'content/tus/rhel8/8.8/x86_64/nfv/os',
        'content/tus/rhel8/8.8/x86_64/nfv/source/SRPMS',
        'content/tus/rhel8/8.8/x86_64/rt/debug',
        'content/tus/rhel8/8.8/x86_64/rt/os',
        'content/tus/rhel8/8.8/x86_64/rt/source/SRPMS'
      ],
      'pkgs': [
        {'reference':'nodejs-14.21.3-1.module+el8.7.0+18531+81d21ca6', 'sp':'8', 'release':'8', 'el_string':'el8.7.0', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1'},
        {'reference':'nodejs-devel-14.21.3-1.module+el8.7.0+18531+81d21ca6', 'sp':'8', 'release':'8', 'el_string':'el8.7.0', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1'},
        {'reference':'nodejs-docs-14.21.3-1.module+el8.7.0+18531+81d21ca6', 'sp':'8', 'release':'8', 'el_string':'el8.7.0', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1'},
        {'reference':'nodejs-full-i18n-14.21.3-1.module+el8.7.0+18531+81d21ca6', 'sp':'8', 'release':'8', 'el_string':'el8.7.0', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1'},
        {'reference':'nodejs-nodemon-2.0.20-3.module+el8.7.0+18531+81d21ca6', 'sp':'8', 'release':'8', 'el_string':'el8.7.0', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'nodejs-packaging-23-3.module+el8.3.0+6519+9f98ed83', 'sp':'8', 'release':'8', 'el_string':'el8.3.0', 'rpm_spec_vers_cmp':TRUE, 'allowmaj':TRUE},
        {'reference':'npm-6.14.18-1.14.21.3.1.module+el8.7.0+18531+81d21ca6', 'sp':'8', 'release':'8', 'el_string':'el8.7.0', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1'}
      ]
    }
  ]
};

var applicable_repo_urls = rhel_determine_applicable_repository_urls(constraints:appstreams, appstreams:TRUE);
if(applicable_repo_urls == RHEL_REPOS_NO_OVERLAP_MESSAGE) exit(0, RHEL_REPO_NOT_ENABLED);

var module_ver = get_kb_item('Host/RedHat/appstream/nodejs');
if (isnull(module_ver)) audit(AUDIT_PACKAGE_NOT_INSTALLED, 'Module nodejs:14');
if ('14' >!< module_ver) audit(AUDIT_PACKAGE_NOT_AFFECTED, 'Module nodejs:' + module_ver);

var flag = 0;
var appstreams_found = 0;
foreach var module (keys(appstreams)) {
  var appstream = NULL;
  var appstream_name = NULL;
  var appstream_version = NULL;
  var appstream_split = split(module, sep:':', keep:FALSE);
  if (!empty_or_null(appstream_split)) {
    appstream_name = appstream_split[0];
    appstream_version = appstream_split[1];
    if (!empty_or_null(appstream_name)) appstream = get_one_kb_item('Host/RedHat/appstream/' + appstream_name);
  }
  if (!empty_or_null(appstream) && appstream_version == appstream || appstream_name == 'all') {
    appstreams_found++;
    foreach var module_array ( appstreams[module] ) {
      var repo_relative_urls = NULL;
      if (!empty_or_null(module_array['repo_relative_urls'])) repo_relative_urls = module_array['repo_relative_urls'];
      var enterprise_linux_flag = rhel_repo_urls_has_content_dist_rhel(repo_urls:repo_relative_urls);
      foreach var package_array ( module_array['pkgs'] ) {
        var reference = NULL;
        var _release = NULL;
        var sp = NULL;
        var _cpu = NULL;
        var el_string = NULL;
        var rpm_spec_vers_cmp = NULL;
        var epoch = NULL;
        var allowmaj = NULL;
        var exists_check = NULL;
        if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
        if (!empty_or_null(package_array['release'])) _release = 'RHEL' + package_array['release'];
        if (!empty_or_null(package_array['sp']) && !enterprise_linux_flag) sp = package_array['sp'];
        if (!empty_or_null(package_array['cpu'])) _cpu = package_array['cpu'];
        if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string'];
        if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
        if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch'];
        if (!empty_or_null(package_array['allowmaj'])) allowmaj = package_array['allowmaj'];
        if (!empty_or_null(package_array['exists_check'])) exists_check = package_array['exists_check'];
        if (reference &&
            _release &&
            rhel_decide_repo_relative_url_check(required_repo_url_list:repo_relative_urls) &&
            (applicable_repo_urls || (!exists_check || rpm_exists(release:_release, rpm:exists_check))) &&
            rpm_check(release:_release, sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj)) flag++;
      }
    }
  }
}

if (!appstreams_found) audit(AUDIT_PACKAGE_NOT_INSTALLED, 'Module nodejs:14');

if (flag)
{
  var extra = NULL;
  if (isnull(applicable_repo_urls) || !applicable_repo_urls) extra = rpm_report_get() + redhat_report_repo_caveat();
  else extra = rpm_report_get();
  security_report_v4(
      port       : 0,
      severity   : SECURITY_HOLE,
      extra      : extra
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc');
}

Related

nessus 57
redhat 9
oraclelinux 6
rocky 4
osv 22
almalinux 6
openvas 23
mageia 1
f5 1
fedora 7
veracode 3
cvelist 4
redhatcve 5
nvd 5
ibm 22
cve 5
hackerone 1
prion 4
ubuntucve 2
alpinelinux 2
cbl_mariner 4
github 3
debiancve 1
nodejsblog 1
cgr 1
nessus
nessus
Oracle Linux 8 : nodejs:14 (ELSA-2023-1743)
2023-04-13 00:00:00
Rocky Linux 8 : nodejs:14 (RLSA-2023:1743)
2023-04-26 00:00:00
CentOS 8 : nodejs:14 (CESA-2023:1743)
2023-04-13 00:00:00
redhat
redhat
(RHSA-2023:1743) Important: nodejs:14 security, bug fix, and enhancement update
2023-04-12 14:37:46
(RHSA-2023:1744) Important: rh-nodejs14-nodejs security, bug fix, and enhancement update
2023-04-12 14:38:13
(RHSA-2023:2655) Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update
2023-05-09 11:25:41
oraclelinux
oraclelinux
nodejs:14 security, bug fix, and enhancement update
2023-04-12 00:00:00
nodejs:18 security, bug fix, and enhancement update
2023-05-17 00:00:00
nodejs:16 security, bug fix, and enhancement update
2023-04-05 00:00:00
rocky
rocky
nodejs:14 security, bug fix, and enhancement update
2023-04-26 15:28:13
nodejs:16 security, bug fix, and enhancement update
2023-04-06 15:52:43
nodejs:18 security, bug fix, and enhancement update
2023-04-06 15:52:43
osv
osv
Important: nodejs:14 security, bug fix, and enhancement update
2023-04-26 15:28:13
Important: nodejs:14 security, bug fix, and enhancement update
2023-04-12 00:00:00
Moderate: nodejs:16 security, bug fix, and enhancement update
2023-04-06 15:52:43
almalinux
almalinux
Important: nodejs:14 security, bug fix, and enhancement update
2023-04-12 00:00:00
Moderate: nodejs:18 security, bug fix, and enhancement update
2023-05-09 00:00:00
Moderate: nodejs:16 security, bug fix, and enhancement update
2023-04-04 00:00:00
openvas
openvas
Node.js 14.x < 14.21.3, 16.x < 16.19.1, 18.x < 18.14.1, 19.x < 19.6.1 Multiple Vulnerabilities - Mac OS X
2023-02-27 00:00:00
Node.js 14.x < 14.21.3, 16.x < 16.19.1, 18.x < 18.14.1, 19.x < 19.6.1 Multiple Vulnerabilities - Windows
2023-02-27 00:00:00
Mageia: Security Advisory (MGASA-2023-0078)
2023-03-28 00:00:00
mageia
mageia
Updated nodejs packages fix security vulnerability
2023-03-02 00:14:31
f5
f5
K000134602 : Node.js vulnerabilities CVE-2023-23918 and CVE-2023-23920
2023-05-15 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: pcs-0.11.6-1.fc37
2023-07-01 00:38:09
[SECURITY] Fedora 38 Update: pcs-0.11.6-1.fc38
2023-07-01 01:46:23
[SECURITY] Fedora 37 Update: yarnpkg-1.22.19-2.fc37
2023-01-12 01:53:57
veracode
veracode
Denial Of Service (DoS)
2022-11-29 02:52:14
Regular Expression Denial Of Service (ReDoS)
2023-02-08 10:17:54
Improper Access Control
2023-02-18 04:53:51
cvelist
cvelist
CVE-2022-38900
2022-11-28 00:00:00
CVE-2021-35065
2022-12-26 00:00:00
CVE-2023-23918
2023-02-23 00:00:00
redhatcve
redhatcve
CVE-2022-38900
2023-02-16 21:29:43
CVE-2021-35065
2022-12-26 12:34:50
CVE-2022-25881
2023-01-31 09:06:43
nvd
nvd
CVE-2021-35065
2022-12-26 07:15:11
CVE-2023-23918
2023-02-23 20:15:13
CVE-2022-38900
2022-11-28 13:15:10
ibm
ibm
Security Bulletin: Vulnerability in nodejs decode-uri-component affect Cloud Pak System[CVE-2022-38900]
2024-08-01 12:45:28
Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to denial of service due to [CVE-2022-38900]
2023-04-28 11:44:02
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Node.js decode-uri-component
2023-01-30 17:47:56
cve
cve
CVE-2022-38900
2022-11-28 13:15:10
CVE-2021-35065
2022-12-26 07:15:11
CVE-2023-23918
2023-02-23 20:15:13
hackerone
hackerone
Node.js: Permissions policies can be bypassed via process.mainModule
2022-10-24 11:29:58
prion
prion
Code injection
2022-12-26 07:15:00
Input validation
2022-11-28 13:15:00
Design/Logic Flaw
2023-01-31 05:15:00
ubuntucve
ubuntucve
CVE-2021-35065
2022-12-26 00:00:00
CVE-2023-23918
2023-02-23 00:00:00
alpinelinux
alpinelinux
CVE-2023-23920
2023-02-23 20:15:14
CVE-2023-23918
2023-02-23 20:15:13
cbl_mariner
cbl_mariner
CVE-2023-23920 affecting package nodejs 14.21.1-3
2023-08-15 16:37:27
CVE-2023-23918 affecting package nodejs for versions less than 16.19.1-1
2023-03-24 23:56:25
CVE-2023-23920 affecting package nodejs for versions less than 16.19.1-1
2023-03-24 23:56:25
github
github
decode-uri-component vulnerable to Denial of Service (DoS)
2022-11-28 15:30:24
glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service
2022-07-18 17:03:23
http-cache-semantics vulnerable to Regular Expression Denial of Service
2023-01-31 06:30:26
debiancve
debiancve
CVE-2021-35065
2022-12-26 07:15:11
nodejsblog
nodejsblog
Thursday February 16 2023 Security Releases
2023-02-16 00:00:00
cgr
cgr
CVE-2022-25881 vulnerabilities
2024-05-19 03:07:16

AI Score

8.1

Confidence

Low

EPSS

0.004

Percentile

73.3%

JSON
Related for REDHAT-RHSA-2023-1743.NASL
nessus57redhat9oraclelinux6rocky4osv22almalinux6openvas23mageia1f51fedora7veracode3cvelist4redhatcve5nvd5ibm22cve5hackerone1prion4ubuntucve2alpinelinux2cbl_mariner4github3debiancve1nodejsblog1cgr1