Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2021-5171
HistoryDec 16, 2021 - 12:00 a.m.

nodejs:16 security, bug fix, and enhancement update

2021-12-1600:00:00
linux.oracle.com
30

0.012 Low

EPSS

Percentile

85.6%

JSON

nodejs
[16.13.1-3.0.1]

  • Libraries must not be group-writeable. Change node-gyp permission to 0755 [Orabug: 28451433]
    [1:16.13.1-3]
  • Resolves: RHBZ#2027610
  • Add corepack to spec
    [1:16.13.1-2]
  • Resolves: RHBZ#2027610
  • Update npm version test
    [1:16.13.1-1]
  • Resolves: RHBZ#2027644, RHBZ#2027643, RHBZ#2027638, RHBZ#2027633
  • Resolves: RHBZ#2027610
  • Rebase to LTS release and to fix multiple low and medium CVEs
    nodejs-nodemon
    [2.0.15-1]
  • Resolves: RHBZ#2027630
  • Resolves CVE-2020-28469
  • Rebase to newest version
  • Change source to npmjs.com
OSVersionArchitecturePackageVersionFilename
oracle linux8srcnodejs< 16.13.1-3.0.1.modulenodejs-16.13.1-3.0.1.module+el8.5.0+20457+52828f44.src.rpm
oracle linux8srcnodejs-nodemon< 2.0.15-1.modulenodejs-nodemon-2.0.15-1.module+el8.5.0+20457+52828f44.src.rpm
oracle linux8srcnodejs-packaging< 25-1.modulenodejs-packaging-25-1.module+el8.5.0+20388+4b61e68d.src.rpm
oracle linux8aarch64nodejs< 16.13.1-3.0.1.modulenodejs-16.13.1-3.0.1.module+el8.5.0+20457+52828f44.aarch64.rpm
oracle linux8aarch64nodejs-devel< 16.13.1-3.0.1.modulenodejs-devel-16.13.1-3.0.1.module+el8.5.0+20457+52828f44.aarch64.rpm
oracle linux8noarchnodejs-docs< 16.13.1-3.0.1.modulenodejs-docs-16.13.1-3.0.1.module+el8.5.0+20457+52828f44.noarch.rpm
oracle linux8aarch64nodejs-full-i18n< 16.13.1-3.0.1.modulenodejs-full-i18n-16.13.1-3.0.1.module+el8.5.0+20457+52828f44.aarch64.rpm
oracle linux8noarchnodejs-nodemon< 2.0.15-1.modulenodejs-nodemon-2.0.15-1.module+el8.5.0+20457+52828f44.noarch.rpm
oracle linux8noarchnodejs-packaging< 25-1.modulenodejs-packaging-25-1.module+el8.5.0+20388+4b61e68d.noarch.rpm
oracle linux8aarch64npm< 8.1.2-1.16.13.1.3.0.1.modulenpm-8.1.2-1.16.13.1.3.0.1.module+el8.5.0+20457+52828f44.aarch64.rpm
Rows per page:
1-10 of 201

Related

nessus 36
rocky 4
osv 18
redhat 6
almalinux 3
oraclelinux 2
ibm 32
openvas 14
fedora 3
archlinux 3
mageia 2
altlinux 1
nodejsblog 1
freebsd 1
redhatcve 6
nvd 6
prion 7
debiancve 7
cvelist 6
cve 7
ubuntucve 7
nodejs 2
veracode 6
github 5
debian 2
hackerone 3
alpinelinux 2
suse 2
ubuntu 1
huntr 2
cnvd 1
cgr 1
nessus
nessus
RHEL 8 : nodejs:16 (RHSA-2021:5171)
2021-12-16 00:00:00
AlmaLinux 8 : nodejs:16 (ALSA-2021:5171)
2022-03-12 00:00:00
Rocky Linux 8 : nodejs:16 (RLSA-2021:5171)
2023-11-06 00:00:00
rocky
rocky
nodejs:16 security, bug fix, and enhancement update
2021-12-15 19:09:29
nodejs:14 security, bug fix, and enhancement update
2022-02-01 20:08:39
nodejs and nodejs-nodemon security and bug fix update
2022-09-20 11:37:49
osv
osv
Moderate: nodejs:16 security, bug fix, and enhancement update
2021-12-15 19:09:29
Moderate: nodejs:16 security, bug fix, and enhancement update
2021-12-15 19:09:29
Moderate: nodejs:14 security, bug fix, and enhancement update
2022-02-01 20:08:39
redhat
redhat
(RHSA-2021:5171) Moderate: nodejs:16 security, bug fix, and enhancement update
2021-12-15 19:09:29
(RHSA-2022:0350) Moderate: nodejs:14 security, bug fix, and enhancement update
2022-02-01 20:08:39
(RHSA-2022:0246) Moderate: nodejs:14 security, bug fix, and enhancement update
2022-01-25 08:40:34
almalinux
almalinux
Moderate: nodejs:16 security, bug fix, and enhancement update
2021-12-15 19:09:29
Moderate: nodejs:14 security, bug fix, and enhancement update
2022-02-01 20:08:39
Moderate: nodejs and nodejs-nodemon security and bug fix update
2022-09-20 00:00:00
oraclelinux
oraclelinux
nodejs:14 security, bug fix, and enhancement update
2022-02-02 00:00:00
nodejs and nodejs-nodemon security and bug fix update
2022-09-22 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Node.js
2021-12-17 04:21:37
Security Bulletin: IBM DataPower affected by vulnerabilities in Node.js
2022-03-02 15:24:25
Security Bulletin: Vulnerabilities in Node.js affecting IBM Event Streams (CVE-2021-22960 and CVE-2021-22959)
2021-12-21 17:46:17
openvas
openvas
Fedora: Security Advisory for nodejs (FEDORA-2021-9818cabe0d)
2021-10-30 00:00:00
Mageia: Security Advisory (MGASA-2021-0592)
2022-01-28 00:00:00
Fedora: Security Advisory for nodejs (FEDORA-2021-cbad295a90)
2021-10-24 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: nodejs-14.18.1-1.fc33
2021-10-23 03:25:54
[SECURITY] Fedora 34 Update: nodejs-14.18.1-1.fc34
2021-10-23 03:22:47
[SECURITY] Fedora 35 Update: nodejs-16.11.1-1.fc35
2021-10-29 23:27:03
archlinux
archlinux
[ASA-202110-4] nodejs: url request injection
2021-10-21 00:00:00
[ASA-202110-5] nodejs-lts-fermium: multiple issues
2021-10-21 00:00:00
[ASA-202110-6] nodejs-lts-erbium: multiple issues
2021-10-21 00:00:00
mageia
mageia
Updated nodejs packages fix security vulnerability
2021-12-30 19:41:51
Updated nodejs-ini package fixes a security vulnerability
2021-02-05 14:54:53
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 14.18.2-alt1
2021-12-23 00:00:00
nodejsblog
nodejsblog
October 12th 2021 Security Releases
2021-10-12 00:00:00
freebsd
freebsd
Node.js -- October 2021 Security Releases
2021-10-12 00:00:00
redhatcve
redhatcve
CVE-2020-28469
2021-04-01 01:38:31
CVE-2021-33502
2021-05-25 14:57:29
CVE-2020-7788
2020-12-14 14:57:16
nvd
nvd
CVE-2020-28469
2021-06-03 16:15:07
CVE-2021-22959
2021-11-15 15:15:06
CVE-2020-7788
2020-12-11 11:15:11
prion
prion
Design/Logic Flaw
2021-06-03 16:15:00
Denial of service
2021-05-24 16:15:00
Design/Logic Flaw
2021-11-15 15:15:00
debiancve
debiancve
CVE-2021-33502
2021-05-24 16:15:08
CVE-2020-28469
2021-06-03 16:15:07
CVE-2020-7788
2020-12-11 11:15:11
cvelist
cvelist
CVE-2021-33502
2021-05-24 15:42:34
CVE-2020-28469 Regular Expression Denial of Service (ReDoS)
2021-06-03 00:00:00
CVE-2021-22959
2021-11-15 14:45:16
cve
cve
CVE-2021-33502
2021-05-24 16:15:08
CVE-2020-28469
2021-06-03 16:15:07
CVE-2020-7788
2020-12-11 11:15:11
ubuntucve
ubuntucve
CVE-2020-28469
2021-06-03 00:00:00
CVE-2020-7788
2020-12-11 00:00:00
CVE-2021-22959
2021-11-15 00:00:00
nodejs
nodejs
Regular expression denial of service
2021-06-07 21:57:10
Regular Expression Denial of Service
2021-06-08 23:12:07
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2021-01-21 14:21:20
Prototype Pollution
2020-12-11 03:37:58
Regular Expression Denial Of Service (ReDoS)
2021-05-25 07:10:20
github
github
glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex
2021-06-07 21:56:34
ReDoS in normalize-url
2021-06-08 23:11:43
ini before 1.3.6 vulnerable to Prototype Pollution via ini.parse
2020-12-10 16:53:45
debian
debian
[SECURITY] [DLA 2503-1] node-ini security update
2020-12-21 15:01:05
[SECURITY] [DLA 3228-1] node-json-schema security update
2022-12-06 19:15:29
hackerone
hackerone
Node.js: HTTP Request Smuggling due to accepting space before colon
2021-06-20 11:10:00
Nextcloud: @nextcloud/logger NPM package brings vulnerable ansi-regex version
2022-06-20 14:31:09
Node.js: HTTP Request Smuggling due to ignoring chunk extensions
2021-06-19 08:43:05
alpinelinux
alpinelinux
CVE-2021-22959
2021-11-15 15:15:06
CVE-2021-22960
2021-11-03 20:15:08
suse
suse
Security update for nodejs14 (important)
2022-03-04 00:00:00
Security update for nodejs8 (important)
2022-03-04 00:00:00
ubuntu
ubuntu
JSON Schema vulnerability
2023-05-24 00:00:00
huntr
huntr
Prototype Pollution in kriszyp/json-schema
2021-10-03 13:08:43
Inefficient Regular Expression Complexity in chalk/ansi-regex
2021-09-09 11:25:39
cnvd
cnvd
json-schema has an unspecified vulnerability
2021-11-16 00:00:00
cgr
cgr
CVE-2021-3807 vulnerabilities
2024-05-19 03:07:16

0.012 Low

EPSS

Percentile

85.6%

JSON
Related for ELSA-2021-5171
nessus36rocky4osv18redhat6almalinux3oraclelinux2ibm32openvas14fedora3archlinux3mageia2altlinux1nodejsblog1freebsd1redhatcve6nvd6prion7debiancve7cvelist6cve7ubuntucve7nodejs2veracode6github5debian2hackerone3alpinelinux2suse2ubuntu1huntr2cnvd1cgr1