Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseSUSE-SU-2022:1694-1
HistoryMay 17, 2022 - 12:00 a.m.

Security update for nodejs8 (moderate)

2022-05-1700:00:00
lists.opensuse.org
27

0.035 Low

EPSS

Percentile

91.6%

JSON

An update that fixes three vulnerabilities is now available.

Description:

This update for nodejs8 fixes the following issues:

  • CVE-2021-44906: Fixed prototype pollution in npm dependency
    (bsc#1198247).
  • CVE-2021-44907: Fixed insuficient sanitation in npm dependency
    (bsc#1197283).
  • CVE-2022-0235: Fixed passing of cookie data and sensitive headers to
    different hostnames in node-fetch-npm (bsc#1194819).

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.4:

    zypper in -t patch openSUSE-SLE-15.4-2022-1694=1

  • openSUSE Leap 15.3:

    zypper in -t patch openSUSE-SLE-15.3-2022-1694=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.4aarch64< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.aarch64.rpm
openSUSE Leap15.4ppc64le< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm
openSUSE Leap15.4s390x< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.s390x.rpm
openSUSE Leap15.4x86_64< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.x86_64.rpm
openSUSE Leap15.4noarch< - openSUSE Leap 15.4 (noarch):- openSUSE Leap 15.4 (noarch):.noarch.rpm
openSUSE Leap15.3aarch64< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.aarch64.rpm
openSUSE Leap15.3ppc64le< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm
openSUSE Leap15.3s390x< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.s390x.rpm
openSUSE Leap15.3x86_64< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.x86_64.rpm
openSUSE Leap15.3noarch< - openSUSE Leap 15.3 (noarch):- openSUSE Leap 15.3 (noarch):.noarch.rpm

Related

openvas 12
nessus 40
suse 3
ibm 40
redhatcve 3
cve 3
nvd 3
veracode 3
cvelist 3
prion 2
ubuntucve 2
redos 1
debiancve 2
githubexploit 1
redhat 32
osv 11
github 2
mageia 1
almalinux 3
rocky 3
oraclelinux 3
ubuntu 1
debian 1
huntr 1
thn 1
checkpoint_advisories 1
ics 1
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:1466-1)
2022-04-29 00:00:00
openSUSE: Security Advisory for nodejs8 (SUSE-SU-2022:1694-1)
2022-05-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1461-1)
2022-04-29 00:00:00
nessus
nessus
SUSE SLES12 Security Update : nodejs12 (SUSE-SU-2022:1466-1)
2022-04-30 00:00:00
openSUSE 15 Security Update : nodejs8 (SUSE-SU-2022:1694-1)
2023-01-20 00:00:00
SUSE SLES15 Security Update : nodejs14 (SUSE-SU-2022:1462-1)
2022-04-29 00:00:00
suse
suse
Security update for nodejs12 (important)
2022-04-28 00:00:00
Security update for nodejs14 (important)
2022-04-28 00:00:00
Security update for nodejs10 (important)
2022-05-17 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Node.js
2022-04-27 14:52:48
Security Bulletin: IBM Cognos Analytics has addressed a vulnerability (CVE-2021-44906)
2023-07-27 21:13:11
Security Bulletin: Open Source Dependency Vulnerability
2023-05-15 17:14:54
redhatcve
redhatcve
CVE-2021-44907
2022-03-18 13:43:14
CVE-2022-0235
2022-05-07 13:58:10
CVE-2021-44906
2022-03-19 23:40:42
cve
cve
CVE-2021-44907
2022-03-17 21:15:07
CVE-2021-44906
2022-03-17 16:15:07
CVE-2022-0235
2022-01-16 17:15:07
nvd
nvd
CVE-2021-44907
2022-03-17 21:15:07
CVE-2021-44906
2022-03-17 16:15:07
CVE-2022-0235
2022-01-16 17:15:07
veracode
veracode
Denial Of Service (DoS)
2022-03-18 08:39:43
Prototype Pollution
2022-03-18 02:42:04
Information Disclosure
2022-01-17 09:09:26
cvelist
cvelist
CVE-2021-44907
2022-03-17 20:43:10
CVE-2021-44906
2022-03-17 13:05:57
CVE-2022-0235 Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch
2022-01-16 00:00:00
prion
prion
Code injection
2022-03-17 16:15:00
Design/Logic Flaw
2022-01-16 17:15:00
ubuntucve
ubuntucve
CVE-2021-44906
2022-03-17 00:00:00
CVE-2022-0235
2022-01-16 00:00:00
redos
redos
ROS-20240507-05
2024-05-07 00:00:00
debiancve
debiancve
CVE-2021-44906
2022-03-17 16:15:07
CVE-2022-0235
2022-01-16 17:15:07
githubexploit
githubexploit
Exploit for Prototype Pollution in Substack Minimist
2023-10-02 15:20:35
redhat
redhat
(RHSA-2023:0050) Moderate: nodejs:14 security, bug fix, and enhancement update
2023-01-09 14:24:14
(RHSA-2023:0612) Moderate: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update
2023-02-06 19:29:10
(RHSA-2022:5928) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.6 Security update
2022-08-08 19:39:55
osv
osv
Moderate: nodejs:14 security, bug fix, and enhancement update
2023-01-09 00:00:00
Prototype Pollution in minimist
2022-03-18 00:01:09
Moderate: nodejs:14 security, bug fix, and enhancement update
2023-01-09 14:24:14
github
github
Prototype Pollution in minimist
2022-03-18 00:01:09
node-fetch forwards secure headers to untrusted sites
2022-01-21 23:55:52
mageia
mageia
Updated nodejs-minimist packages fix security vulnerability
2023-02-07 03:06:39
almalinux
almalinux
Moderate: nodejs:14 security, bug fix, and enhancement update
2023-01-09 00:00:00
Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update
2023-01-23 00:00:00
Moderate: nodejs:16 security, bug fix, and enhancement update
2022-12-15 00:00:00
rocky
rocky
nodejs:14 security, bug fix, and enhancement update
2023-01-09 14:24:14
nodejs and nodejs-nodemon security, bug fix, and enhancement update
2023-01-23 14:30:11
nodejs:16 security, bug fix, and enhancement update
2022-12-15 15:42:25
oraclelinux
oraclelinux
nodejs:14 security, bug fix, and enhancement update
2023-01-09 00:00:00
nodejs and nodejs-nodemon security, bug fix, and enhancement update
2023-01-24 00:00:00
nodejs:16 security, bug fix, and enhancement update
2022-12-16 00:00:00
ubuntu
ubuntu
Node Fetch vulnerability
2023-06-13 00:00:00
debian
debian
[SECURITY] [DLA 3222-1] node-fetch security update
2022-12-05 00:22:45
huntr
huntr
Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch
2022-01-05 19:40:17
thn
thn
Solving the indirect vulnerability enigma - fixing indirect vulnerabilities without breaking your dependency tree
2022-07-01 09:45:00
checkpoint_advisories
checkpoint_advisories
JavaScript Prototype Pollution (CVE-2020-28269; CVE-2020-28272; CVE-2020-28273; CVE-2020-28442; CVE-2020-28458; CVE-2020-28472; CVE-2020-7778; CVE-2020-8158; CVE-2020-8203; CVE-2021-25912; CVE-2021-44906)
2020-06-21 00:00:00
ics
ics
Siemens SINEC INS
2022-09-15 12:00:00

0.035 Low

EPSS

Percentile

91.6%

JSON
Related for SUSE-SU-2022:1694-1
openvas12nessus40suse3ibm40redhatcve3cve3nvd3veracode3cvelist3prion2ubuntucve2redos1debiancve2githubexploit1redhat32osv11github2mageia1almalinux3rocky3oraclelinux3ubuntu1debian1huntr1thn1checkpoint_advisories1ics1