nodejs is vulnerable to arbitrary code execution. An attacker can inject and execute malicious name constraints When the library use string format to check the validity of the peer certificates against hostname.
hackerone.com/reports/1429694
nodejs.org/en/blog/vulnerability/jan-2022-security-releases/
secdb.alpinelinux.org/edge/community.yaml
secdb.alpinelinux.org/edge/main.yaml
secdb.alpinelinux.org/v3.15/main.yaml
security.netapp.com/advisory/ntap-20220325-0007/
www.debian.org/security/2022/dsa-5170
www.oracle.com/security-alerts/cpuapr2022.html
www.oracle.com/security-alerts/cpujul2022.html