A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19.0.1 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.The fix for this issue in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32212 was incomplete and this new CVE is to complete the fix.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packaging-bundlerUpgrade nodejs-packagingUpgrade nodejsUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejs-libs | Dec 9, 2022 | Dec 5, 2022 |
| Alpine Linux | — | Upgrade nodejs | Aug 22, 2024 | Dec 5, 2022 |
| Amazon_linux_2023 | — | Upgrade nodejs-debugsourceUpgrade nodejs-develUpgrade nodejs-docsUpgrade npmUpgrade nodejs-debuginfoUpgrade v8-develUpgrade nodejs-libs-debuginfoUpgrade nodejs-libsUpgrade nodejsUpgrade nodejs-full-i18n | Feb 17, 2025 | Nov 4, 2022 |
| Centos_linux | — | Upgrade nodejs-packaging-bundlerUpgrade nodejs-develUpgrade nodejs-debuginfoUpgrade nodejs-libs-debuginfoUpgrade nodejs-docsUpgrade npmUpgrade nodejs-libsUpgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade nodejs-full-i18n | Dec 7, 2022 | Dec 5, 2022 |
| Debian | — | Upgrade nodejs | Jan 26, 2023 | Dec 5, 2022 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | May 10, 2024 | Dec 5, 2022 |
| Oracle_linux | — | Upgrade graalvm22-ce-11-ruby-develUpgrade nodejs-libsUpgrade graalvm22-ce-11-pythonUpgrade nodejs-packaging-bundlerUpgrade graalvm22-ce-17-espresso-llvmUpgrade graalvm22-ce-17-libpolyglotUpgrade graalvm22-ce-11-polyglotUpgrade graalvm22-ce-11-develUpgrade graalvm22-ce-17-espressoUpgrade nodejsUpgrade graalvm22-ce-17Upgrade graalvm22-ce-11-javascriptUpgrade graalvm22-ce-17-pythonUpgrade graalvm22-ce-11-toolsUpgrade graalvm22-ce-11-native-imageUpgrade graalvm22-ce-17-toolsUpgrade graalvm22-ce-17-native-imageUpgrade nodejs-packagingUpgrade graalvm22-ce-11-jdkUpgrade graalvm22-ce-11-espresso-llvmUpgrade graalvm22-ce-11-nodejsUpgrade graalvm22-ce-17-jdkUpgrade graalvm22-ce-11Upgrade graalvm22-ce-11-llvmUpgrade nodejs-full-i18nUpgrade graalvm22-ce-17-nodejsUpgrade graalvm22-ce-17-javascriptUpgrade graalvm22-ce-17-nodejs-develUpgrade graalvm22-ce-11-fastrUpgrade graalvm22-ce-17-ruby-develUpgrade graalvm22-ce-11-rubyUpgrade graalvm22-ce-11-python-develUpgrade graalvm22-ce-11-espressoUpgrade nodejs-docsUpgrade graalvm22-ce-11-wasmUpgrade graalvm22-ce-11-native-image-llvm-backendUpgrade graalvm22-ce-11-llvm-toolchainUpgrade nodejs-develUpgrade graalvm22-ce-17-develUpgrade graalvm22-ce-11-libpolyglotUpgrade npmUpgrade graalvm22-ce-17-wasmUpgrade nodejs-nodemonUpgrade graalvm22-ce-17-fastrUpgrade graalvm22-ce-17-polyglotUpgrade graalvm22-ce-17-native-image-llvm-backendUpgrade graalvm22-ce-17-llvm-toolchainUpgrade graalvm22-ce-17-llvmUpgrade graalvm22-ce-11-nodejs-develUpgrade graalvm22-ce-17-rubyUpgrade graalvm22-ce-17-python-devel | Dec 8, 2022 | Nov 4, 2022 |
| Redhat_linux | — | Upgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-libsUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade nodejs-packaging-bundlerUpgrade nodejs-docsUpgrade npmUpgrade nodejs-libs-debuginfo | Dec 7, 2022 | Dec 5, 2022 |
| Rocky_linux | — | Upgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-libs-debuginfoUpgrade nodejs-libsUpgrade nodejs-full-i18nUpgrade nodejs-debugsource | Mar 12, 2024 | Dec 5, 2022 |
| Suse | — | Upgrade npm14Upgrade nodejs12Upgrade npm18Upgrade npm16Upgrade corepack16Upgrade nodejs14-docsUpgrade nodejs16-docsUpgrade nodejs10Upgrade nodejs12-develUpgrade npm10Upgrade nodejs18-docsUpgrade nodejs18Upgrade nodejs16-develUpgrade nodejs14-develUpgrade nodejs14Upgrade nodejs10-develUpgrade nodejs18-develUpgrade corepack18Upgrade nodejs16Upgrade nodejs10-docsUpgrade npm12Upgrade nodejs12-docsUpgrade corepack14 | Nov 15, 2022 | Nov 14, 2022 |
| Ubuntu | — | Upgrade nodejs-dev (Ubuntu Pro)Upgrade libnode64Upgrade nodejs-doc (Ubuntu Pro)Upgrade nodejs (Ubuntu Pro)Upgrade nodejsUpgrade libnode72Upgrade nodejs-docUpgrade libnode-dev | Nov 22, 2023 | Dec 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 5, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub