Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejsUpgrade npmUpgrade nodejs-nodemonUpgrade nodejs-devel | May 4, 2022 | Oct 7, 2021 |
| Alpine Linux | — | Upgrade nodejs-currentUpgrade nodejs | Aug 22, 2024 | Oct 7, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 7, 2021 |
| Centos_linux | — | Upgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-develUpgrade npm | Sep 22, 2021 | Sep 21, 2021 |
| Debian | — | Upgrade nodejs | Oct 7, 2022 | Oct 7, 2021 |
| Freebsd | — | Upgrade node14Upgrade node | Nov 4, 2022 | Sep 21, 2021 |
| Gentoo Linux | — | Upgrade net-dns/c-ares.Upgrade net-libs/nodejs. | Jan 8, 2024 | Oct 7, 2021 |
| Oracle Solaris | — | Upgrade runtime/nodejs to version 14.17.6-11.4.38.0.1.101.2 on Solaris 11.4Upgrade runtime/nodejs/nodejs-16 to version 16.11.1-11.4.39.0.1.107.2 on Solaris 11.4Upgrade runtime/nodejs/nodejs-14 to version 14.17.6-11.4.38.0.1.101.2 on Solaris 11.4Upgrade runtime/nodejs/nodejs-12 to version 12.22.5-11.4.38.0.1.101.2 on Solaris 11.4 | Nov 17, 2021 | Nov 17, 2021 |
| Oracle_linux | — | Upgrade nodejs-docsUpgrade nodejs-develUpgrade npmUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade nodejs-packaging | Sep 23, 2021 | Jul 29, 2021 |
| Redhat_linux | — | Upgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade nodejsUpgrade nodejs-devel | Sep 22, 2021 | Sep 21, 2021 |
| Rocky_linux | — | Upgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-debugsourceUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-debuginfo | Mar 12, 2024 | Oct 7, 2021 |
| Suse | — | Upgrade nodejs8-docsUpgrade npm14Upgrade nodejs12Upgrade nodejs14-develUpgrade nodejs8Upgrade nodejs10-docsUpgrade nodejs10Upgrade npm12Upgrade nodejs8-develUpgrade nodejs12-develUpgrade nodejs10-develUpgrade npm10Upgrade nodejs14Upgrade nodejs14-docsUpgrade npm8Upgrade nodejs12-docs | Aug 21, 2021 | Aug 20, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Oct 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub