A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19.0.1 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.The fix for this issue in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32212 was incomplete and this new CVE is to complete the fix.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-libsUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade npmUpgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-packaging-bundler | Dec 9, 2022 | Dec 5, 2022 |
| Alpine Linux | — | Upgrade nodejs | Aug 22, 2024 | Dec 5, 2022 |
| Amazon_linux_2023 | — | Upgrade nodejs-docsUpgrade nodejs-debugsourceUpgrade v8-develUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-develUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade nodejsUpgrade nodejs-libs-debuginfo | Feb 17, 2025 | Nov 4, 2022 |
| Centos_linux | — | Upgrade nodejs-libsUpgrade nodejs-debugsourceUpgrade nodejs-full-i18nUpgrade nodejsUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-debuginfoUpgrade nodejs-develUpgrade nodejs-packaging-bundlerUpgrade nodejs-libs-debuginfo | Dec 7, 2022 | Dec 5, 2022 |
| Debian | — | Upgrade nodejs | Jan 26, 2023 | Dec 5, 2022 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | May 10, 2024 | Dec 5, 2022 |
| Oracle_linux | — | Upgrade graalvm22-ce-17-ruby-develUpgrade graalvm22-ce-11-llvm-toolchainUpgrade graalvm22-ce-17-wasmUpgrade graalvm22-ce-17-llvmUpgrade graalvm22-ce-17-llvm-toolchainUpgrade graalvm22-ce-11-native-image-llvm-backendUpgrade graalvm22-ce-17-javascriptUpgrade graalvm22-ce-17-develUpgrade nodejs-nodemonUpgrade graalvm22-ce-11-python-develUpgrade npmUpgrade graalvm22-ce-11-libpolyglotUpgrade graalvm22-ce-11-rubyUpgrade graalvm22-ce-17-python-develUpgrade graalvm22-ce-11-wasmUpgrade nodejs-develUpgrade nodejs-docsUpgrade graalvm22-ce-11-fastrUpgrade graalvm22-ce-11-espressoUpgrade graalvm22-ce-11-nodejs-develUpgrade graalvm22-ce-17-rubyUpgrade graalvm22-ce-17-native-image-llvm-backendUpgrade graalvm22-ce-17-polyglotUpgrade graalvm22-ce-17-fastrUpgrade graalvm22-ce-17-nodejs-develUpgrade graalvm22-ce-11-pythonUpgrade graalvm22-ce-17-espresso-llvmUpgrade graalvm22-ce-17-espressoUpgrade graalvm22-ce-17-libpolyglotUpgrade graalvm22-ce-11-llvmUpgrade graalvm22-ce-11Upgrade graalvm22-ce-17-toolsUpgrade graalvm22-ce-17-native-imageUpgrade graalvm22-ce-11-develUpgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade graalvm22-ce-11-native-imageUpgrade graalvm22-ce-17-nodejsUpgrade nodejsUpgrade graalvm22-ce-17Upgrade graalvm22-ce-11-jdkUpgrade graalvm22-ce-17-pythonUpgrade graalvm22-ce-11-javascriptUpgrade graalvm22-ce-11-toolsUpgrade graalvm22-ce-11-polyglotUpgrade graalvm22-ce-17-jdkUpgrade graalvm22-ce-11-nodejsUpgrade graalvm22-ce-11-espresso-llvmUpgrade nodejs-packaging-bundlerUpgrade nodejs-libsUpgrade graalvm22-ce-11-ruby-devel | Dec 8, 2022 | Nov 4, 2022 |
| Redhat_linux | — | Upgrade nodejs-libs-debuginfoUpgrade nodejs-packaging-bundlerUpgrade npmUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-libs | Dec 7, 2022 | Dec 5, 2022 |
| Rocky_linux | — | Upgrade nodejs-develUpgrade npmUpgrade nodejs-debuginfoUpgrade nodejs-libsUpgrade nodejs-debugsourceUpgrade nodejs-full-i18nUpgrade nodejs-libs-debuginfoUpgrade nodejs | Mar 12, 2024 | Dec 5, 2022 |
| Suse | — | Upgrade nodejs16-develUpgrade corepack18Upgrade nodejs16Upgrade nodejs18-develUpgrade nodejs18-docsUpgrade nodejs10-develUpgrade nodejs18Upgrade npm10Upgrade npm12Upgrade nodejs10-docsUpgrade nodejs12-docsUpgrade nodejs14-develUpgrade corepack14Upgrade nodejs14Upgrade npm16Upgrade nodejs12Upgrade nodejs12-develUpgrade npm18Upgrade nodejs16-docsUpgrade corepack16Upgrade nodejs10Upgrade npm14Upgrade nodejs14-docs | Nov 15, 2022 | Nov 14, 2022 |
| Ubuntu | — | Upgrade nodejs (Ubuntu Pro)Upgrade nodejs-dev (Ubuntu Pro)Upgrade nodejs-doc (Ubuntu Pro)Upgrade libnode64Upgrade libnode-devUpgrade nodejsUpgrade nodejs-docUpgrade libnode72 | Nov 22, 2023 | Dec 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 5, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub