The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19.0.1 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.The fix for this issue in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32212 was incomplete and this new CVE is to complete the fix.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejsUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-packaging-bundlerUpgrade nodejs-nodemonUpgrade nodejs-libsUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-full-i18n | Dec 9, 2022 | Dec 5, 2022 |
| Alpine Linux | — | Upgrade nodejs | Aug 22, 2024 | Dec 5, 2022 |
| Amazon_linux_2023 | — | Upgrade nodejs-libs-debuginfoUpgrade nodejsUpgrade nodejs-libsUpgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade v8-develUpgrade nodejs-docsUpgrade npm | Feb 17, 2025 | Nov 4, 2022 |
| Centos_linux | — | Upgrade nodejs-libsUpgrade nodejs-nodemonUpgrade nodejs-debugsourceUpgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-libs-debuginfoUpgrade nodejs-packaging-bundlerUpgrade nodejs-debuginfo | Dec 7, 2022 | Dec 5, 2022 |
| Debian | — | Upgrade nodejs | Jan 26, 2023 | Dec 5, 2022 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | May 10, 2024 | Dec 5, 2022 |
| Oracle_linux | — | Upgrade graalvm22-ce-11-pythonUpgrade graalvm22-ce-17-libpolyglotUpgrade graalvm22-ce-17-espresso-llvmUpgrade nodejs-packaging-bundlerUpgrade graalvm22-ce-11-jdkUpgrade graalvm22-ce-11-native-imageUpgrade nodejs-libsUpgrade graalvm22-ce-11-javascriptUpgrade graalvm22-ce-17-pythonUpgrade graalvm22-ce-17Upgrade graalvm22-ce-11-polyglotUpgrade graalvm22-ce-11-develUpgrade graalvm22-ce-17-toolsUpgrade graalvm22-ce-17-native-imageUpgrade nodejsUpgrade graalvm22-ce-17-espressoUpgrade graalvm22-ce-11-nodejsUpgrade graalvm22-ce-17-nodejsUpgrade graalvm22-ce-11-toolsUpgrade nodejs-full-i18nUpgrade graalvm22-ce-17-jdkUpgrade nodejs-packagingUpgrade graalvm22-ce-11-llvmUpgrade graalvm22-ce-11-espresso-llvmUpgrade graalvm22-ce-11Upgrade graalvm22-ce-11-ruby-develUpgrade graalvm22-ce-11-python-develUpgrade nodejs-docsUpgrade graalvm22-ce-11-wasmUpgrade graalvm22-ce-11-espressoUpgrade graalvm22-ce-17-rubyUpgrade graalvm22-ce-17-python-develUpgrade graalvm22-ce-11-rubyUpgrade graalvm22-ce-17-nodejs-develUpgrade graalvm22-ce-17-native-image-llvm-backendUpgrade graalvm22-ce-17-fastrUpgrade graalvm22-ce-17-polyglotUpgrade graalvm22-ce-11-fastrUpgrade graalvm22-ce-11-native-image-llvm-backendUpgrade graalvm22-ce-11-llvm-toolchainUpgrade graalvm22-ce-17-ruby-develUpgrade graalvm22-ce-17-javascriptUpgrade graalvm22-ce-17-llvm-toolchainUpgrade graalvm22-ce-17-llvmUpgrade graalvm22-ce-11-nodejs-develUpgrade nodejs-develUpgrade graalvm22-ce-17-develUpgrade graalvm22-ce-11-libpolyglotUpgrade npmUpgrade graalvm22-ce-17-wasmUpgrade nodejs-nodemon | Dec 8, 2022 | Nov 4, 2022 |
| Redhat_linux | — | Upgrade nodejs-libsUpgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-docsUpgrade npmUpgrade nodejs-packaging-bundlerUpgrade nodejs-develUpgrade nodejs-libs-debuginfo | Dec 7, 2022 | Dec 5, 2022 |
| Rocky_linux | — | Upgrade nodejs-develUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade nodejsUpgrade nodejs-libs-debuginfoUpgrade nodejs-debugsource | Mar 12, 2024 | Dec 5, 2022 |
| Suse | — | Upgrade nodejs10-develUpgrade nodejs14-develUpgrade nodejs18Upgrade nodejs16Upgrade nodejs18-develUpgrade nodejs16-develUpgrade nodejs10-docsUpgrade nodejs12-docsUpgrade npm12Upgrade corepack14Upgrade nodejs18-docsUpgrade nodejs14Upgrade corepack18Upgrade npm10Upgrade corepack16Upgrade nodejs10Upgrade nodejs12Upgrade nodejs16-docsUpgrade nodejs14-docsUpgrade npm16Upgrade npm14Upgrade npm18Upgrade nodejs12-devel | Nov 15, 2022 | Nov 14, 2022 |
| Ubuntu | — | Upgrade nodejsUpgrade libnode-devUpgrade libnode72Upgrade nodejs-docUpgrade libnode64Upgrade nodejs (Ubuntu Pro)Upgrade nodejs-dev (Ubuntu Pro)Upgrade nodejs-doc (Ubuntu Pro) | Nov 22, 2023 | Dec 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 5, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub