Unscored DLA-3137-1 5 CVEs

nodejs - security update

Published Oct 5, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	nodejs	10.24.0~dfsg-1~deb10u2

Vulnerabilities 5

Unscored —

CVE-2021-22930 EPSS 36%

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to…

Node.js node nodejs nodejs Debian Azure Linux Alpine

Oct 7, 2021
Unscored —

CVE-2021-22939 EPSS 15%

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no …

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine

Aug 16, 2021
Unscored —

CVE-2021-22940 EPSS 14%

Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to…

Node.js node nodejs nodejs Debian Azure Linux

Aug 16, 2021
Unscored —

CVE-2022-21824 EPSS 22%

Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be pass…

Node.js node openjdk11 nodejs Debian Azure Linux Alpine

Feb 24, 2022
Unscored —

CVE-2022-32212

A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due to an insufficient IsAl…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine

Jul 14, 2022