Skip to content
OpenAdvisories
Medium DLA-3229-1 1 CVE

node-log4js - security update

Published Dec 7, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 node-log4js 4.0.2-2+deb10u1

Vulnerabilities 1

  • Medium 5.5
    CVE-2022-21704

    Incorrect Default Permissions in log4js-node

    log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders are world-readable (in unix). This could cause problems if log files contain sensitive information. Th…

    log4js-node log4js-node js-jquery node-log4js Debian Ubuntu Azure Linux npm