High DLA-3344-1 2 CVEs

nodejs - security update

Published Feb 26, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	nodejs	10.24.0~dfsg-1~deb10u3

Vulnerabilities 2

High 8.1

CVE-2022-43548 EPSS 15%

A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19.0.1 due to an insuffi…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine

Dec 5, 2022
Medium 4.2

CVE-2023-23920

An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21.3 that could allow an…

Node.js node nodejs nodejs Debian Ubuntu Alpine

Feb 23, 2023