Unscored DSA-5170-1 6 CVEs

nodejs - security update

Published Jun 27, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	nodejs	12.22.12~dfsg-1~deb11u1

Vulnerabilities 6

Unscored —

CVE-2021-22959

The parser in accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Re…

Node.js node nodejs nodejs Debian Alpine

Nov 15, 2021
Unscored —

CVE-2021-22960

The parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body of chunked requests. T…

Node.js node nodejs nodejs Debian Alpine

Nov 3, 2021
Unscored —

CVE-2021-44531

Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN …

Node.js node openjdk11 nodejs Debian Azure Linux Alpine

Feb 24, 2022
Unscored —

CVE-2021-44532 EPSS 10%

Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format. It …

Node.js node nodejs openjdk11 Debian Ubuntu Azure Linux Alpine

Feb 24, 2022
Unscored —

CVE-2021-44533

Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly…

Node.js node nodejs openjdk11 Debian Ubuntu Azure Linux Alpine

Feb 24, 2022
Unscored —

CVE-2022-21824 EPSS 22%

Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be pass…

Node.js node openjdk11 nodejs Debian Azure Linux Alpine

Feb 24, 2022