Skip to content
OpenAdvisories
Critical RHSA-2022:4796 1 CVE

Red Hat Security Advisory: nodejs:16 security update

Published Sep 14, 2024 · Updated Jul 3, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream nodejs 1:16.14.0-4.module+el8.6.0+15294+54b291d2
Red Hat · RHEL 8 enterprise_linux:8::appstream nodejs-debuginfo 1:16.14.0-4.module+el8.6.0+15294+54b291d2
Red Hat · RHEL 8 enterprise_linux:8::appstream nodejs-debugsource 1:16.14.0-4.module+el8.6.0+15294+54b291d2
Red Hat · RHEL 8 enterprise_linux:8::appstream nodejs-devel 1:16.14.0-4.module+el8.6.0+15294+54b291d2
Red Hat · RHEL 8 enterprise_linux:8::appstream nodejs-docs 1:16.14.0-4.module+el8.6.0+15294+54b291d2
Red Hat · RHEL 8 enterprise_linux:8::appstream nodejs-full-i18n 1:16.14.0-4.module+el8.6.0+15294+54b291d2
Red Hat · RHEL 8 enterprise_linux:8::appstream nodejs-nodemon 0:2.0.15-1.module+el8.6.0+15294+54b291d2
Red Hat · RHEL 8 enterprise_linux:8::appstream nodejs-packaging 0:25-1.module+el8.5.0+10992+fac5fe06
Red Hat · RHEL 8 enterprise_linux:8::appstream npm 1:8.3.1-1.16.14.0.4.module+el8.6.0+15294+54b291d2

Vulnerabilities 1

  • Critical 9.0
    CVE-2021-43616 Public exploit

    The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in pac…

    npm npm npm Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2050282
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4796.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-43616
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-43616
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-43616