Description
json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| kriszyp | kriszyp/json-schema | unspecified – ≤ 0.3.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | node-json-schema | 0.4.0+~7.0.9-1 | — |
| Debian 13 | node-json-schema | 0.4.0+~7.0.9-1 | — |
| Debian 12 | node-json-schema | 0.4.0+~7.0.9-1 | — |
| Debian 10 | node-json-schema | 0.2.3-1+deb10u1 | DLA-3228-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | node-json-schema | 0.2.3-1+deb10u1build0.20.04.1 | USN-6103-1 |
| Ubuntu 18.04 LTS | node-json-schema | 0.2.3-1+deb10u1build0.18.04.1 | USN-6103-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | nodejs +3 | 1:12.22.12-1.module+el8.6.0+15324+1f2c5d8d | RHSA-2022:0350, RHSA-2021:5171, RHEA-2022:5139 |
| RHEL 8 | nodejs-nodemon | 2.0.3-1.module+el8.4.0+11732+c668cc9f | RHSA-2022:0350, RHSA-2021:5171, RHEA-2022:5139 |
| RHEL 8 | nodejs-packaging | 17-3.module+el8.1.0+3369+37ae6a45 | RHSA-2022:0350, RHSA-2021:5171, RHEA-2022:5139 |
| RHEL 8 | npm | 1:6.14.15-1.14.18.2.2.module+el8.5.0+13644+8d46dafd | RHSA-2022:0350, RHSA-2021:5171, RHEA-2022:5139 |
| RHEL 3 | rh-nodejs12-nodejs +2 | 12.22.12-2.el7 | RHSA-2022:4914 |
| RHEL 3 | rh-nodejs12-npm | 6.14.16-12.22.12.2.el7 | RHSA-2022:4914 |
| RHEL 3 | rh-nodejs14-nodejs +2 | 14.18.2-1.el7 | RHSA-2022:0041 |
| RHEL 3 | rh-nodejs14-nodejs-nodemon | 2.0.3-6.el7 | RHSA-2022:0041 |
| RHEL 3 | rh-nodejs14-npm | 6.14.15-14.18.2.1.el7 | RHSA-2022:0041 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8.4 EUS | nodejs +3 | 1:12.22.12-1.module+el8.4.0+15323+4d1cc445 | RHSA-2022:0246, RHEA-2022:5615 |
| RHEL 8.4 EUS | nodejs-nodemon | 2.0.3-1.module+el8.4.0+11732+c668cc9f | RHSA-2022:0246, RHEA-2022:5615 |
| RHEL 8.4 EUS | nodejs-packaging | 17-3.module+el8.1.0+3369+37ae6a45 | RHSA-2022:0246, RHEA-2022:5615 |
| RHEL 8.4 EUS | npm | 1:6.14.15-1.14.18.2.2.module+el8.4.0+13643+6c0ebf22 | RHSA-2022:0246, RHEA-2022:5615 |
| RHEL 8.2 EUS | nodejs +3 | 1:12.22.12-1.module+el8.2.0+15322+a70ca0ab | RHEA-2022:5221 |
| RHEL 8.2 EUS | nodejs-nodemon | 1.18.3-1.module+el8.1.0+3369+37ae6a45 | RHEA-2022:5221 |
| RHEL 8.2 EUS | nodejs-packaging | 17-3.module+el8.1.0+3369+37ae6a45 | RHEA-2022:5221 |
| RHEL 8.2 EUS | npm | 1:6.14.16-1.12.22.12.1.module+el8.2.0+15322+a70ca0ab | RHEA-2022:5221 |
| RHEL 8.1 E4S | nodejs +3 | 1:12.22.12-1.module+el8.1.0+15296+87b2f6ad | RHEA-2022:4925 |
| RHEL 8.1 E4S | nodejs-nodemon | 1.18.3-1.module+el8.1.0+3369+37ae6a45 | RHEA-2022:4925 |
| RHEL 8.1 E4S | nodejs-packaging | 17-3.module+el8.1.0+3369+37ae6a45 | RHEA-2022:4925 |
| RHEL 8.1 E4S | npm | 1:6.14.16-1.12.22.12.1.module+el8.1.0+15296+87b2f6ad | RHEA-2022:4925 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | nodejs +3 | 1:14.18.2-2.module_el8.5.0+254+b4526b16 | ALSA-2022:0350, ALSA-2021:5171 |
| AlmaLinux 8 | nodejs-nodemon | 2.0.15-1.module_el8.5.0+2605+45d748af | ALSA-2022:0350, ALSA-2021:5171 |
| AlmaLinux 8 | nodejs-packaging | 23-3.module_el8.4.0+2522+3bd42762 | ALSA-2022:0350, ALSA-2021:5171 |
| AlmaLinux 8 | npm | 1:6.14.15-1.14.18.2.2.module_el8.5.0+254+b4526b16 | ALSA-2022:0350, ALSA-2021:5171 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | nodejs | 1:14.18.2-2.module+el8.5.0+733+de4fee6c | RLSA-2022:0350, RLSA-2021:5171 |
| Rocky Linux 8 | nodejs-nodemon | 2.0.15-1.module+el8.5.0+721+4c107270 | RLSA-2022:0350, RLSA-2021:5171 |
| Rocky Linux 8 | nodejs-packaging | 23-3.module+el8.3.0+100+234774f7 | RLSA-2022:0350, RLSA-2021:5171 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | grafana | 9.5.1-150200.3.41.3 | SUSE-SU-2023:2575-1, SUSE-RU-2024:0511-1 |
| SLES 15 SP4 | grafana | 9.5.1-150200.3.41.3 | SUSE-SU-2023:2575-1 |
| SLES 15 SP3 | nodejs12 | 12.22.10-4.29.3 | SUSE-SU-2022:0657-1 |
| SLES 15 SP3 | nodejs14 | 14.19.0-15.27.1 | SUSE-SU-2022:0715-1 |
| SLES 15 SP2 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLES 15 SP2 | nodejs-common | 2.0-3.4.1 | SUSE-SU-2022:0704-1 |
| SLES 15 SP2 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| SLES 15 SP2 | nodejs12 | 12.22.10-4.29.3 | SUSE-SU-2022:0657-1 |
| SLES 15 SP2 | nodejs14 | 14.19.0-15.27.1 | SUSE-SU-2022:0715-1 |
| SLES 15 SP2 | nodejs8 | 8.17.0-10.19.2 | SUSE-SU-2022:0704-1 |
| SLES 15 SP1 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLES 15 SP1 | nodejs-common | 2.0-3.4.1 | SUSE-SU-2022:0704-1 |
| SLES 15 SP1 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| SLES 15 SP1 | nodejs8 | 8.17.0-3.54.2 | SUSE-SU-2022:0563-1 |
Show 20 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 | nodejs-common | 2.0-3.4.1 | SUSE-SU-2022:0704-1 |
| SLES 15 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| SLES 15 | nodejs8 | 8.17.0-3.54.2 | SUSE-SU-2022:0563-1 |
| SLES 12 | nodejs10 | 10.24.1-1.46.1 | SUSE-SU-2022:0570-1 |
| SLES 12 | nodejs12 | 12.22.10-1.42.2 | SUSE-SU-2022:0531-1 |
| SLES 12 | nodejs14 | 14.19.0-6.24.1 | SUSE-SU-2022:0569-1 |
| SLES for SAP 15 SP2 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLES for SAP 15 SP2 | nodejs-common | 2.0-3.4.1 | SUSE-SU-2022:0704-1 |
| SLES for SAP 15 SP2 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| SLES for SAP 15 SP2 | nodejs12 | 12.22.10-4.29.3 | SUSE-SU-2022:0657-1 |
| SLES for SAP 15 SP2 | nodejs14 | 14.19.0-15.27.1 | SUSE-SU-2022:0715-1 |
| SLES for SAP 15 SP2 | nodejs8 | 8.17.0-10.19.2 | SUSE-SU-2022:0704-1 |
| SLES for SAP 15 SP1 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLES for SAP 15 SP1 | nodejs-common | 2.0-3.4.1 | SUSE-SU-2022:0704-1 |
| SLES for SAP 15 SP1 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| SLES for SAP 15 SP1 | nodejs8 | 8.17.0-3.54.2 | SUSE-SU-2022:0563-1 |
| SLES for SAP 15 | nodejs-common | 2.0-3.4.1 | SUSE-SU-2022:0704-1 |
| SLES for SAP 15 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| SLES for SAP 15 | nodejs8 | 8.17.0-3.54.2 | SUSE-SU-2022:0563-1 |
| SLE HPC 15 SP2 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLE HPC 15 SP2 | nodejs-common | 2.0-3.4.1 | SUSE-SU-2022:0704-1 |
| SLE HPC 15 SP2 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| SLE HPC 15 SP2 | nodejs12 | 12.22.10-4.29.3 | SUSE-SU-2022:0657-1 |
| SLE HPC 15 SP2 | nodejs14 | 14.19.0-15.27.1 | SUSE-SU-2022:0715-1 |
| SLE HPC 15 SP2 | nodejs8 | 8.17.0-10.19.2 | SUSE-SU-2022:0704-1 |
| SLE HPC 15 SP1 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLE HPC 15 SP1 | nodejs-common | 2.0-3.4.1 | SUSE-SU-2022:0704-1 |
| SLE HPC 15 SP1 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| SLE HPC 15 SP1 | nodejs8 | 8.17.0-3.54.2 | SUSE-SU-2022:0563-1 |
| SLE HPC 15 | nodejs-common | 2.0-3.4.1 | SUSE-SU-2022:0704-1 |
| SLE HPC 15 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| SLE HPC 15 | nodejs8 | 8.17.0-3.54.2 | SUSE-SU-2022:0563-1 |
| SUSE Manager Server Module 4.3 | golang-github-lusitaniae-apache_exporter | 1.0.0-150000.1.20.1 | SUSE-SU-2024:0487-1 |
| SUSE Manager Server 4.1 | nodejs-common | 2.0-3.4.1 | SUSE-SU-2022:0704-1 |
| SUSE Manager Server 4.1 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| SUSE Manager Server 4.1 | nodejs12 | 12.22.10-4.29.3 | SUSE-SU-2022:0657-1 |
| SUSE Manager Server 4.1 | nodejs14 | 14.19.0-15.27.1 | SUSE-SU-2022:0715-1 |
| SUSE Manager Server 4.1 | nodejs8 | 8.17.0-10.19.2 | SUSE-SU-2022:0704-1 |
| SUSE Manager Retail Branch Server 4.1 | nodejs-common | 2.0-3.4.1 | SUSE-SU-2022:0704-1 |
| SUSE Manager Retail Branch Server 4.1 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| SUSE Manager Retail Branch Server 4.1 | nodejs12 | 12.22.10-4.29.3 | SUSE-SU-2022:0657-1 |
| SUSE Manager Retail Branch Server 4.1 | nodejs14 | 14.19.0-15.27.1 | SUSE-SU-2022:0715-1 |
| SUSE Manager Retail Branch Server 4.1 | nodejs8 | 8.17.0-10.19.2 | SUSE-SU-2022:0704-1 |
| SUSE Manager Proxy Module 4.3 | golang-github-lusitaniae-apache_exporter | 1.0.0-150000.1.20.1 | SUSE-SU-2024:0487-1 |
| SUSE Manager Proxy Module 4.3 | zypp-plugin-spacewalk | 1.0.14-150000.3.35.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Proxy Module 4.2 | zypp-plugin-spacewalk | 1.0.14-150000.3.35.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Proxy 4.1 | nodejs-common | 2.0-3.4.1 | SUSE-SU-2022:0704-1 |
| SUSE Manager Proxy 4.1 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| SUSE Manager Proxy 4.1 | nodejs12 | 12.22.10-4.29.3 | SUSE-SU-2022:0657-1 |
| SUSE Manager Proxy 4.1 | nodejs14 | 14.19.0-15.27.1 | SUSE-SU-2022:0715-1 |
| SUSE Manager Proxy 4.1 | nodejs8 | 8.17.0-10.19.2 | SUSE-SU-2022:0704-1 |
| SUSE Manager Client Tools for SLE Micro 5 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools for SLE Micro 5 | dracut-saltboot | 0.1.1681904360.84ef141-150000.1.50.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools for SLE Micro 5 | uyuni-proxy-systemd-services | 4.3.10-150000.1.15.1 | SUSE-SU-2024:0487-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | dracut-saltboot | 0.1.1681904360.84ef141-159000.3.30.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | golang-github-QubitProducts-exporter_exporter | 0.4.0-159000.4.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | prometheus-blackbox_exporter | 0.24.0-159000.3.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | uyuni-proxy-systemd-services | 5.0.1-159000.3.9.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | ansible | 2.9.27-159000.3.9.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | dracut-saltboot | 0.1.1681904360.84ef141-150000.1.50.1 | SUSE-SU-2024:0196-1, SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools 15 | golang-github-QubitProducts-exporter_exporter | 0.4.0-159000.4.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | golang-github-boynux-squid_exporter | 1.6-159000.4.9.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | golang-github-lusitaniae-apache_exporter | 1.0.0-150000.1.20.1 | SUSE-SU-2024:0487-1, SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | golang-github-prometheus-prometheus | 2.45.0-150000.3.53.1 | SUSE-SU-2024:0487-1, SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | grafana | 9.5.1-150000.1.48.5 | SUSE-SU-2024:0487-1, SUSE-SU-2024:0196-1, SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools 15 | mgr-daemon | 4.3.7-150000.1.41.1 | SUSE-SU-2024:0487-1, SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools 15 | mgr-push | 5.0.1-159000.4.21.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | prometheus-blackbox_exporter | 0.24.0-159000.3.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | prometheus-postgres_exporter | 0.10.1-150000.1.17.1 | SUSE-SU-2024:0487-1, SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | python-hwdata | 2.3.5-159000.5.13.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | python-pyvmomi | 6.7.3-159000.3.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | rhnlib | 5.0.1-159000.6.30.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | spacecmd | 4.3.21-150000.3.98.1 | SUSE-SU-2024:0487-1, SUSE-SU-2024:0196-1, SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools 15 | spacewalk-client-tools | 4.3.18-150000.3.86.2 | SUSE-SU-2024:0487-1, SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | supportutils-plugin-salt | 1.2.2-159000.5.9.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | supportutils-plugin-susemanager-client | 5.0.1-159000.6.15.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | uyuni-common-libs | 4.3.8-150000.1.33.1 | SUSE-SU-2024:0196-1, SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools 15 | uyuni-proxy-systemd-services | 4.3.10-150000.1.15.1 | SUSE-SU-2024:0487-1, SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | zypp-plugin-spacewalk | 1.0.14-150000.3.35.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools 12 | golang-github-QubitProducts-exporter_exporter | 0.4.0-4.6.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | golang-github-boynux-squid_exporter | 1.6-4.9.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | golang-github-lusitaniae-apache_exporter | 1.0.0-1.21.2 | SUSE-SU-2024:0486-1, SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-alertmanager | 0.26.0-1.24.2 | SUSE-SU-2024:0486-1, SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-node_exporter | 1.5.0-4.15.4 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-prometheus | 2.45.0-1.50.2 | SUSE-SU-2024:0486-1, SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-promu | 0.14.0-4.12.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | grafana | 9.5.1-1.48.1 | SUSE-SU-2024:0486-1, SUSE-SU-2024:0191-1, SUSE-SU-2023:2579-1 |
| SUSE Manager Client Tools 12 | kiwi-desc-saltboot | 0.1.1687520761.cefb248-4.15.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | mgr-daemon | 4.3.7-1.41.1 | SUSE-SU-2024:0486-1, SUSE-SU-2023:2579-1 |
| SUSE Manager Client Tools 12 | mgr-push | 5.0.1-4.21.4 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | prometheus-blackbox_exporter | 0.24.0-3.6.3 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | prometheus-postgres_exporter | 0.10.1-1.17.2 | SUSE-SU-2024:0486-1, SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | python-hwdata | 2.3.5-15.12.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | rhnlib | 5.0.1-24.30.3 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | spacecmd | 4.3.21-38.121.1 | SUSE-SU-2024:0486-1, SUSE-SU-2024:0191-1, SUSE-SU-2023:2579-1 |
| SUSE Manager Client Tools 12 | spacewalk-client-tools | 4.3.18-52.95.2 | SUSE-SU-2024:0486-1 |
| SUSE Manager Client Tools 12 | supportutils-plugin-salt | 1.2.2-9.9.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | supportutils-plugin-susemanager-client | 5.0.1-9.15.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | system-user-grafana +1 | 1.0.0-3.7.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | uyuni-common-libs | 4.3.8-1.33.1 | SUSE-SU-2024:0191-1, SUSE-SU-2023:2579-1 |
| SUSE Manager Client Tools 12 | zypp-plugin-spacewalk | 1.0.14-30.42.1 | SUSE-SU-2023:2579-1 |
| SUSE Enterprise Storage 7 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SUSE Enterprise Storage 7 | nodejs-common | 2.0-3.4.1 | SUSE-SU-2022:0704-1 |
| SUSE Enterprise Storage 7 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| SUSE Enterprise Storage 7 | nodejs12 | 12.22.10-4.29.3 | SUSE-SU-2022:0657-1 |
| SUSE Enterprise Storage 7 | nodejs14 | 14.19.0-15.27.1 | SUSE-SU-2022:0715-1 |
| SUSE Enterprise Storage 7 | nodejs8 | 8.17.0-10.19.2 | SUSE-SU-2022:0704-1 |
| SUSE Enterprise Storage 6 | nodejs-common | 2.0-3.4.1 | SUSE-SU-2022:0704-1 |
| SUSE Enterprise Storage 6 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| SUSE Enterprise Storage 6 | nodejs8 | 8.17.0-3.54.2 | SUSE-SU-2022:0563-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | grafana | 9.3.6-1.1 | openSUSE-SU-2024:12723-1 |
| openSUSE Leap 15.5 | dracut-saltboot | 0.1.1681904360.84ef141-150000.1.50.1 | SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.5 | golang-github-lusitaniae-apache_exporter | 1.0.0-150000.1.20.1 | SUSE-SU-2024:0487-1 |
| openSUSE Leap 15.5 | grafana | 9.5.1-150200.3.41.3 | SUSE-SU-2023:2575-1, SUSE-RU-2024:0511-1 |
| openSUSE Leap 15.5 | prometheus-postgres_exporter | 0.10.1-150000.1.17.1 | SUSE-SU-2024:0487-1 |
| openSUSE Leap 15.5 | spacecmd | 4.3.21-150000.3.98.1 | SUSE-SU-2024:0487-1, SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.5 | wire | 0.5.0-150000.1.12.3 | SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.4 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.4 | dracut-saltboot | 0.1.1681904360.84ef141-150000.1.50.1 | SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.4 | grafana | 9.5.1-150200.3.41.3 | SUSE-SU-2023:2575-1 |
| openSUSE Leap 15.4 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| openSUSE Leap 15.4 | spacecmd | 4.3.21-150000.3.98.1 | SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.4 | wire | 0.5.0-150000.1.12.3 | SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.3 | nodejs10 | 10.24.1-150000.1.44.1 | SUSE-SU-2022:1717-1 |
| openSUSE Leap 15.3 | nodejs12 | 12.22.10-4.29.3 | openSUSE-SU-2022:0657-1 |
| openSUSE Leap 15.3 | nodejs14 | 14.19.0-15.27.1 | openSUSE-SU-2022:0715-1 |
| openSUSE Leap 15.3 | nodejs8 | 8.17.0-10.19.2 | openSUSE-SU-2022:0704-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | nodejs +3 | 1:14.18.2-2.module+el8.5.0+20489+261d51d3 | ELSA-2022-0350, ELSA-2021-5171 |
| Oracle Linux 8 | nodejs-nodemon | 2.0.15-1.module+el8.5.0+20457+52828f44 | ELSA-2022-0350, ELSA-2021-5171 |
| Oracle Linux 8 | nodejs-packaging | 23-3.module+el8.3.0+7818+6cd30d85 | ELSA-2022-0350, ELSA-2021-5171 |
| Oracle Linux 8 | npm | 1:6.14.15-1.14.18.2.2.module+el8.5.0+20489+261d51d3 | ELSA-2022-0350, ELSA-2021-5171 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | json-schema | < 0.4.0 | 0.4.0 | GHSA-896r-f27r-55mw |
Advisories 42
- RHSA-2022:0246 Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- ALSA-2021:5171 Moderate: nodejs:16 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2022:0350 Moderate: nodejs:14 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2022:4914 Red Hat Security Advisory: rh-nodejs12-nodejs security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2022:0350 Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHEA-2022:5615 Red Hat Enhancement Advisory: nodejs:12 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2022:0041 Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHEA-2022:5139 Red Hat Enhancement Advisory: nodejs:12 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHEA-2022:5221 Red Hat Enhancement Advisory: nodejs:12 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHEA-2022:4925 Red Hat Enhancement Advisory: nodejs:12 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2021:5171 Red Hat Security Advisory: nodejs:16 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- DLA-3228-1 node-json-schema - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-6103-1 node-json-schema vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026
- RLSA-2022:0350 Moderate: nodejs:14 security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2021:5171 Moderate: nodejs:16 security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 5, 2026
- SUSE-SU-2024:0191-1 Security Beta update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:2575-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0657-1 Security update for nodejs12 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0531-1 Security update for nodejs12 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:2579-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2024:0511-1 Recommended update for grafana SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2022:0704-1 Security update for nodejs8 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0704-1 Security update for nodejs8 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0569-1 Security update for nodejs14 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0715-1 Security update for nodejs14 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1717-1 Security update for nodejs10 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0486-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2022:0715-1 Security update for nodejs14 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:2578-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0196-1 Security Beta update for SUSE Manager Client Tools and Salt SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0570-1 Security update for nodejs10 SUSE / openSUSE Security Updates · Feb 4, 2026
- FSA-202302 Festo: Several vulnerabilities in FactoryViews CERT@VDE · Feb 2, 2026
- WID-SEC-2022-0103 Node.js: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 18, 2025
- openSUSE-SU-2022:0657-1 Security update for nodejs12 SUSE / openSUSE Security Updates · May 7, 2025
- openSUSE-SU-2024:12723-1 grafana-9.3.6-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- SUSE-SU-2022:0563-1 Security update for nodejs8 SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2024:0487-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · May 2, 2025
- WID-SEC-2023-0809 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 19, 2024
- WID-SEC-2023-0856 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 4, 2023
- WID-SEC-2023-0125 Oracle PeopleSoft: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 17, 2023
- ELSA-2022-0350 Moderate: nodejs:14 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Feb 2, 2022
- ELSA-2021-5171 Moderate: nodejs:16 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Dec 16, 2021