CVE-2021-44906 — Prototype Pollution in minimist

Description

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	node-minimist	1.2.6+~cs5.3.2-1	—
Debian 13	node-minimist	1.2.6+~cs5.3.2-1	—
Debian 12	node-minimist	1.2.6+~cs5.3.2-1	—

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 26.10	node-minimist	No fix yet	—
Ubuntu 26.04 LTS	node-minimist	No fix yet	—
Ubuntu 25.10	node-minimist	No fix yet	—
Ubuntu 24.04 LTS	node-minimist	No fix yet	—
Ubuntu 22.04 LTS	node-minimist	No fix yet	—

Show 3 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu 20.04 LTS	node-minimist	No fix yet	—
Ubuntu 18.04 LTS	node-minimist	No fix yet	—
Ubuntu 16.04 LTS	node-minimist	No fix yet	—

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 9	nodejs +3	1:16.18.1-3.el9_1	RHSA-2023:0321
RHEL 9	nodejs-nodemon	2.0.20-2.el9_1	RHSA-2023:0321
RHEL 9	npm	1:8.19.2-1.16.18.1.3.el9_1	RHSA-2023:0321
RHEL 8	nodejs +3	1:14.21.1-2.module+el8.7.0+17528+a329cd47	RHSA-2023:0050, RHSA-2022:9073
RHEL 8	nodejs-nodemon	2.0.20-2.module+el8.7.0+17412+bb0e4a6b	RHSA-2023:0050, RHSA-2022:9073
RHEL 8	nodejs-packaging	23-3.module+el8.3.0+6519+9f98ed83	RHSA-2023:0050, RHSA-2022:9073
RHEL 8	npm	1:6.14.17-1.14.21.1.2.module+el8.7.0+17528+a329cd47	RHSA-2023:0050, RHSA-2022:9073
RHEL 3	rh-nodejs12-nodejs +2	12.22.12-2.el7	RHSA-2022:4914
RHEL 3	rh-nodejs12-npm	6.14.16-12.22.12.2.el7	RHSA-2022:4914
RHEL 3	rh-nodejs14-nodejs +2	14.20.1-2.el7	RHSA-2023:0612, RHSA-2022:7044
RHEL 3	rh-nodejs14-nodejs-full-i18n	14.21.1-3.el7	RHSA-2023:0612
RHEL 3	rh-nodejs14-nodejs-nodemon	2.0.20-2.el7	RHSA-2023:0612
RHEL 3	rh-nodejs14-npm	6.14.17-14.20.1.2.el7	RHSA-2023:0612, RHSA-2022:7044

Show 5 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Red Hat Single Sign On 7	rh-sso7-keycloak +1	18.0.6-1.redhat_00001.1.el7sso	RHSA-2023:1045, RHSA-2023:1044, RHSA-2023:1043
RHEL 8.6 EUS	nodejs +3	1:14.21.3-1.module+el8.6.0+18532+cbe6f646	RHSA-2023:1742
RHEL 8.6 EUS	nodejs-nodemon	2.0.20-3.module+el8.6.0+18532+cbe6f646	RHSA-2023:1742
RHEL 8.6 EUS	nodejs-packaging	23-3.module+el8.3.0+6519+9f98ed83	RHSA-2023:1742
RHEL 8.6 EUS	npm	1:6.14.18-1.14.21.3.1.module+el8.6.0+18532+cbe6f646	RHSA-2023:1742
RHEL 8.4 EUS	nodejs +3	1:14.21.3-1.module+el8.4.0+18317+43f5ac16	RHSA-2023:1533
RHEL 8.4 EUS	nodejs-nodemon	2.0.20-3.module+el8.4.0+18317+43f5ac16	RHSA-2023:1533
RHEL 8.4 EUS	nodejs-packaging	23-3.module+el8.3.0+6519+9f98ed83	RHSA-2023:1533
RHEL 8.4 EUS	npm	1:6.14.18-1.14.21.3.1.module+el8.4.0+18317+43f5ac16	RHSA-2023:1533
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-hal-console	3.2.17-1.Final_redhat_00001.1.el7eap	RHSA-2025:1747
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-jackson-core +7	2.10.4-2.redhat_00004.1.el7eap	RHSA-2025:1747
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-jackson-databind +2	2.10.4-4.redhat_00004.1.el7eap	RHSA-2025:1747
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-jettison	1.5.2-2.redhat_00002.1.el7eap	RHSA-2025:1747
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-netty +1	4.1.63-4.Final_redhat_00002.1.el7eap	RHSA-2025:1747
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-resteasy +19	3.11.6-1.Final_redhat_00001.1.el7eap	RHSA-2025:1747
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-snakeyaml	1.33.0-1.SP1_redhat_00001.1.el7eap	RHSA-2025:1747
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-wildfly +4	7.3.12-3.GA_redhat_00002.1.el7eap	RHSA-2025:1747
Red Hat JBoss EAP 7	eap7 +1	1-18.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-FastInfoset +1	1.2.13-11.1.redhat_1.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-activemq-artemis +15	2.16.0-9.redhat_00042.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-activemq-artemis-native	1:1.0.2-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-aesh-extensions	1.8.0-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-aesh-readline	2.2.0-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-agroal +3	1.3.0-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-antlr	2.7.7-54.redhat_7.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-apache-commons-beanutils	1.9.4-1.redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-apache-commons-codec	1.15.0-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-apache-commons-collections	3.2.2-9.redhat_2.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-apache-commons-io	2.10.0-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-apache-commons-lang	3.11.0-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-apache-commons-lang2	2.6.0-1.redhat_7.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-apache-cxf +3	3.3.13-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-apache-mime4j	0.6.0-4.1.redhat_7.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-apache-sshd	2.7.0-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-artemis-native +1	1:1.0.2-3.redhat_1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-artemis-wildfly-integration	1.0.4-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-atinject	1.0.3-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-avro	1.7.6-7.1.redhat_2.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-azure-storage	8.6.6-1.1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-bouncycastle +4	1.68.0-2.redhat_00005.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-byte-buddy	1.11.12-2.redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-caffeine	2.8.8-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-cal10n	0.8.1-6.redhat_1.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-codehaus-jackson +4	1.9.13-10.redhat_00007.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-commons-logging-jboss-logging	1.0.0-1.Final_redhat_1.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-cryptacular	1.2.4-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-cxf-xjc-dv +5	3.3.1-1.1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-dom4j	2.1.3-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-ecj	1:3.26.0-1.redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-eclipse-jgit	5.13.0.202109080827-1.r_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-elytron-web +1	1.9.2-2.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-fge-btf	1.2.0-1.redhat_00007.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-fge-msg-simple	1.1.0-1.redhat_00007.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-glassfish-concurrent	1.1.1-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-glassfish-jaf	1.2.2-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-glassfish-javamail	1.6.5-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-glassfish-jsf	2.3.14-4.SP05_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-glassfish-json	1.1.6-2.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-gnu-getopt	1.0.13-6.redhat_5.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-gson	2.8.9-1.redhat_00001.1.el7eap	RHSA-2022:5894, RHSA-2022:5893, RHSA-2022:5892
Red Hat JBoss EAP 7	eap7-guava +1	30.1.0-1.1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-guava-failureaccess	1.0.1-1.redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-h2database	1.4.197-2.redhat_00004.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-hal-console	3.3.13-1.Final_redhat_00001.1.el7eap	RHSA-2022:5894, RHSA-2022:5893, RHSA-2022:5892
Red Hat JBoss EAP 7	eap7-hibernate +2	5.3.27-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-hibernate-beanvalidation-api	2.0.2-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-hibernate-commons-annotations	5.0.5-1.1.Final_redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-hibernate-search +5	5.10.7-1.1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-hibernate-validator +1	6.0.23-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-hornetq +3	2.4.8-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-httpcomponents-asyncclient	4.1.4-1.1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-httpcomponents-client	4.5.13-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-httpcomponents-core	4.4.14-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-infinispan +9	11.0.15-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-ironjacamar +8	1.5.3-2.SP1_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jackson-core +9	2.12.6-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jackson-coreutils	1.8.0-1.redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jackson-databind	2.12.6.1-2.redhat_00004.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jakarta-el	3.0.3-3.redhat_00007.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jakarta-security-enterprise-api	1.0.2-3.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jandex	2.4.2-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jansi	1.18.0-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jasypt	1.9.3-1.redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-java-classmate	1.5.1-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-javaee-jpa-spec	2.2.3-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-javaee-security-soteria +1	1.0.1-3.redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-javaewah	1.1.7-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-javapackages-tools +1	3.4.1-5.15.6.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-javassist	3.27.0-2.GA_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jaxbintros	1.0.3-1.GA_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jaxen	1.1.6-14.redhat_2.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jberet +1	1.3.9-2.SP2_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-aesh	2.4.0-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-classfilewriter	1.2.5-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-common-beans +2	2.0.1-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-dmr	1.5.1-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-ejb-api_3.2_spec +7	2.0.0-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-ejb-client	4.0.44-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-ejb3-ext-api	2.3.0-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-el-api_3.0_spec +4	2.0.0-2.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-iiop-client +1	1.0.1-3.Final_redhat_1.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-interceptors-api_1.2_spec	2.0.0-3.Final_redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-invocation	1.6.3-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-jaspi-api_1.1_spec +1	2.0.1-2.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-jsf-api_2.3_spec	3.0.0-5.SP06_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-logging	3.4.1-2.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-logmanager	2.1.18-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-marshalling +1	2.0.12-1.1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-metadata +5	13.0.0-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-modules	1.12.0-2.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-msc	1.4.12-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-openjdk-orb	8.1.4-3.Final_redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-remoting	5.0.25-1.SP1_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-remoting-jmx	3.0.4-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-saaj-api_1.3_spec	1.0.6-1.Final_redhat_1.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-saaj-api_1.4_spec	1.0.2-1.Final_redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-seam-int	7.0.0-6.GA_redhat_2.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-security-negotiation	3.0.6-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-security-xacml	2.0.8-17.Final_redhat_8.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-server-migration +2	1.10.0-18.Final_redhat_00017.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-stdio +1	1.1.0-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-threads	2.4.0-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-transaction-api_1.3_spec	2.0.0-4.Final_redhat_00005.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-transaction-spi	7.6.0-2.Final_redhat_1.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-vfs	3.2.16-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-weld-3.1-api +2	3.1.0-6.SP3_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jboss-xnio-base	3.8.7-1.SP1_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jbossws-api	1.1.2-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jbossws-common	3.3.3-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jbossws-common-tools	1.3.2-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jbossws-cxf	5.4.4-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jbossws-spi	3.3.1-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jcip-annotations	1.0.0-5.redhat_8.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jctools +1	2.1.2-1.redhat_00003.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jettison +1	1.4.0-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jgroups	4.2.15-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jgroups-azure	1.3.1-1.1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jgroups-kubernetes	1.0.16-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-joda-time	2.9.7-2.redhat_1.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-json-patch	1.9.0-1.redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jsonb-spec	1.0.2-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jsoup	1.14.2-1.redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-jul-to-slf4j-stub	1.0.1-7.Final_redhat_3.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-log4j	2.17.1-2.redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-log4j-jboss-logmanager	1.2.2-1.Final_redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-log4j2-jboss-logmanager	1.0.0-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-lucene-core +7	5.5.5-3.redhat_2.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-mod_cluster	1.4.4-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-mustache-java +1	0.9.6-1.1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-narayana +10	5.11.4-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-neethi	3.1.1-1.1.redhat_1.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-netty +27	4.1.77-1.Final_redhat_00001.1.el7eap	RHSA-2022:5894, RHSA-2022:5893, RHSA-2022:5892
Red Hat JBoss EAP 7	eap7-netty-tcnative	2.0.52-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-netty-transport-native-epoll	4.1.77-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-netty-xnio-transport	0.1.9-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-objectweb-asm	9.1.0-1.redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-opensaml +13	3.3.1-1.1.redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-picketbox +1	5.0.3-10.Final_redhat_00009.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-picketbox-commons	1.0.0-4.final_redhat_5.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-picketlink-api +7	2.5.5-21.SP12_redhat_00011.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-picketlink-bindings +1	2.5.5-26.SP12_redhat_00014.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-protostream	4.3.5-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-reactive-streams	1.0.3-2.redhat_00003.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-reactivex-rxjava	3.0.9-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-reactivex-rxjava2	2.2.20-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-resteasy +18	3.15.3-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-shibboleth-java-support	7.3.0-1.1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-slf4j +2	1.7.22-4.1.redhat_2.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-snakeyaml	1.29.0-1.redhat_00001.2.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-stax-ex	1.8.3-2.redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-stax2-api	4.2.1-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-staxmapper	1.3.0-2.Final_redhat_1.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-sun-istack-commons +2	3.0.10-1.1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-sun-saaj-1.3-impl	1.3.16-18.SP1_redhat_6.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-sun-saaj-1.4-impl	1.4.1-1.SP1_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-sun-ws-metadata-2.0-api	1.0.0-7.MR1_redhat_8.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-taglibs-standard-impl +3	1.2.6-2.1.RC1_redhat_1.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-txw2 +7	2.3.3-4.1.b02_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-undertow	2.2.18-2.SP2_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-undertow-jastow +1	2.0.9-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-undertow-js	1.0.2-2.Final_redhat_1.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-vdx +2	1.1.6-2.redhat_1.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-velocity +1	2.3.0-1.redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-weld-cdi-2.0-api	2.0.2-2.redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-weld-ejb +6	3.1.6-1.1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-wildfly +2	7.4.6-5.GA_redhat_00002.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-wildfly-client-config	1.0.1-2.1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-wildfly-common	1.5.4-1.1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-wildfly-discovery +1	1.2.1-1.1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-wildfly-elytron +1	1.15.13-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-wildfly-http-client +4	1.1.12-1.SP1_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-wildfly-naming-client	1.0.14-1.1.Final_redhat_00001.1.el9eap	RHSA-2022:5894
Red Hat JBoss EAP 7	eap7-wildfly-openssl	2.2.3-1.Final_redhat_00001.1.el9eap	RHSA-2022:5894

AlmaLinux

Errata ↗

Release	Package	Fixed in	Advisory
AlmaLinux 9	nodejs +3	1:16.18.1-3.el9_1	ALSA-2023:0321
AlmaLinux 9	nodejs-nodemon	2.0.20-2.el9_1	ALSA-2023:0321
AlmaLinux 9	npm	1:8.19.2-1.16.18.1.3.el9_1	ALSA-2023:0321
AlmaLinux 8	nodejs +3	1:14.21.1-2.module_el8.7.0+3373+a4c18c43	ALSA-2023:0050, ALSA-2022:9073
AlmaLinux 8	nodejs-nodemon	2.0.20-2.module_el8.7.0+3371+ed8c43db	ALSA-2023:0050, ALSA-2022:9073
AlmaLinux 8	nodejs-packaging	23-3.module_el8.4.0+2522+3bd42762	ALSA-2023:0050, ALSA-2022:9073
AlmaLinux 8	npm	1:6.14.17-1.14.21.1.2.module_el8.7.0+3373+a4c18c43	ALSA-2023:0050, ALSA-2022:9073

Rocky Linux

Errata ↗

Release	Package	Fixed in	Advisory
Rocky Linux 9	nodejs	1:16.18.1-3.el9_1	RLSA-2023:0321
Rocky Linux 9	nodejs-nodemon	2.0.20-2.el9_1	RLSA-2023:0321
Rocky Linux 8	nodejs	1:14.21.1-2.module+el8.7.0+1116+bd2a84b4	RLSA-2023:0050, RLSA-2022:9073
Rocky Linux 8	nodejs-nodemon	2.0.20-2.module+el8.7.0+1108+49363b0d	RLSA-2023:0050, RLSA-2022:9073
Rocky Linux 8	nodejs-packaging	23-3.module+el8.3.0+100+234774f7	RLSA-2023:0050, RLSA-2022:9073

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP3	nodejs12	12.22.12-150200.4.32.1	SUSE-SU-2022:1461-1
SLES 15 SP3	nodejs14	14.19.1-150200.15.31.1	SUSE-SU-2022:1462-1
SLES 15 SP2	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1
SLES 15 SP2	nodejs12	12.22.12-150200.4.32.1	SUSE-SU-2022:1461-1
SLES 15 SP2	nodejs14	14.19.1-150200.15.31.1	SUSE-SU-2022:1462-1
SLES 15 SP1	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1
SLES 15	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1
SLES 12	nodejs12	12.22.12-1.48.1	SUSE-SU-2022:1466-1
SLES 12	nodejs14	14.19.1-6.28.1	SUSE-SU-2022:1459-1

Show 16 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES for SAP 15 SP2	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1
SLES for SAP 15 SP2	nodejs12	12.22.12-150200.4.32.1	SUSE-SU-2022:1461-1
SLES for SAP 15 SP2	nodejs14	14.19.1-150200.15.31.1	SUSE-SU-2022:1462-1
SLES for SAP 15 SP1	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1
SLES for SAP 15	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1
SLE HPC 15 SP2	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1
SLE HPC 15 SP2	nodejs12	12.22.12-150200.4.32.1	SUSE-SU-2022:1461-1
SLE HPC 15 SP2	nodejs14	14.19.1-150200.15.31.1	SUSE-SU-2022:1462-1
SLE HPC 15 SP1	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1
SLE HPC 15	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1
SUSE Manager Server Module 4.2	inter-server-sync	0.2.2-150300.8.17.1	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	prometheus-formula	0.6.2-150300.3.14.1	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	salt-netapi-client	0.19.0-150300.3.6.1	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	smdba	1.7.10-0.150300.3.6.1	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	spacecmd	4.2.17-150300.4.21.4	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	spacewalk-backend	4.2.22-150300.4.23.1	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	spacewalk-certs-tools	4.2.16-150300.3.18.3	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	spacewalk-java	4.2.38-150300.3.35.1	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	spacewalk-utils	4.2.16-150300.3.15.5	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	spacewalk-web	4.2.27-150300.3.21.7	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	supportutils-plugin-salt	1.2.0-150300.3.3.1	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	susemanager	4.2.32-150300.3.31.1	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	susemanager-doc-indexes	4.2-150300.12.27.6	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	susemanager-docs_en	4.2-150300.12.27.1	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	susemanager-schema	4.2.22-150300.3.21.6	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	susemanager-sls	4.2.23-150300.3.25.4	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	susemanager-sync-data	4.2.12-150300.3.18.3	SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2	virtual-host-gatherer	1.0.23-150300.3.3.1	SUSE-SU-2022:2144-1
SUSE Manager Server 4.2	release-notes-susemanager	4.2.7-150300.3.44.1	SUSE-SU-2022:2146-1
SUSE Manager Server 4.1	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1
SUSE Manager Server 4.1	nodejs12	12.22.12-150200.4.32.1	SUSE-SU-2022:1461-1
SUSE Manager Server 4.1	nodejs14	14.19.1-150200.15.31.1	SUSE-SU-2022:1462-1
SUSE Manager Retail Branch Server 4.2	release-notes-susemanager-proxy	4.2.7-150300.3.31.2	SUSE-SU-2022:2146-1
SUSE Manager Retail Branch Server 4.1	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1
SUSE Manager Retail Branch Server 4.1	nodejs12	12.22.12-150200.4.32.1	SUSE-SU-2022:1461-1
SUSE Manager Retail Branch Server 4.1	nodejs14	14.19.1-150200.15.31.1	SUSE-SU-2022:1462-1
SUSE Manager Proxy Module 4.2	spacecmd	4.2.17-150300.4.21.4	SUSE-SU-2022:2144-1
SUSE Manager Proxy Module 4.2	spacewalk-backend	4.2.22-150300.4.23.1	SUSE-SU-2022:2144-1
SUSE Manager Proxy Module 4.2	spacewalk-certs-tools	4.2.16-150300.3.18.3	SUSE-SU-2022:2144-1
SUSE Manager Proxy Module 4.2	spacewalk-web	4.2.27-150300.3.21.7	SUSE-SU-2022:2144-1
SUSE Manager Proxy Module 4.2	supportutils-plugin-salt	1.2.0-150300.3.3.1	SUSE-SU-2022:2144-1
SUSE Manager Proxy 4.2	release-notes-susemanager-proxy	4.2.7-150300.3.31.2	SUSE-SU-2022:2146-1
SUSE Manager Proxy 4.1	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1
SUSE Manager Proxy 4.1	nodejs12	12.22.12-150200.4.32.1	SUSE-SU-2022:1461-1
SUSE Manager Proxy 4.1	nodejs14	14.19.1-150200.15.31.1	SUSE-SU-2022:1462-1
SUSE Enterprise Storage 7	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1
SUSE Enterprise Storage 7	nodejs12	12.22.12-150200.4.32.1	SUSE-SU-2022:1461-1
SUSE Enterprise Storage 7	nodejs14	14.19.1-150200.15.31.1	SUSE-SU-2022:1462-1
SUSE Enterprise Storage 6	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Leap 15.4	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1
openSUSE Leap 15.4	nodejs12	12.22.12-150200.4.32.1	SUSE-SU-2022:1461-1
openSUSE Leap 15.4	nodejs14	14.19.1-150200.15.31.1	SUSE-SU-2022:1462-1
openSUSE Leap 15.4	nodejs8	8.17.0-150200.10.22.1	SUSE-SU-2022:1694-1
openSUSE Leap 15.3	nodejs10	10.24.1-150000.1.44.1	SUSE-SU-2022:1717-1
openSUSE Leap 15.3	nodejs12	12.22.12-150200.4.32.1	SUSE-SU-2022:1461-1
openSUSE Leap 15.3	nodejs14	14.19.1-150200.15.31.1	SUSE-SU-2022:1462-1
openSUSE Leap 15.3	nodejs8	8.17.0-150200.10.22.1	SUSE-SU-2022:1694-1

Azure Linux

Release	Package	Fixed in	Advisory
Azure Linux 3	js-jquery	No fix yet	—

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 9	nodejs +3	1:16.18.1-3.el9_1	ELSA-2023-0321
Oracle Linux 9	nodejs-nodemon	2.0.20-2.el9_1	ELSA-2023-0321
Oracle Linux 9	npm	1:8.19.2-1.16.18.1.3.el9_1	ELSA-2023-0321
Oracle Linux 8	nodejs +3	1:14.21.1-2.module+el8.7.0+20895+79a25710	ELSA-2023-0050
Oracle Linux 8	nodejs-nodemon	2.0.20-2.module+el8.7.0+20895+79a25710	ELSA-2023-0050
Oracle Linux 8	nodejs-packaging	23-3.module+el8.3.0+7818+6cd30d85	ELSA-2023-0050
Oracle Linux 8	npm	1:6.14.17-1.14.21.1.2.module+el8.7.0+20895+79a25710	ELSA-2023-0050

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

nevermoe/CVE-2021-44906 ★ 0 · Oct 2, 2023

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
npm	minimist	>= 1.0.0, < 1.2.6	1.2.6	GHSA-xvch-5gv4-984h
npm	minimist	< 0.2.4	0.2.4	GHSA-xvch-5gv4-984h

Advisories 39

WID-SEC-2026-2923 Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye, und Jira): Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026
ALSA-2023:0321 Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2023:0050 Moderate: nodejs:14 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2022:9073 Moderate: nodejs:16 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
RHSA-2023:1742 Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 16, 2026
RHSA-2023:0612 Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
RHSA-2023:0050 Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 16, 2026
RHSA-2025:1747 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.12 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
RHSA-2022:4914 Red Hat Security Advisory: rh-nodejs12-nodejs security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 14, 2026
RHSA-2023:1533 Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:1045 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 9 Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:1044 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8 Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:1043 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7 Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:0321 Red Hat Security Advisory: nodejs and nodejs-nodemon security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2022:9073 Red Hat Security Advisory: nodejs:16 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2022:7044 Red Hat Security Advisory: rh-nodejs14-nodejs security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2022:5894 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.6 Security update. Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2022:5892 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.6 Security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2022:5893 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.6 Security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
NCSC-2026-0325 Kwetsbaarheden verholpen in Atlassian producten NCSC-NL (Netherlands) · Aug 24, 2026
WID-SEC-2022-0909 IBM DB2: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Aug 9, 2026
WID-SEC-2022-0417 Red Hat OpenShift Service Mesh: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 2, 2026
RLSA-2023:0321 Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 5, 2026
RLSA-2023:0050 Moderate: nodejs:14 security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 4, 2026
RLSA-2022:9073 Moderate: nodejs:16 security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 4, 2026
SUSE-SU-2022:2146-1 Security update for release-notes-susemanager, release-notes-susemanager-proxy SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:1694-1 Security update for nodejs8 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:1466-1 Security update for nodejs12 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:1462-1 Security update for nodejs14 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:1459-1 Security update for nodejs14 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:2144-1 Security update for SUSE Manager Server 4.2 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:1717-1 Security update for nodejs10 SUSE / openSUSE Security Updates · Feb 4, 2026
WID-SEC-2022-2133 JFrog Artifactory: Mehrere Schwachstellen in Drittanbieter-Komponenten BSI CERT-Bund (WID) · Nov 18, 2025
WID-SEC-2022-0901 Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 4, 2025
SUSE-SU-2022:1461-1 Security update for nodejs12 SUSE / openSUSE Security Updates · May 2, 2025
WID-SEC-2024-1591 Juniper JUNOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024
ELSA-2023-0321 Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jan 24, 2023
ELSA-2023-0050 Moderate: nodejs:14 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jan 9, 2023
WID-SEC-2022-2366 HCL BigFix: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 19, 2022

Prototype Pollution in minimist

Description

Fixed in Linux distributions

Debian

Ubuntu

Red Hat

AlmaLinux

Rocky Linux

SUSE

openSUSE

Azure Linux

Oracle Linux

Public exploits

GitHub 1 repository

Affected packages

Advisories 39

References