Skip to content
OpenAdvisories
High · 7.5 CVE-2022-36127 EUVD-2022-6291GHSA-8gpg-466c-5cpj

Service unavailability impact in NodeJS agent(version <= 0.5.0)

Published Jul 18, 2022 · Updated Aug 3, 2024 · Assigned by apache

Description

A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has this agent installed to be unavailable if the OAP is unhealthy and NodeJS agent can't establish the connection.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache SkyWalking NodeJS Agent Apache SkyWalking NodeJS Agent – ≤ 0.5.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm skywalking-backend-js < 0.5.1 0.5.1 GHSA-8gpg-466c-5cpj

References