CVE-2024-22019
High · 7.5CVSS
7.5
EPSS
3.2%
Published
Feb 20, 2024
CISA due date
—
Cloudanix analysis
A flaw in Node.js web servers lets attackers overwhelm the system with specially made requests, potentially making websites and services unavailable.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- Network Service
- Class
- Denial of service
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
The vulnerability allows an attacker to send HTTP requests with chunked encoding that include an unbounded number of chunk extension bytes, causing the server to read excessive data from a single connection, leading to resource exhaustion including CPU and network bandwidth.
Why it matters to the business
Attackers can disrupt Node.js HTTP servers, causing denial of service that affects availability of web applications and services, potentially leading to downtime and loss of business operations. The issue was disclosed over two years ago with a fix available in a specific commit.
How an attack unfolds
An attacker crafts an HTTP request using chunked transfer encoding with excessive or malformed chunk extensions. The server processes these without limits, exhausting resources despite timeouts and size limits. No active threat actors noted for this specific issue.
How to fix it
Upgrade to a fixed version of Node.js that includes commit 3eccdd1ae61777a381a7ac3bc0ea62443dbb50b8 or apply the patch to limit chunk extension bytes.
How to confirm the fix worked
Test the server by sending a crafted request and monitoring resource usage; verify the patch by checking the commit or version.
Typical attack path
- Identify a vulnerable Node.js HTTP server
- Craft and send a malicious chunked HTTP request with many extension bytes
- Maintain the connection to exhaust resources
- Observe service degradation or crash
How to detect it
Look for logs showing unusually long or malformed chunked requests; monitor for high CPU or bandwidth usage from single connections.
What your security team should do
- Apply the fix from commit 3eccdd1ae61777a381a7ac3bc0ea62443dbb50b8 immediately
- Monitor for unusual HTTP traffic patterns
- Implement rate limiting on connections
The record
A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service (DoS). The server reads an unbounded number of bytes from a single connection, exploiting the lack of limitations on chunk extension bytes. The issue can cause CPU and network bandwidth exhaustion, bypassing standard safeguards like timeouts and body size limits.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | nodejs | 0 | 1:18.19.1-1.module_el8.9.0+3753+4de0891b |
| AlmaLinux:8 | nodejs | 0 | 1:20.11.1-1.module_el8.9.0+3775+d8460d35 |
| AlmaLinux:8 | nodejs | 0 | 1:16.20.2-4.module_el8.9.0+3747+ead8229c |
| AlmaLinux:8 | nodejs-devel | 0 | 1:18.19.1-1.module_el8.9.0+3753+4de0891b |
| AlmaLinux:8 | nodejs-devel | 0 | 1:20.11.1-1.module_el8.9.0+3775+d8460d35 |
| AlmaLinux:8 | nodejs-devel | 0 | 1:16.20.2-4.module_el8.9.0+3747+ead8229c |
| AlmaLinux:8 | nodejs-docs | 0 | 1:18.19.1-1.module_el8.9.0+3753+4de0891b |
| AlmaLinux:8 | nodejs-docs | 0 | 1:20.11.1-1.module_el8.9.0+3775+d8460d35 |
| AlmaLinux:8 | nodejs-docs | 0 | 1:16.20.2-4.module_el8.9.0+3747+ead8229c |
| AlmaLinux:8 | nodejs-full-i18n | 0 | 1:18.19.1-1.module_el8.9.0+3753+4de0891b |
| AlmaLinux:8 | nodejs-full-i18n | 0 | 1:20.11.1-1.module_el8.9.0+3775+d8460d35 |
| AlmaLinux:8 | nodejs-full-i18n | 0 | 1:16.20.2-4.module_el8.9.0+3747+ead8229c |
| AlmaLinux:8 | nodejs-nodemon | 0 | 3.0.1-1.module_el8.8.0+3613+1ed8c91d |
| AlmaLinux:8 | nodejs-nodemon | 0 | 3.0.1-1.module_el8.9.0+3731+490e3ce5 |
| AlmaLinux:8 | nodejs-nodemon | 0 | 3.0.1-1.module_el8.8.0+3614+204d6f43 |
| AlmaLinux:8 | nodejs-packaging | 0 | 2021.06-4.module_el8.7.0+3343+ea2b7901 |
| AlmaLinux:8 | nodejs-packaging | 0 | 2021.06-4.module_el8.9.0+3684+11b9e959 |
| AlmaLinux:8 | nodejs-packaging | 0 | 26-1.module_el8.8.0+3614+204d6f43 |
| AlmaLinux:8 | nodejs-packaging-bundler | 0 | 2021.06-4.module_el8.7.0+3343+ea2b7901 |
| AlmaLinux:8 | nodejs-packaging-bundler | 0 | 2021.06-4.module_el8.9.0+3684+11b9e959 |
| AlmaLinux:8 | npm | 0 | 1:10.2.4-1.18.19.1.1.module_el8.9.0+3753+4de0891b |
| AlmaLinux:8 | npm | 0 | 1:10.2.4-1.20.11.1.1.module_el8.9.0+3775+d8460d35 |
| AlmaLinux:8 | npm | 0 | 1:8.19.4-1.16.20.2.4.module_el8.9.0+3747+ead8229c |
| AlmaLinux:9 | nodejs | 0 | 1:18.19.1-1.module_el9.3.0+59+28b95644 |
| AlmaLinux:9 | nodejs | 0 | 1:20.11.1-1.module_el9.3.0+88+29afeaa2 |
| AlmaLinux:9 | nodejs | 0 | 1:16.20.2-4.el9_3 |
| AlmaLinux:9 | nodejs-devel | 0 | 1:18.19.1-1.module_el9.3.0+59+28b95644 |
| AlmaLinux:9 | nodejs-devel | 0 | 1:20.11.1-1.module_el9.3.0+88+29afeaa2 |
| AlmaLinux:9 | nodejs-docs | 0 | 1:18.19.1-1.module_el9.3.0+59+28b95644 |
| AlmaLinux:9 | nodejs-docs | 0 | 1:20.11.1-1.module_el9.3.0+88+29afeaa2 |
| AlmaLinux:9 | nodejs-docs | 0 | 1:16.20.2-4.el9_3 |
| AlmaLinux:9 | nodejs-full-i18n | 0 | 1:18.19.1-1.module_el9.3.0+59+28b95644 |
| AlmaLinux:9 | nodejs-full-i18n | 0 | 1:20.11.1-1.module_el9.3.0+88+29afeaa2 |
| AlmaLinux:9 | nodejs-full-i18n | 0 | 1:16.20.2-4.el9_3 |
| AlmaLinux:9 | nodejs-libs | 0 | 1:16.20.2-4.el9_3 |
| AlmaLinux:9 | nodejs-nodemon | 0 | 3.0.1-1.module_el9.2.0+36+853e48f5 |
| AlmaLinux:9 | nodejs-nodemon | 0 | 3.0.1-1.module_el9.3.0+47+c33bc288 |
| AlmaLinux:9 | nodejs-packaging | 0 | 2021.06-4.module_el9.1.0+13+d9a595ea |
| AlmaLinux:9 | nodejs-packaging | 0 | 2021.06-4.module_el9.3.0+48+1cf146a1 |
| AlmaLinux:9 | nodejs-packaging-bundler | 0 | 2021.06-4.module_el9.1.0+13+d9a595ea |
| AlmaLinux:9 | nodejs-packaging-bundler | 0 | 2021.06-4.module_el9.3.0+48+1cf146a1 |
| AlmaLinux:9 | npm | 0 | 1:10.2.4-1.18.19.1.1.module_el9.3.0+59+28b95644 |
| AlmaLinux:9 | npm | 0 | 1:10.2.4-1.20.11.1.1.module_el9.3.0+88+29afeaa2 |
| AlmaLinux:9 | npm | 0 | 1:8.19.4-1.16.20.2.4.el9_3 |
| Bitnami | node | 0 | 18.19.1 |
| Bitnami | node | 21.0.0 | 21.6.2 |
| Bitnami | node-min | 0 | 18.19.1 |
| Bitnami | node-min | 21.0.0 | 21.6.2 |
| Chainguard | nodejs-16 | 0 | 16.20.2-r16 |
| Chainguard | nodejs-16-doc | 0 | 16.20.2-r15 |
| Debian:11 | nodejs | 0 | 12.22.12~dfsg-1~deb11u5 |
| Debian:12 | nodejs | 0 | No fix |
| Debian:13 | nodejs | 0 | 18.19.1+dfsg-1 |
| Debian:14 | nodejs | 0 | 18.19.1+dfsg-1 |
| Mageia:9 | nodejs | 0 | 18.19.1-1.mga9 |
| Mageia:9 | yarnpkg | 0 | 1.22.21-0.10.2.4.1.mga9 |
| Red Hat:enterprise_linux:8::appstream | nodejs | 0 | 1:16.20.2-4.module+el8.9.0+21536+8fdee1fb |
| Red Hat:enterprise_linux:8::appstream | nodejs | 0 | 1:18.19.1-1.module+el8.9.0+21387+21356dec |
| Red Hat:enterprise_linux:8::appstream | nodejs | 0 | 1:20.11.1-1.module+el8.9.0+21380+12032667 |
| Red Hat:enterprise_linux:8::appstream | nodejs-debuginfo | 0 | 1:16.20.2-4.module+el8.9.0+21536+8fdee1fb |
| Red Hat:enterprise_linux:8::appstream | nodejs-debuginfo | 0 | 1:18.19.1-1.module+el8.9.0+21387+21356dec |
| Red Hat:enterprise_linux:8::appstream | nodejs-debuginfo | 0 | 1:20.11.1-1.module+el8.9.0+21380+12032667 |
| Red Hat:enterprise_linux:8::appstream | nodejs-debugsource | 0 | 1:16.20.2-4.module+el8.9.0+21536+8fdee1fb |
| Red Hat:enterprise_linux:8::appstream | nodejs-debugsource | 0 | 1:18.19.1-1.module+el8.9.0+21387+21356dec |
| Red Hat:enterprise_linux:8::appstream | nodejs-debugsource | 0 | 1:20.11.1-1.module+el8.9.0+21380+12032667 |
| Red Hat:enterprise_linux:8::appstream | nodejs-devel | 0 | 1:16.20.2-4.module+el8.9.0+21536+8fdee1fb |
| Red Hat:enterprise_linux:8::appstream | nodejs-devel | 0 | 1:18.19.1-1.module+el8.9.0+21387+21356dec |
| Red Hat:enterprise_linux:8::appstream | nodejs-devel | 0 | 1:20.11.1-1.module+el8.9.0+21380+12032667 |
| Red Hat:enterprise_linux:8::appstream | nodejs-docs | 0 | 1:16.20.2-4.module+el8.9.0+21536+8fdee1fb |
| Red Hat:enterprise_linux:8::appstream | nodejs-docs | 0 | 1:18.19.1-1.module+el8.9.0+21387+21356dec |
| Red Hat:enterprise_linux:8::appstream | nodejs-docs | 0 | 1:20.11.1-1.module+el8.9.0+21380+12032667 |
| Red Hat:enterprise_linux:8::appstream | nodejs-full-i18n | 0 | 1:16.20.2-4.module+el8.9.0+21536+8fdee1fb |
| Red Hat:enterprise_linux:8::appstream | nodejs-full-i18n | 0 | 1:18.19.1-1.module+el8.9.0+21387+21356dec |
| Red Hat:enterprise_linux:8::appstream | nodejs-full-i18n | 0 | 1:20.11.1-1.module+el8.9.0+21380+12032667 |
| Red Hat:enterprise_linux:8::appstream | nodejs-nodemon | 0 | 0:3.0.1-1.module+el8.9.0+19741+03a9aaff |
| Red Hat:enterprise_linux:8::appstream | nodejs-nodemon | 0 | 0:3.0.1-1.module+el8.9.0+21190+5ebd2c33 |
| Red Hat:enterprise_linux:8::appstream | nodejs-nodemon | 0 | 0:3.0.1-1.module+el8.9.0+20473+c4e3d824 |
| Red Hat:enterprise_linux:8::appstream | nodejs-packaging | 0 | 0:26-1.module+el8.9.0+19858+c237a2cf |
| Red Hat:enterprise_linux:8::appstream | nodejs-packaging | 0 | 0:2021.06-4.module+el8.9.0+21190+5ebd2c33 |
| Red Hat:enterprise_linux:8::appstream | nodejs-packaging | 0 | 0:2021.06-4.module+el8.9.0+19519+e25b965a |
| Red Hat:enterprise_linux:8::appstream | nodejs-packaging-bundler | 0 | 0:2021.06-4.module+el8.9.0+21190+5ebd2c33 |
| Red Hat:enterprise_linux:8::appstream | nodejs-packaging-bundler | 0 | 0:2021.06-4.module+el8.9.0+19519+e25b965a |
| Red Hat:enterprise_linux:8::appstream | npm | 0 | 1:8.19.4-1.16.20.2.4.module+el8.9.0+21536+8fdee1fb |
| Red Hat:enterprise_linux:8::appstream | npm | 0 | 1:10.2.4-1.18.19.1.1.module+el8.9.0+21387+21356dec |
| Red Hat:enterprise_linux:8::appstream | npm | 0 | 1:10.2.4-1.20.11.1.1.module+el8.9.0+21380+12032667 |
| Red Hat:enterprise_linux:9::appstream | nodejs | 0 | 1:16.20.2-4.el9_3 |
| Red Hat:enterprise_linux:9::appstream | nodejs | 0 | 1:18.19.1-1.module+el9.3.0+21388+22892fb9 |
| Red Hat:enterprise_linux:9::appstream | nodejs | 0 | 1:20.11.1-1.module+el9.3.0+21385+bac43d5a |
| Red Hat:enterprise_linux:9::appstream | nodejs-debuginfo | 0 | 1:16.20.2-4.el9_3 |
| Red Hat:enterprise_linux:9::appstream | nodejs-debuginfo | 0 | 1:18.19.1-1.module+el9.3.0+21388+22892fb9 |
| Red Hat:enterprise_linux:9::appstream | nodejs-debuginfo | 0 | 1:20.11.1-1.module+el9.3.0+21385+bac43d5a |
| Red Hat:enterprise_linux:9::appstream | nodejs-debugsource | 0 | 1:16.20.2-4.el9_3 |
| Red Hat:enterprise_linux:9::appstream | nodejs-debugsource | 0 | 1:18.19.1-1.module+el9.3.0+21388+22892fb9 |
| Red Hat:enterprise_linux:9::appstream | nodejs-debugsource | 0 | 1:20.11.1-1.module+el9.3.0+21385+bac43d5a |
| Red Hat:enterprise_linux:9::appstream | nodejs-devel | 0 | 1:18.19.1-1.module+el9.3.0+21388+22892fb9 |
| Red Hat:enterprise_linux:9::appstream | nodejs-devel | 0 | 1:20.11.1-1.module+el9.3.0+21385+bac43d5a |
| Red Hat:enterprise_linux:9::appstream | nodejs-docs | 0 | 1:16.20.2-4.el9_3 |
| Red Hat:enterprise_linux:9::appstream | nodejs-docs | 0 | 1:18.19.1-1.module+el9.3.0+21388+22892fb9 |
| Red Hat:enterprise_linux:9::appstream | nodejs-docs | 0 | 1:20.11.1-1.module+el9.3.0+21385+bac43d5a |
| Red Hat:enterprise_linux:9::appstream | nodejs-full-i18n | 0 | 1:16.20.2-4.el9_3 |
| Red Hat:enterprise_linux:9::appstream | nodejs-full-i18n | 0 | 1:18.19.1-1.module+el9.3.0+21388+22892fb9 |
| Red Hat:enterprise_linux:9::appstream | nodejs-full-i18n | 0 | 1:20.11.1-1.module+el9.3.0+21385+bac43d5a |
| Red Hat:enterprise_linux:9::appstream | nodejs-libs | 0 | 1:16.20.2-4.el9_3 |
| Red Hat:enterprise_linux:9::appstream | nodejs-libs-debuginfo | 0 | 1:16.20.2-4.el9_3 |
| Red Hat:enterprise_linux:9::appstream | nodejs-nodemon | 0 | 0:3.0.1-1.module+el9.3.0+19762+d716bf3b |
| Red Hat:enterprise_linux:9::appstream | nodejs-nodemon | 0 | 0:3.0.1-1.module+el9.3.0.z+20478+84a9f781 |
| Red Hat:enterprise_linux:9::appstream | nodejs-packaging | 0 | 0:2021.06-4.module+el9.1.0+15718+e52ec601 |
| Red Hat:enterprise_linux:9::appstream | nodejs-packaging | 0 | 0:2021.06-4.module+el9.3.0+19518+63aad52d |
| Red Hat:enterprise_linux:9::appstream | nodejs-packaging-bundler | 0 | 0:2021.06-4.module+el9.1.0+15718+e52ec601 |
| Red Hat:enterprise_linux:9::appstream | nodejs-packaging-bundler | 0 | 0:2021.06-4.module+el9.3.0+19518+63aad52d |
| Red Hat:enterprise_linux:9::appstream | npm | 0 | 1:8.19.4-1.16.20.2.4.el9_3 |
| Red Hat:enterprise_linux:9::appstream | npm | 0 | 1:10.2.4-1.18.19.1.1.module+el9.3.0+21388+22892fb9 |
| Red Hat:enterprise_linux:9::appstream | npm | 0 | 1:10.2.4-1.20.11.1.1.module+el9.3.0+21385+bac43d5a |
| Red Hat:rhel_eus:8.6::appstream | nodejs | 0 | 1:16.20.2-4.module+el8.6.0+21547+94389150 |
| Red Hat:rhel_eus:8.6::appstream | nodejs-debuginfo | 0 | 1:16.20.2-4.module+el8.6.0+21547+94389150 |
| Red Hat:rhel_eus:8.6::appstream | nodejs-debugsource | 0 | 1:16.20.2-4.module+el8.6.0+21547+94389150 |
| Red Hat:rhel_eus:8.6::appstream | nodejs-devel | 0 | 1:16.20.2-4.module+el8.6.0+21547+94389150 |
| Red Hat:rhel_eus:8.6::appstream | nodejs-docs | 0 | 1:16.20.2-4.module+el8.6.0+21547+94389150 |
| Red Hat:rhel_eus:8.6::appstream | nodejs-full-i18n | 0 | 1:16.20.2-4.module+el8.6.0+21547+94389150 |
| Red Hat:rhel_eus:8.6::appstream | nodejs-nodemon | 0 | 0:3.0.1-1.module+el8.6.0+19765+366b9144 |
| Red Hat:rhel_eus:8.6::appstream | nodejs-packaging | 0 | 0:26-1.module+el8.6.0+19856+c0c87259 |
| Red Hat:rhel_eus:8.6::appstream | npm | 0 | 1:8.19.4-1.16.20.2.4.module+el8.6.0+21547+94389150 |
| Red Hat:rhel_eus:8.8::appstream | nodejs | 0 | 1:16.20.2-4.module+el8.8.0+21546+ecd4bb56 |
| Red Hat:rhel_eus:8.8::appstream | nodejs | 0 | 1:18.19.1-1.module+el8.8.0+21592+14a8b93e |
| Red Hat:rhel_eus:8.8::appstream | nodejs-debuginfo | 0 | 1:16.20.2-4.module+el8.8.0+21546+ecd4bb56 |
| Red Hat:rhel_eus:8.8::appstream | nodejs-debuginfo | 0 | 1:18.19.1-1.module+el8.8.0+21592+14a8b93e |
| Red Hat:rhel_eus:8.8::appstream | nodejs-debugsource | 0 | 1:16.20.2-4.module+el8.8.0+21546+ecd4bb56 |
| Red Hat:rhel_eus:8.8::appstream | nodejs-debugsource | 0 | 1:18.19.1-1.module+el8.8.0+21592+14a8b93e |
| Red Hat:rhel_eus:8.8::appstream | nodejs-devel | 0 | 1:16.20.2-4.module+el8.8.0+21546+ecd4bb56 |
| Red Hat:rhel_eus:8.8::appstream | nodejs-devel | 0 | 1:18.19.1-1.module+el8.8.0+21592+14a8b93e |
| Red Hat:rhel_eus:8.8::appstream | nodejs-docs | 0 | 1:16.20.2-4.module+el8.8.0+21546+ecd4bb56 |
| Red Hat:rhel_eus:8.8::appstream | nodejs-docs | 0 | 1:18.19.1-1.module+el8.8.0+21592+14a8b93e |
| Red Hat:rhel_eus:8.8::appstream | nodejs-full-i18n | 0 | 1:16.20.2-4.module+el8.8.0+21546+ecd4bb56 |
| Red Hat:rhel_eus:8.8::appstream | nodejs-full-i18n | 0 | 1:18.19.1-1.module+el8.8.0+21592+14a8b93e |
| Red Hat:rhel_eus:8.8::appstream | nodejs-nodemon | 0 | 0:3.0.1-1.module+el8.8.0+19764+7eed1ca3 |
| Red Hat:rhel_eus:8.8::appstream | nodejs-nodemon | 0 | 0:3.0.1-1.module+el8.8.0+19757+8ca87034 |
| Red Hat:rhel_eus:8.8::appstream | nodejs-packaging | 0 | 0:26-1.module+el8.8.0+19857+6d2a104d |
| Red Hat:rhel_eus:8.8::appstream | nodejs-packaging | 0 | 0:2021.06-4.module+el8.7.0+15582+19c314fa |
| Red Hat:rhel_eus:8.8::appstream | nodejs-packaging-bundler | 0 | 0:2021.06-4.module+el8.7.0+15582+19c314fa |
| Red Hat:rhel_eus:8.8::appstream | npm | 0 | 1:8.19.4-1.16.20.2.4.module+el8.8.0+21546+ecd4bb56 |
| Red Hat:rhel_eus:8.8::appstream | npm | 0 | 1:10.2.4-1.18.19.1.1.module+el8.8.0+21592+14a8b93e |
| Red Hat:rhel_eus:9.0::appstream | nodejs | 0 | 1:16.20.2-4.el9_0 |
| Red Hat:rhel_eus:9.0::appstream | nodejs-debuginfo | 0 | 1:16.20.2-4.el9_0 |
| Red Hat:rhel_eus:9.0::appstream | nodejs-debugsource | 0 | 1:16.20.2-4.el9_0 |
| Red Hat:rhel_eus:9.0::appstream | nodejs-docs | 0 | 1:16.20.2-4.el9_0 |
| Red Hat:rhel_eus:9.0::appstream | nodejs-full-i18n | 0 | 1:16.20.2-4.el9_0 |
| Red Hat:rhel_eus:9.0::appstream | nodejs-libs | 0 | 1:16.20.2-4.el9_0 |
| Red Hat:rhel_eus:9.0::appstream | nodejs-libs-debuginfo | 0 | 1:16.20.2-4.el9_0 |
| Red Hat:rhel_eus:9.0::appstream | npm | 0 | 1:8.19.4-1.16.20.2.4.el9_0 |
| Red Hat:rhel_eus:9.2::appstream | nodejs | 0 | 1:18.19.1-1.module+el9.2.0+21594+a052107e |
| Red Hat:rhel_eus:9.2::appstream | nodejs | 0 | 1:16.20.2-4.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | nodejs-debuginfo | 0 | 1:18.19.1-1.module+el9.2.0+21594+a052107e |
| Red Hat:rhel_eus:9.2::appstream | nodejs-debuginfo | 0 | 1:16.20.2-4.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | nodejs-debugsource | 0 | 1:18.19.1-1.module+el9.2.0+21594+a052107e |
| Red Hat:rhel_eus:9.2::appstream | nodejs-debugsource | 0 | 1:16.20.2-4.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | nodejs-devel | 0 | 1:18.19.1-1.module+el9.2.0+21594+a052107e |
| Red Hat:rhel_eus:9.2::appstream | nodejs-docs | 0 | 1:18.19.1-1.module+el9.2.0+21594+a052107e |
| Red Hat:rhel_eus:9.2::appstream | nodejs-docs | 0 | 1:16.20.2-4.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | nodejs-full-i18n | 0 | 1:18.19.1-1.module+el9.2.0+21594+a052107e |
| Red Hat:rhel_eus:9.2::appstream | nodejs-full-i18n | 0 | 1:16.20.2-4.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | nodejs-libs | 0 | 1:16.20.2-4.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | nodejs-libs-debuginfo | 0 | 1:16.20.2-4.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | nodejs-nodemon | 0 | 0:3.0.1-1.module+el9.2.0.z+19753+58118bc0 |
| Red Hat:rhel_eus:9.2::appstream | nodejs-packaging | 0 | 0:2021.06-4.module+el9.1.0+15718+e52ec601 |
| Red Hat:rhel_eus:9.2::appstream | nodejs-packaging-bundler | 0 | 0:2021.06-4.module+el9.1.0+15718+e52ec601 |
| Red Hat:rhel_eus:9.2::appstream | npm | 0 | 1:10.2.4-1.18.19.1.1.module+el9.2.0+21594+a052107e |
| Red Hat:rhel_eus:9.2::appstream | npm | 0 | 1:8.19.4-1.16.20.2.4.el9_2 |
| Red Hat:rhel_software_collections:3::el7 | rh-nodejs14-nodejs | 0 | 0:14.21.3-6.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-nodejs14-nodejs-debuginfo | 0 | 0:14.21.3-6.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-nodejs14-nodejs-devel | 0 | 0:14.21.3-6.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-nodejs14-nodejs-docs | 0 | 0:14.21.3-6.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-nodejs14-nodejs-full-i18n | 0 | 0:14.21.3-6.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-nodejs14-npm | 0 | 0:6.14.18-14.21.3.6.el7 |
| Rocky Linux:8 | nodejs | 0 | 1:16.20.2-4.module+el8.9.0+1760+903d54b9 |
| Rocky Linux:8 | nodejs | 0 | 1:18.19.1-1.module+el8.9.0+1768+6b454dc0 |
| Rocky Linux:8 | nodejs | 0 | 1:20.11.1-1.module+el8.9.0+1776+addd4aec |
| Rocky Linux:8 | nodejs-nodemon | 0 | 0:3.0.1-1.module+el8.8.0+1459+02651ab6 |
| Rocky Linux:8 | nodejs-packaging | 0 | 0:26-1.module+el8.8.0+1461+f50bb75a |
| Rocky Linux:8 | nodejs-packaging | 0 | 0:2021.06-4.module+el8.7.0+1072+5b168780 |
| Rocky Linux:9 | nodejs | 0 | 1:16.20.2-4.el9_3 |
| Rocky Linux:9 | nodejs-nodemon | 0 | 0:3.0.1-1.module+el9.2.0+15226+de336927 |
| Rocky Linux:9 | nodejs-nodemon | 0 | 0:3.0.1-1.module+el9.6.0+32322+a8b1fd01 |
| Rocky Linux:9 | nodejs-packaging | 0 | 0:2021.06-4.module+el9.2.0+15226+de336927 |
| Rocky Linux:9 | nodejs-packaging | 0 | 0:2021.06-4.module+el9.5.0+31770+0da7192d |
| SUSE:Enterprise Storage 7.1 | nodejs12 | 0 | 12.22.12-150200.4.56.1 |
| SUSE:Enterprise Storage 7.1 | nodejs14 | 0 | 14.21.3-150200.15.55.1 |
| SUSE:Enterprise Storage 7.1 | nodejs16 | 0 | 16.20.2-150300.7.33.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | nodejs12 | 0 | 12.22.12-150200.4.56.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | nodejs14 | 0 | 14.21.3-150200.15.55.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | nodejs12 | 0 | 12.22.12-150200.4.56.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | nodejs14 | 0 | 14.21.3-150200.15.55.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | nodejs16 | 0 | 16.20.2-150300.7.33.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | nodejs16 | 0 | 16.20.2-150400.3.30.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | nodejs18 | 0 | 18.19.1-150400.9.18.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | nodejs16 | 0 | 16.20.2-150400.3.30.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | nodejs18 | 0 | 18.19.1-150400.9.18.2 |
| SUSE:Linux Enterprise Module for Web and Scripting 12 | nodejs16 | 0 | 16.20.2-8.39.1 |
| SUSE:Linux Enterprise Module for Web and Scripting 12 | nodejs18 | 0 | 18.19.1-8.18.1 |
| SUSE:Linux Enterprise Module for Web and Scripting 15 SP5 | nodejs18 | 0 | 18.19.1-150400.9.18.2 |
| SUSE:Linux Enterprise Module for Web and Scripting 15 SP5 | nodejs20 | 0 | 20.11.1-150500.11.6.1 |
Related vulnerabilities
- CVE-2025-6965 There exists a vulnerability in SQLite versions before 3.50.2 where the number of… Also affects nodejs
- CVE-2025-23085 A memory leak could occur when a remote peer abruptly closes the socket without sending a… Also affects nodejs
- CVE-2025-23083 With the aid of the diagnostics_channel utility, an event can be hooked into whenever a… Also affects nodejs
- CVE-2025-22150 Undici is an HTTP/1.1 client. Also affects nodejs
- CVE-2023-39333 Maliciously crafted export names in an imported WebAssembly module can inject JavaScript… Also affects nodejs
- CVE-2023-46809 Node.js versions which bundle an unpatched version of OpenSSL or run against a… Also affects nodejs
- CVE-2024-36137 A vulnerability has been identified in Node.js, affecting users of the experimental… Also affects nodejs
- CVE-2024-22018 A vulnerability has been identified in Node.js, affecting users of the experimental… Also affects nodejs