Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2025-23083 (GCVE-0-2025-23083)
Vulnerability from cvelistv5
Published
2025-01-22 01:11
Modified
2025-07-22 15:23
Severity ?
VLAI Severity ?
EPSS score ?
Summary
With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage.
This vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| NodeJS | Node |
Version: 4.0 ≤ Version: 5.0 ≤ Version: 6.0 ≤ Version: 7.0 ≤ Version: 8.0 ≤ Version: 9.0 ≤ Version: 10.0 ≤ Version: 11.0 ≤ Version: 12.0 ≤ Version: 13.0 ≤ Version: 14.0 ≤ Version: 15.0 ≤ Version: 16.0 ≤ Version: 17.0 ≤ Version: 19.0 ≤ Version: 20.0 ≤ Version: 21.0 ≤ Version: 22.0 ≤ Version: 23.0 ≤ |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-23083",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-28T04:55:27.327533Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284 Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-02-06T14:09:06.805Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2025-07-22T15:23:52.842Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://security.netapp.com/advisory/ntap-20250228-0008/"
},
{
"url": "https://www.vicarius.io/vsociety/posts/cve-2025-23083-detect-nodejs-vulnerability"
},
{
"url": "https://www.vicarius.io/vsociety/posts/cve-2025-23083-mitigate-nodejs-vulnerability"
}
],
"title": "CVE Program Container",
"x_generator": {
"engine": "ADPogram 0.0.1"
}
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Node",
"vendor": "NodeJS",
"versions": [
{
"lessThan": "4.*",
"status": "affected",
"version": "4.0",
"versionType": "semver"
},
{
"lessThan": "5.*",
"status": "affected",
"version": "5.0",
"versionType": "semver"
},
{
"lessThan": "6.*",
"status": "affected",
"version": "6.0",
"versionType": "semver"
},
{
"lessThan": "7.*",
"status": "affected",
"version": "7.0",
"versionType": "semver"
},
{
"lessThan": "8.*",
"status": "affected",
"version": "8.0",
"versionType": "semver"
},
{
"lessThan": "9.*",
"status": "affected",
"version": "9.0",
"versionType": "semver"
},
{
"lessThan": "10.*",
"status": "affected",
"version": "10.0",
"versionType": "semver"
},
{
"lessThan": "11.*",
"status": "affected",
"version": "11.0",
"versionType": "semver"
},
{
"lessThan": "12.*",
"status": "affected",
"version": "12.0",
"versionType": "semver"
},
{
"lessThan": "13.*",
"status": "affected",
"version": "13.0",
"versionType": "semver"
},
{
"lessThan": "14.*",
"status": "affected",
"version": "14.0",
"versionType": "semver"
},
{
"lessThan": "15.*",
"status": "affected",
"version": "15.0",
"versionType": "semver"
},
{
"lessThan": "16.*",
"status": "affected",
"version": "16.0",
"versionType": "semver"
},
{
"lessThan": "17.*",
"status": "affected",
"version": "17.0",
"versionType": "semver"
},
{
"lessThan": "19.*",
"status": "affected",
"version": "19.0",
"versionType": "semver"
},
{
"lessThan": "20.18.2",
"status": "affected",
"version": "20.0",
"versionType": "semver"
},
{
"lessThan": "21.*",
"status": "affected",
"version": "21.0",
"versionType": "semver"
},
{
"lessThan": "22.13.1",
"status": "affected",
"version": "22.0",
"versionType": "semver"
},
{
"lessThan": "23.6.1",
"status": "affected",
"version": "23.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. \r\n\r\nThis vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-04-30T22:25:22.434Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2025-23083",
"datePublished": "2025-01-22T01:11:30.802Z",
"dateReserved": "2025-01-10T19:05:52.771Z",
"dateUpdated": "2025-07-22T15:23:52.842Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2025-23083\",\"sourceIdentifier\":\"support@hackerone.com\",\"published\":\"2025-01-22T02:15:33.930\",\"lastModified\":\"2025-07-22T16:15:26.760\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. \\r\\n\\r\\nThis vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23.\"},{\"lang\":\"es\",\"value\":\"Con la ayuda de la utilidad diagnostics_channel, se puede conectar un evento cada vez que se crea un subproceso de trabajo. Esto no se limita solo a los trabajadores, sino que tambi\u00e9n expone a los trabajadores internos, donde se puede obtener una instancia de ellos y se puede obtener su constructor y restablecerlo para un uso malintencionado. Esta vulnerabilidad afecta a los usuarios del modelo de permisos (--permission) en Node.js v20, v22 y v23.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"support@hackerone.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N\",\"baseScore\":7.7,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.5,\"impactScore\":5.2}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-284\"}]}],\"references\":[{\"url\":\"https://nodejs.org/en/blog/vulnerability/january-2025-security-releases\",\"source\":\"support@hackerone.com\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20250228-0008/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.vicarius.io/vsociety/posts/cve-2025-23083-detect-nodejs-vulnerability\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.vicarius.io/vsociety/posts/cve-2025-23083-mitigate-nodejs-vulnerability\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://security.netapp.com/advisory/ntap-20250228-0008/\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-02-28T13:07:33.161Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-23083\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-01-28T04:55:27.327533Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-284\", \"description\": \"CWE-284 Improper Access Control\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-06T14:09:03.361Z\"}}], \"cna\": {\"metrics\": [{\"cvssV3_0\": {\"version\": \"3.0\", \"baseScore\": 7.7, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N\"}}], \"affected\": [{\"vendor\": \"NodeJS\", \"product\": \"Node\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.0\", \"lessThan\": \"4.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.0\", \"lessThan\": \"5.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.0\", \"lessThan\": \"6.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.0\", \"lessThan\": \"7.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"8.0\", \"lessThan\": \"8.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"9.0\", \"lessThan\": \"9.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"10.0\", \"lessThan\": \"10.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"11.0\", \"lessThan\": \"11.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"12.0\", \"lessThan\": \"12.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"13.0\", \"lessThan\": \"13.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"14.0\", \"lessThan\": \"14.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"15.0\", \"lessThan\": \"15.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"16.0\", \"lessThan\": \"16.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"17.0\", \"lessThan\": \"17.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"19.0\", \"lessThan\": \"19.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"20.0\", \"lessThan\": \"20.18.2\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"21.0\", \"lessThan\": \"21.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"22.0\", \"lessThan\": \"22.13.1\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"23.0\", \"lessThan\": \"23.6.1\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://nodejs.org/en/blog/vulnerability/january-2025-security-releases\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. \\r\\n\\r\\nThis vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23.\"}], \"providerMetadata\": {\"orgId\": \"36234546-b8fa-4601-9d6f-f4e334aa8ea1\", \"shortName\": \"hackerone\", \"dateUpdated\": \"2025-04-30T22:25:22.434Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-23083\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-04-30T22:25:22.434Z\", \"dateReserved\": \"2025-01-10T19:05:52.771Z\", \"assignerOrgId\": \"36234546-b8fa-4601-9d6f-f4e334aa8ea1\", \"datePublished\": \"2025-01-22T01:11:30.802Z\", \"assignerShortName\": \"hackerone\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
wid-sec-w-2025-0815
Vulnerability from csaf_certbund
Published
2025-04-15 22:00
Modified
2025-09-02 22:00
Summary
Oracle Java SE: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Die Java Platform, Standard Edition (SE) ist eine Sammlung von Java-APIs (JDK) und der Java Laufzeit Umgebung (JRE).
Angriff
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
Betroffene Betriebssysteme
- Linux
- Sonstiges
- UNIX
- Windows
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Die Java Platform, Standard Edition (SE) ist eine Sammlung von Java-APIs (JDK) und der Java Laufzeit Umgebung (JRE).",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit zu gef\u00e4hrden.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-0815 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0815.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-0815 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0815"
},
{
"category": "external",
"summary": "Oracle Critical Patch Update Advisory - April 2025 - Appendix Oracle Java SE vom 2025-04-15",
"url": "https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixJAVA"
},
{
"category": "external",
"summary": "OpenJDK Vulnerability Advisory vom 2025-04-15",
"url": "https://openjdk.org/groups/vulnerability/advisories/2025-04-15"
},
{
"category": "external",
"summary": "Change Log for Amazon Corretto 11 vom 2025-04-15",
"url": "https://github.com/corretto/corretto-11/blob/11.0.27.6.1/CHANGELOG.md"
},
{
"category": "external",
"summary": "Azul Zulu builds of OpenJDK vom 2025-04-15",
"url": "https://docs.azul.com/core/pdfs/april-2025/azul-zulu-ca-release-notes-april-2025-rev1.0.pdf"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:3852 vom 2025-04-16",
"url": "https://access.redhat.com/errata/RHSA-2025:3852"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:3856 vom 2025-04-16",
"url": "https://access.redhat.com/errata/RHSA-2025:3856"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:3853 vom 2025-04-16",
"url": "https://access.redhat.com/errata/RHSA-2025:3853"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:3849 vom 2025-04-16",
"url": "https://access.redhat.com/errata/RHSA-2025:3849"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:3854 vom 2025-04-16",
"url": "https://access.redhat.com/errata/RHSA-2025:3854"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:3855 vom 2025-04-16",
"url": "https://access.redhat.com/errata/RHSA-2025:3855"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:3844 vom 2025-04-16",
"url": "https://access.redhat.com/errata/RHSA-2025:3844"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:3845 vom 2025-04-16",
"url": "https://access.redhat.com/errata/RHSA-2025:3845"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:3846 vom 2025-04-16",
"url": "https://access.redhat.com/errata/RHSA-2025:3846"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:3847 vom 2025-04-16",
"url": "https://access.redhat.com/errata/RHSA-2025:3847"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:3848 vom 2025-04-16",
"url": "https://access.redhat.com/errata/RHSA-2025:3848"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:3857 vom 2025-04-16",
"url": "https://access.redhat.com/errata/RHSA-2025:3857"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:3850 vom 2025-04-16",
"url": "https://access.redhat.com/errata/RHSA-2025:3850"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-3852 vom 2025-04-18",
"url": "http://linux.oracle.com/errata/ELSA-2025-3852.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-3845 vom 2025-04-18",
"url": "http://linux.oracle.com/errata/ELSA-2025-3845.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-3855 vom 2025-04-18",
"url": "http://linux.oracle.com/errata/ELSA-2025-3855.html"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2025:15022-1 vom 2025-04-25",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/BRJ4ISGUWDRCC6WFUQ7DJTTNQVMYNV5Y/"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2025:15024-1 vom 2025-04-25",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/C6XNBWNLTVY24PY5AGA3UCES65X3SMQN/"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASCORRETTO8-2025-015 vom 2025-04-29",
"url": "https://alas.aws.amazon.com/AL2/ALASCORRETTO8-2025-015.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:1399-1 vom 2025-04-29",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-April/020750.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2025-2839 vom 2025-04-30",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2025-2839.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5913 vom 2025-05-02",
"url": "https://lists.debian.org/debian-security-announce/2025/msg00076.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2025-2838 vom 2025-04-30",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2025-2838.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:1429-1 vom 2025-05-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020769.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7483-1 vom 2025-05-06",
"url": "https://ubuntu.com/security/notices/USN-7483-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7484-1 vom 2025-05-06",
"url": "https://ubuntu.com/security/notices/USN-7484-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7480-1 vom 2025-05-06",
"url": "https://ubuntu.com/security/notices/USN-7480-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7481-1 vom 2025-05-06",
"url": "https://ubuntu.com/security/notices/USN-7481-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7482-1 vom 2025-05-06",
"url": "https://ubuntu.com/security/notices/USN-7482-1"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:1490-1 vom 2025-05-07",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020782.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:1487-1 vom 2025-05-07",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020797.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:1524-1 vom 2025-05-09",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020818.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:1525-1 vom 2025-05-09",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020817.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-3844 vom 2025-05-13",
"url": "https://linux.oracle.com/errata/ELSA-2025-3844.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:7508 vom 2025-05-13",
"url": "https://access.redhat.com/errata/RHSA-2025:7508"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2025:15077-1 vom 2025-05-13",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/PTNITOYWDOKJOEHSH2CU5O6OKDMZOEYZ/"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2025:15078-1 vom 2025-05-13",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/PQYOZOCMS25XBQWUFJFFM6CS5L66IC5C/"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2025-2850 vom 2025-05-14",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2025-2850.html"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2025:15080-1 vom 2025-05-13",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/YI5CZCHTIKADEFJKS6K6CGUTIV4PERYD/"
},
{
"category": "external",
"summary": "IBM Security Bulletin",
"url": "https://www.ibm.com/support/pages/node/7233415"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7233417 vom 2025-05-14",
"url": "https://www.ibm.com/support/pages/node/7233417"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7233442 vom 2025-05-16",
"url": "https://www.ibm.com/support/pages/node/7233442"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-4174 vom 2025-05-20",
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00026.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-4173 vom 2025-05-20",
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00025.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7531-1 vom 2025-05-26",
"url": "https://ubuntu.com/security/notices/USN-7531-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7533-1 vom 2025-05-26",
"url": "https://ubuntu.com/security/notices/USN-7533-1"
},
{
"category": "external",
"summary": "Hitachi Vulnerability Information HITACHI-SEC-2025-121 vom 2025-05-27",
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-121/index.html"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2025-220 vom 2025-05-31",
"url": "https://www.dell.com/support/kbdoc/000325087"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01770-1 vom 2025-05-30",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020985.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01487-1 vom 2025-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021002.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01788-1 vom 2025-06-02",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/YE6PT7ZKIRERTFFELSDUDK5DSA5US5UF/"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:8431 vom 2025-06-03",
"url": "https://access.redhat.com/errata/RHSA-2025:8431"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7235405 vom 2025-06-03",
"url": "https://www.ibm.com/support/pages/node/7235405"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01490-1 vom 2025-06-04",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021408.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01525-1 vom 2025-06-05",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021419.html"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7236063 vom 2025-06-10",
"url": "https://www.ibm.com/support/pages/node/7236063"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7235945 vom 2025-06-09",
"url": "https://www.ibm.com/support/pages/node/7235945"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7236509 vom 2025-06-12",
"url": "https://www.ibm.com/support/pages/node/7236509"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01954-1 vom 2025-06-13",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021513.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01487-2 vom 2025-06-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021536.html"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7237173 vom 2025-06-18",
"url": "https://www.ibm.com/support/pages/node/7237173"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7237261 vom 2025-06-19",
"url": "https://www.ibm.com/support/pages/node/7237261"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7237582 vom 2025-06-23",
"url": "https://www.ibm.com/support/pages/node/7237582"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7145433 vom 2025-06-24",
"url": "https://www.ibm.com/support/pages/node/7145433"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7145183 vom 2025-06-24",
"url": "https://www.ibm.com/support/pages/node/7145183"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7236665 vom 2025-06-24",
"url": "https://www.ibm.com/support/pages/node/7236665"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7237722 vom 2025-06-24",
"url": "https://www.ibm.com/support/pages/node/7237722"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7238120 vom 2025-06-26",
"url": "https://www.ibm.com/support/pages/node/7238120"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7238810 vom 2025-07-03",
"url": "https://www.ibm.com/support/pages/node/7238810"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7238919 vom 2025-07-04",
"url": "https://www.ibm.com/support/pages/node/7238919"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7238868 vom 2025-07-03",
"url": "https://www.ibm.com/support/pages/node/7238868"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7238987 vom 2025-07-07",
"url": "https://www.ibm.com/support/pages/node/7238987"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7239006 vom 2025-07-07",
"url": "https://www.ibm.com/support/pages/node/7239006"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7239476 vom 2025-07-11",
"url": "https://www.ibm.com/support/pages/node/7239476"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7239475 vom 2025-07-11",
"url": "https://www.ibm.com/support/pages/node/7239475"
},
{
"category": "external",
"summary": "HCL Security Bulletin vom 2025-07-11",
"url": "https://support.hcl-software.com/csm?id=kb_article\u0026sysparm_article=KB0122406"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7239598 vom 2025-07-14",
"url": "https://www.ibm.com/support/pages/node/7239598"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7239645 vom 2025-07-14",
"url": "https://www.ibm.com/support/pages/node/7239645"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7239617 vom 2025-07-14",
"url": "https://www.ibm.com/support/pages/node/7239617"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7239816 vom 2025-07-16",
"url": "https://www.ibm.com/support/pages/node/7239816"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7239757 vom 2025-07-15",
"url": "https://www.ibm.com/support/pages/node/7239757"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7239966 vom 2025-07-17",
"url": "https://www.ibm.com/support/pages/node/7239966"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7239963 vom 2025-07-17",
"url": "https://www.ibm.com/support/pages/node/7239963"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7240124 vom 2025-07-20",
"url": "https://www.ibm.com/support/pages/node/7240124"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7240122 vom 2025-07-20",
"url": "https://www.ibm.com/support/pages/node/7240122"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7240345 vom 2025-07-22",
"url": "https://www.ibm.com/support/pages/node/7240345"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7240431 vom 2025-07-23",
"url": "https://www.ibm.com/support/pages/node/7240431"
},
{
"category": "external",
"summary": "NetApp Security Advisory NTAP-20250502-0005 vom 2025-07-23",
"url": "https://security.netapp.com/advisory/NTAP-20250502-0005"
},
{
"category": "external",
"summary": "HCL Security Bulletin vom 2025-08-05",
"url": "https://support.hcl-software.com/csm?id=kb_article\u0026sysparm_article=KB0122946"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7241584 vom 2025-08-06",
"url": "https://www.ibm.com/support/pages/node/7241584"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7241565 vom 2025-08-06",
"url": "https://www.ibm.com/support/pages/node/7241565"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7241656 vom 2025-08-06",
"url": "https://www.ibm.com/support/pages/node/7241656"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7242810 vom 2025-08-21",
"url": "https://www.ibm.com/support/pages/node/7242810"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2025-327 vom 2025-08-26",
"url": "https://www.dell.com/support/kbdoc/000361139"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7243781 vom 2025-09-02",
"url": "https://www.ibm.com/support/pages/node/7243781"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7243821 vom 2025-09-02",
"url": "https://www.ibm.com/support/pages/node/7243821"
}
],
"source_lang": "en-US",
"title": "Oracle Java SE: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-09-02T22:00:00.000+00:00",
"generator": {
"date": "2025-09-03T07:16:17.170+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.4.0"
}
},
"id": "WID-SEC-W-2025-0815",
"initial_release_date": "2025-04-15T22:00:00.000+00:00",
"revision_history": [
{
"date": "2025-04-15T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2025-04-16T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2025-04-21T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2025-04-27T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von openSUSE aufgenommen"
},
{
"date": "2025-04-29T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Amazon und SUSE aufgenommen"
},
{
"date": "2025-05-01T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Amazon und Debian aufgenommen"
},
{
"date": "2025-05-04T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-05-05T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-05-07T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-05-11T22:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-05-12T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2025-05-13T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Red Hat, openSUSE und Amazon aufgenommen"
},
{
"date": "2025-05-14T22:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-05-18T22:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-05-19T22:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2025-05-25T22:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-05-26T22:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-06-01T22:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von Dell und SUSE aufgenommen"
},
{
"date": "2025-06-02T22:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates von Red Hat und IBM aufgenommen"
},
{
"date": "2025-06-04T22:00:00.000+00:00",
"number": "20",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-09T22:00:00.000+00:00",
"number": "21",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-06-12T22:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von IBM und IBM-APAR aufgenommen"
},
{
"date": "2025-06-15T22:00:00.000+00:00",
"number": "23",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-16T22:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-19T22:00:00.000+00:00",
"number": "25",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-06-22T22:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-06-23T22:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-06-24T22:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-06-25T22:00:00.000+00:00",
"number": "29",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-07-02T22:00:00.000+00:00",
"number": "30",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-07-03T22:00:00.000+00:00",
"number": "31",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-07-06T22:00:00.000+00:00",
"number": "32",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-07-07T22:00:00.000+00:00",
"number": "33",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-07-10T22:00:00.000+00:00",
"number": "34",
"summary": "Neue Updates von IBM und HCL aufgenommen"
},
{
"date": "2025-07-13T22:00:00.000+00:00",
"number": "35",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-07-14T22:00:00.000+00:00",
"number": "36",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-07-15T22:00:00.000+00:00",
"number": "37",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-07-17T22:00:00.000+00:00",
"number": "38",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-07-20T22:00:00.000+00:00",
"number": "39",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-07-22T22:00:00.000+00:00",
"number": "40",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-07-23T22:00:00.000+00:00",
"number": "41",
"summary": "Neue Updates von IBM und NetApp aufgenommen"
},
{
"date": "2025-07-31T22:00:00.000+00:00",
"number": "42",
"summary": "Referenz(en) aufgenommen:"
},
{
"date": "2025-08-05T22:00:00.000+00:00",
"number": "43",
"summary": "Neue Updates von HCL aufgenommen"
},
{
"date": "2025-08-06T22:00:00.000+00:00",
"number": "44",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-08-21T22:00:00.000+00:00",
"number": "45",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-08-25T22:00:00.000+00:00",
"number": "46",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2025-09-02T22:00:00.000+00:00",
"number": "47",
"summary": "Neue Updates von IBM aufgenommen"
}
],
"status": "final",
"version": "47"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c11.0.27.6.1",
"product": {
"name": "Amazon Corretto \u003c11.0.27.6.1",
"product_id": "T042898"
}
},
{
"category": "product_version",
"name": "11.0.27.6.1",
"product": {
"name": "Amazon Corretto 11.0.27.6.1",
"product_id": "T042898-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:amazon:corretto:11.0.27.6.1"
}
}
}
],
"category": "product_name",
"name": "Corretto"
},
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Azul Zulu",
"product": {
"name": "Azul Zulu",
"product_id": "T034269",
"product_identification_helper": {
"cpe": "cpe:/a:azul:zulu:-"
}
}
}
],
"category": "vendor",
"name": "Azul"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "Runtime Environment \u003c8.0.25",
"product": {
"name": "Dell NetWorker Runtime Environment \u003c8.0.25",
"product_id": "T044237"
}
},
{
"category": "product_version",
"name": "Runtime Environment 8.0.25",
"product": {
"name": "Dell NetWorker Runtime Environment 8.0.25",
"product_id": "T044237-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:runtime_environment__8.0.25"
}
}
},
{
"category": "product_version_range",
"name": "\u003c17.0.2",
"product": {
"name": "Dell NetWorker \u003c17.0.2",
"product_id": "T046485"
}
},
{
"category": "product_version",
"name": "17.0.2",
"product": {
"name": "Dell NetWorker 17.0.2",
"product_id": "T046485-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:17.0.2"
}
}
}
],
"category": "product_name",
"name": "NetWorker"
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c11.0.4.0",
"product": {
"name": "HCL BigFix \u003c11.0.4.0",
"product_id": "T045313"
}
},
{
"category": "product_version",
"name": "11.0.4.0",
"product": {
"name": "HCL BigFix 11.0.4.0",
"product_id": "T045313-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:hcltech:bigfix:11.0.4.0"
}
}
}
],
"category": "product_name",
"name": "BigFix"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c9.0.1.16",
"product": {
"name": "HCL Commerce \u003c9.0.1.16",
"product_id": "T019286"
}
},
{
"category": "product_version",
"name": "9.0.1.16",
"product": {
"name": "HCL Commerce 9.0.1.16",
"product_id": "T019286-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:hcltechsw:commerce:9.0.1.16"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.1.18.2",
"product": {
"name": "HCL Commerce \u003c9.1.18.2",
"product_id": "T045896"
}
},
{
"category": "product_version",
"name": "9.1.18.2",
"product": {
"name": "HCL Commerce 9.1.18.2",
"product_id": "T045896-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:hcltechsw:commerce:9.1.18.2"
}
}
}
],
"category": "product_name",
"name": "Commerce"
}
],
"category": "vendor",
"name": "HCL"
},
{
"branches": [
{
"category": "product_name",
"name": "Hitachi Command Suite",
"product": {
"name": "Hitachi Command Suite",
"product_id": "T038839",
"product_identification_helper": {
"cpe": "cpe:/a:hitachi:command_suite:-"
}
}
},
{
"category": "product_name",
"name": "Hitachi Configuration Manager",
"product": {
"name": "Hitachi Configuration Manager",
"product_id": "T020304",
"product_identification_helper": {
"cpe": "cpe:/a:hitachi:configuration_manager:-"
}
}
},
{
"category": "product_name",
"name": "Hitachi Ops Center",
"product": {
"name": "Hitachi Ops Center",
"product_id": "T038840",
"product_identification_helper": {
"cpe": "cpe:/a:hitachi:ops_center:-"
}
}
}
],
"category": "vendor",
"name": "Hitachi"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c12.0.12.15",
"product": {
"name": "IBM App Connect Enterprise \u003c12.0.12.15",
"product_id": "T044655"
}
},
{
"category": "product_version",
"name": "12.0.12.15",
"product": {
"name": "IBM App Connect Enterprise 12.0.12.15",
"product_id": "T044655-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:app_connect_enterprise:v12-_fix_pack_release_12.0.12.15"
}
}
},
{
"category": "product_version_range",
"name": "\u003c13.0.4.0",
"product": {
"name": "IBM App Connect Enterprise \u003c13.0.4.0",
"product_id": "T044811"
}
},
{
"category": "product_version",
"name": "13.0.4.0",
"product": {
"name": "IBM App Connect Enterprise 13.0.4.0",
"product_id": "T044811-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:app_connect_enterprise:13.0.4.0"
}
}
},
{
"category": "product_version_range",
"name": "\u003c13.0.4.0",
"product": {
"name": "IBM App Connect Enterprise \u003c13.0.4.0",
"product_id": "T044819"
}
},
{
"category": "product_version",
"name": "13.0.4.0",
"product": {
"name": "IBM App Connect Enterprise 13.0.4.0",
"product_id": "T044819-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:app_connect_enterprise:13.0.4.0"
}
}
},
{
"category": "product_version_range",
"name": "\u003c12.0.12.15",
"product": {
"name": "IBM App Connect Enterprise \u003c12.0.12.15",
"product_id": "T044820"
}
},
{
"category": "product_version",
"name": "12.0.12.15",
"product": {
"name": "IBM App Connect Enterprise 12.0.12.15",
"product_id": "T044820-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:app_connect_enterprise:12.0.12.15"
}
}
},
{
"category": "product_version_range",
"name": "\u003cLTS 12.0.14",
"product": {
"name": "IBM App Connect Enterprise \u003cLTS 12.0.14",
"product_id": "T045928"
}
},
{
"category": "product_version",
"name": "LTS 12.0.14",
"product": {
"name": "IBM App Connect Enterprise LTS 12.0.14",
"product_id": "T045928-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:app_connect_enterprise:lts_12.0.14"
}
}
}
],
"category": "product_name",
"name": "App Connect Enterprise"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM Business Automation Workflow",
"product": {
"name": "IBM Business Automation Workflow",
"product_id": "T019704",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:business_automation_workflow:-"
}
}
},
{
"category": "product_name",
"name": "IBM Business Automation Workflow",
"product": {
"name": "IBM Business Automation Workflow",
"product_id": "T043411",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:business_automation_workflow:-"
}
}
}
],
"category": "product_name",
"name": "Business Automation Workflow"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.6.4.0",
"product": {
"name": "IBM DataPower Gateway \u003c10.6.4.0",
"product_id": "T044528"
}
},
{
"category": "product_version",
"name": "10.6.4.0",
"product": {
"name": "IBM DataPower Gateway 10.6.4.0",
"product_id": "T044528-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:datapower_gateway:10.6.4.0"
}
}
},
{
"category": "product_version_range",
"name": "\u003c10.6.0.6",
"product": {
"name": "IBM DataPower Gateway \u003c10.6.0.6",
"product_id": "T045035"
}
},
{
"category": "product_version",
"name": "10.6.0.6",
"product": {
"name": "IBM DataPower Gateway 10.6.0.6",
"product_id": "T045035-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:datapower_gateway:10.6.0.6"
}
}
},
{
"category": "product_version_range",
"name": "\u003c10.5.0.18",
"product": {
"name": "IBM DataPower Gateway \u003c10.5.0.18",
"product_id": "T045036"
}
},
{
"category": "product_version",
"name": "10.5.0.18",
"product": {
"name": "IBM DataPower Gateway 10.5.0.18",
"product_id": "T045036-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:datapower_gateway:10.5.0.18"
}
}
}
],
"category": "product_name",
"name": "DataPower Gateway"
},
{
"branches": [
{
"category": "product_version",
"name": "10.0.0.0",
"product": {
"name": "IBM InfoSphere Identity Insight 10.0.0.0",
"product_id": "T033658",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:infosphere_identity_insight:10.0.0.0"
}
}
},
{
"category": "product_version",
"name": "9.0.0.1",
"product": {
"name": "IBM InfoSphere Identity Insight 9.0.0.1",
"product_id": "T035627",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:infosphere_identity_insight:9.0.0.1"
}
}
}
],
"category": "product_name",
"name": "InfoSphere Identity Insight"
},
{
"branches": [
{
"category": "product_version",
"name": "11.7",
"product": {
"name": "IBM InfoSphere Information Server 11.7",
"product_id": "444803",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:infosphere_information_server:11.7"
}
}
}
],
"category": "product_name",
"name": "InfoSphere Information Server"
},
{
"branches": [
{
"category": "product_version",
"name": "1.10.1.2",
"product": {
"name": "IBM Installation Manager 1.10.1.2",
"product_id": "T044604",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:installation_manager:1.10.1.2"
}
}
},
{
"category": "product_version_range",
"name": "\u003c1.9.3.3",
"product": {
"name": "IBM Installation Manager \u003c1.9.3.3",
"product_id": "T046656"
}
},
{
"category": "product_version",
"name": "1.9.3.3",
"product": {
"name": "IBM Installation Manager 1.9.3.3",
"product_id": "T046656-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:installation_manager:1.9.3.3"
}
}
}
],
"category": "product_name",
"name": "Installation Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "10.1.0.0-10.1.0.5",
"product": {
"name": "IBM Integration Bus 10.1.0.0-10.1.0.5",
"product_id": "T044022",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:integration_bus:10.1.0.0_-_10.1.0.5"
}
}
}
],
"category": "product_name",
"name": "Integration Bus"
},
{
"category": "product_name",
"name": "IBM Java",
"product": {
"name": "IBM Java",
"product_id": "10699",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:jre:-"
}
}
},
{
"category": "product_name",
"name": "IBM Java SDK",
"product": {
"name": "IBM Java SDK",
"product_id": "10695",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:jdk:-"
}
}
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c9.2.40",
"product": {
"name": "IBM License Metric Tool \u003c9.2.40",
"product_id": "T044779"
}
},
{
"category": "product_version",
"name": "9.2.40",
"product": {
"name": "IBM License Metric Tool 9.2.40",
"product_id": "T044779-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:license_metric_tool:9.2.40"
}
}
}
],
"category": "product_name",
"name": "License Metric Tool"
},
{
"category": "product_name",
"name": "IBM MQ",
"product": {
"name": "IBM MQ",
"product_id": "T021398",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:mq:-"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "7.6.1.3",
"product": {
"name": "IBM Maximo Asset Management 7.6.1.3",
"product_id": "1234217",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:maximo_asset_management:7.6.1.3"
}
}
}
],
"category": "product_name",
"name": "Maximo Asset Management"
},
{
"branches": [
{
"category": "product_version",
"name": "V10",
"product": {
"name": "IBM Power Hardware Management Console V10",
"product_id": "T023373",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:hardware_management_console:v10"
}
}
}
],
"category": "product_name",
"name": "Power Hardware Management Console"
},
{
"category": "product_name",
"name": "IBM QRadar SIEM",
"product": {
"name": "IBM QRadar SIEM",
"product_id": "T021415",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:qradar_siem:-"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "9.6",
"product": {
"name": "IBM Rational Business Developer 9.6",
"product_id": "T023629",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:rational_business_developer:9.6"
}
}
},
{
"category": "product_version",
"name": "9.7",
"product": {
"name": "IBM Rational Business Developer 9.7",
"product_id": "T023630",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:rational_business_developer:9.7"
}
}
},
{
"category": "product_name",
"name": "IBM Rational Business Developer",
"product": {
"name": "IBM Rational Business Developer",
"product_id": "T025611",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:rational_business_developer:-"
}
}
}
],
"category": "product_name",
"name": "Rational Business Developer"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM SPSS",
"product": {
"name": "IBM SPSS",
"product_id": "T013570",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:spss:-"
}
}
},
{
"category": "product_version",
"name": "Collaboration and Deployment Services 8.5",
"product": {
"name": "IBM SPSS Collaboration and Deployment Services 8.5",
"product_id": "T038750",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:spss:collaboration_and_deployment_services_8.5"
}
}
},
{
"category": "product_version",
"name": "Statistics",
"product": {
"name": "IBM SPSS Statistics",
"product_id": "T045525",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:spss:statistics"
}
}
}
],
"category": "product_name",
"name": "SPSS"
},
{
"branches": [
{
"category": "product_version",
"name": "Key Lifecycle Manager 4.1.1",
"product": {
"name": "IBM Security Guardium Key Lifecycle Manager 4.1.1",
"product_id": "T021015",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:security_guardium:key_lifecycle_manager_4.1.1"
}
}
},
{
"category": "product_version",
"name": "Key Lifecycle Manager 4.2",
"product": {
"name": "IBM Security Guardium Key Lifecycle Manager 4.2",
"product_id": "T027545",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:security_guardium:key_lifecycle_manager_4.2"
}
}
},
{
"category": "product_version",
"name": "Key Lifecycle Manager 4.1",
"product": {
"name": "IBM Security Guardium Key Lifecycle Manager 4.1",
"product_id": "T029695",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:security_guardium:key_lifecycle_manager_4.1"
}
}
},
{
"category": "product_version",
"name": "Key Lifecycle Manager 4.2.1",
"product": {
"name": "IBM Security Guardium Key Lifecycle Manager 4.2.1",
"product_id": "T032873",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:security_guardium:key_lifecycle_manager_4.2.1"
}
}
},
{
"category": "product_version",
"name": "Key Lifecycle Manager 5.0",
"product": {
"name": "IBM Security Guardium Key Lifecycle Manager 5.0",
"product_id": "T044420",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:security_guardium:key_lifecycle_manager_5.0"
}
}
}
],
"category": "product_name",
"name": "Security Guardium"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.9 IF2",
"product": {
"name": "IBM Security Verify Access \u003c10.0.9 IF2",
"product_id": "T045037"
}
},
{
"category": "product_version",
"name": "10.0.9 IF2",
"product": {
"name": "IBM Security Verify Access 10.0.9 IF2",
"product_id": "T045037-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:security_verify_access:10.0.9_if2"
}
}
}
],
"category": "product_name",
"name": "Security Verify Access"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c8.0.452.0",
"product": {
"name": "IBM Semeru Runtime \u003c8.0.452.0",
"product_id": "T043786"
}
},
{
"category": "product_version",
"name": "8.0.452.0",
"product": {
"name": "IBM Semeru Runtime 8.0.452.0",
"product_id": "T043786-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:semeru_runtime:8.0.452.0"
}
}
},
{
"category": "product_version_range",
"name": "\u003c11.0.27.0",
"product": {
"name": "IBM Semeru Runtime \u003c11.0.27.0",
"product_id": "T043787"
}
},
{
"category": "product_version",
"name": "11.0.27.0",
"product": {
"name": "IBM Semeru Runtime 11.0.27.0",
"product_id": "T043787-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:semeru_runtime:11.0.27.0"
}
}
},
{
"category": "product_version_range",
"name": "\u003c17.0.15.0",
"product": {
"name": "IBM Semeru Runtime \u003c17.0.15.0",
"product_id": "T043788"
}
},
{
"category": "product_version",
"name": "17.0.15.0",
"product": {
"name": "IBM Semeru Runtime 17.0.15.0",
"product_id": "T043788-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:semeru_runtime:17.0.15.0"
}
}
},
{
"category": "product_version_range",
"name": "\u003c21.0.7.0",
"product": {
"name": "IBM Semeru Runtime \u003c21.0.7.0",
"product_id": "T043789"
}
},
{
"category": "product_version",
"name": "21.0.7.0",
"product": {
"name": "IBM Semeru Runtime 21.0.7.0",
"product_id": "T043789-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:semeru_runtime:21.0.7.0"
}
}
}
],
"category": "product_name",
"name": "Semeru Runtime"
},
{
"branches": [
{
"category": "product_version_range",
"name": "webServices \u003c6.4.0.3",
"product": {
"name": "IBM Sterling Connect:Direct webServices \u003c6.4.0.3",
"product_id": "T045316"
}
},
{
"category": "product_version",
"name": "webServices 6.4.0.3",
"product": {
"name": "IBM Sterling Connect:Direct webServices 6.4.0.3",
"product_id": "T045316-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:sterling_connect%3adirect:webservices__6.4.0.3"
}
}
},
{
"category": "product_version_range",
"name": "webServices \u003c6.3.0.14",
"product": {
"name": "IBM Sterling Connect:Direct webServices \u003c6.3.0.14",
"product_id": "T045317"
}
},
{
"category": "product_version",
"name": "webServices 6.3.0.14",
"product": {
"name": "IBM Sterling Connect:Direct webServices 6.3.0.14",
"product_id": "T045317-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:sterling_connect%3adirect:webservices__6.3.0.14"
}
}
},
{
"category": "product_version_range",
"name": "webServices \u003c6.2.0.28",
"product": {
"name": "IBM Sterling Connect:Direct webServices \u003c6.2.0.28",
"product_id": "T045318"
}
},
{
"category": "product_version",
"name": "webServices 6.2.0.28",
"product": {
"name": "IBM Sterling Connect:Direct webServices 6.2.0.28",
"product_id": "T045318-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:sterling_connect%3adirect:webservices__6.2.0.28"
}
}
},
{
"category": "product_version_range",
"name": "\u003c6.2.0.7",
"product": {
"name": "IBM Sterling Connect:Direct \u003c6.2.0.7",
"product_id": "T045339"
}
},
{
"category": "product_version",
"name": "6.2.0.7",
"product": {
"name": "IBM Sterling Connect:Direct 6.2.0.7",
"product_id": "T045339-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:sterling_connect%3adirect:6.2.0.7"
}
}
},
{
"category": "product_version_range",
"name": "\u003c6.3.0.5",
"product": {
"name": "IBM Sterling Connect:Direct \u003c6.3.0.5",
"product_id": "T045350"
}
},
{
"category": "product_version",
"name": "6.3.0.5",
"product": {
"name": "IBM Sterling Connect:Direct 6.3.0.5",
"product_id": "T045350-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:sterling_connect%3adirect:6.3.0.5"
}
}
},
{
"category": "product_version_range",
"name": "\u003c6.4.0.2",
"product": {
"name": "IBM Sterling Connect:Direct \u003c6.4.0.2",
"product_id": "T045351"
}
},
{
"category": "product_version",
"name": "6.4.0.2",
"product": {
"name": "IBM Sterling Connect:Direct 6.4.0.2",
"product_id": "T045351-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:sterling_connect%3adirect:6.4.0.2"
}
}
},
{
"category": "product_version_range",
"name": "\u003c6.2.0.7.iFix052",
"product": {
"name": "IBM Sterling Connect:Direct \u003c6.2.0.7.iFix052",
"product_id": "T045352"
}
},
{
"category": "product_version",
"name": "6.2.0.7.iFix052",
"product": {
"name": "IBM Sterling Connect:Direct 6.2.0.7.iFix052",
"product_id": "T045352-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:sterling_connect%3adirect:6.2.0.7.ifix052"
}
}
},
{
"category": "product_name",
"name": "IBM Sterling Connect:Direct",
"product": {
"name": "IBM Sterling Connect:Direct",
"product_id": "T045428",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:sterling_connect%3adirect:-"
}
}
}
],
"category": "product_name",
"name": "Sterling Connect:Direct"
},
{
"branches": [
{
"category": "product_version",
"name": "Multiplatforms",
"product": {
"name": "IBM TXSeries Multiplatforms",
"product_id": "T045090",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:txseries:multiplatforms"
}
}
}
],
"category": "product_name",
"name": "TXSeries"
},
{
"branches": [
{
"category": "product_version",
"name": "6.2.0-6.2.0.6",
"product": {
"name": "IBM Tivoli Business Service Manager 6.2.0-6.2.0.6",
"product_id": "T045592",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_business_service_manager:6.2.0_-_6.2.0.6"
}
}
}
],
"category": "product_name",
"name": "Tivoli Business Service Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "6.3.0.7",
"product": {
"name": "IBM Tivoli Monitoring 6.3.0.7",
"product_id": "342008",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_monitoring:6.3.0.7"
}
}
}
],
"category": "product_name",
"name": "Tivoli Monitoring"
},
{
"branches": [
{
"category": "product_version",
"name": "8.1.0",
"product": {
"name": "IBM Tivoli Netcool/OMNIbus 8.1.0",
"product_id": "700367",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_netcool%2fomnibus:8.1.0"
}
}
},
{
"category": "product_name",
"name": "IBM Tivoli Netcool/OMNIbus",
"product": {
"name": "IBM Tivoli Netcool/OMNIbus",
"product_id": "T004181",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_netcool%2fomnibus:-"
}
}
}
],
"category": "product_name",
"name": "Tivoli Netcool/OMNIbus"
},
{
"branches": [
{
"category": "product_version_range",
"name": "IP Edition \u003c4.2 Fix Pack 23",
"product": {
"name": "IBM Tivoli Network Manager IP Edition \u003c4.2 Fix Pack 23",
"product_id": "T046654"
}
},
{
"category": "product_version",
"name": "IP Edition 4.2 Fix Pack 23",
"product": {
"name": "IBM Tivoli Network Manager IP Edition 4.2 Fix Pack 23",
"product_id": "T046654-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition___4.2_fix_pack_23"
}
}
}
],
"category": "product_name",
"name": "Tivoli Network Manager"
},
{
"category": "product_name",
"name": "IBM WebSphere Application Server",
"product": {
"name": "IBM WebSphere Application Server",
"product_id": "T000377",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:websphere_application_server:-"
}
}
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"category": "product_name",
"name": "NetApp ActiveIQ Unified Manager",
"product": {
"name": "NetApp ActiveIQ Unified Manager",
"product_id": "T016960",
"product_identification_helper": {
"cpe": "cpe:/a:netapp:active_iq_unified_manager:-"
}
}
}
],
"category": "vendor",
"name": "NetApp"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source OpenJDK",
"product": {
"name": "Open Source OpenJDK",
"product_id": "580789",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:openjdk:-"
}
}
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "for JDK 17.0.14",
"product": {
"name": "Oracle GraalVM for JDK 17.0.14",
"product_id": "T042886",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:graalvm:for_jdk_17.0.14"
}
}
},
{
"category": "product_version",
"name": "for JDK 21.0.6",
"product": {
"name": "Oracle GraalVM for JDK 21.0.6",
"product_id": "T042887",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:graalvm:for_jdk_21.0.6"
}
}
},
{
"category": "product_version",
"name": "Enterprise Edition 20.3.17",
"product": {
"name": "Oracle GraalVM Enterprise Edition 20.3.17",
"product_id": "T042888",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:graalvm:20.3.17::enterprise"
}
}
},
{
"category": "product_version",
"name": "Enterprise Edition 21.3.13",
"product": {
"name": "Oracle GraalVM Enterprise Edition 21.3.13",
"product_id": "T042889",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:graalvm:21.3.13::enterprise"
}
}
}
],
"category": "product_name",
"name": "GraalVM"
},
{
"branches": [
{
"category": "product_version",
"name": "21.0.6",
"product": {
"name": "Oracle Java SE 21.0.6",
"product_id": "T042817",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:21.0.6"
}
}
},
{
"category": "product_version",
"name": "11.0.26",
"product": {
"name": "Oracle Java SE 11.0.26",
"product_id": "T042819",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:11.0.26"
}
}
},
{
"category": "product_version",
"name": "17.0.14",
"product": {
"name": "Oracle Java SE 17.0.14",
"product_id": "T042820",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:17.0.14"
}
}
},
{
"category": "product_version",
"name": "24",
"product": {
"name": "Oracle Java SE 24",
"product_id": "T042821",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:24"
}
}
},
{
"category": "product_version",
"name": "8u441",
"product": {
"name": "Oracle Java SE 8u441",
"product_id": "T042881",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:8u441"
}
}
},
{
"category": "product_version",
"name": "8u441-perf",
"product": {
"name": "Oracle Java SE 8u441-perf",
"product_id": "T042882",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:8u441-perf"
}
}
}
],
"category": "product_name",
"name": "Java SE"
},
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
},
{
"category": "product_name",
"name": "SUSE openSUSE",
"product": {
"name": "SUSE openSUSE",
"product_id": "T027843",
"product_identification_helper": {
"cpe": "cpe:/o:suse:opensuse:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-47606",
"product_status": {
"known_affected": [
"T029695",
"T004914",
"T023629",
"T038840",
"T021015",
"T044655",
"T045428",
"T044779",
"T044811",
"T021415",
"10695",
"398363",
"T023630",
"T025611",
"1234217",
"10699",
"T032873",
"T045090",
"T035627",
"T045928",
"T042817",
"T016960",
"T013570",
"T042819",
"T045896",
"2951",
"T002207",
"T042820",
"T042821",
"T045339",
"444803",
"T019704",
"T044528",
"T044604",
"T027843",
"T004181",
"T034269",
"67646",
"T033658",
"700367",
"T045525",
"T043786",
"T043787",
"T044237",
"T046656",
"T043788",
"T042898",
"T043789",
"T020304",
"T000377",
"342008",
"T021398",
"T046654",
"T023373",
"T038839",
"T038750",
"T019286",
"T044819",
"T042882",
"T043411",
"T045313",
"T045316",
"T044820",
"T042886",
"T045318",
"T042887",
"T045317",
"T000126",
"T042888",
"580789",
"T042889",
"T045592",
"T045350",
"T046485",
"T045352",
"T027545",
"T045351",
"T045035",
"T044022",
"T045037",
"T042881",
"T044420",
"T045036"
]
},
"release_date": "2025-04-15T22:00:00.000+00:00",
"title": "CVE-2024-47606"
},
{
"cve": "CVE-2024-54534",
"product_status": {
"known_affected": [
"T029695",
"T004914",
"T023629",
"T038840",
"T021015",
"T044655",
"T045428",
"T044779",
"T044811",
"T021415",
"10695",
"398363",
"T023630",
"T025611",
"1234217",
"10699",
"T032873",
"T045090",
"T035627",
"T045928",
"T042817",
"T016960",
"T013570",
"T042819",
"T045896",
"2951",
"T002207",
"T042820",
"T042821",
"T045339",
"444803",
"T019704",
"T044528",
"T044604",
"T027843",
"T004181",
"T034269",
"67646",
"T033658",
"700367",
"T045525",
"T043786",
"T043787",
"T044237",
"T046656",
"T043788",
"T042898",
"T043789",
"T020304",
"T000377",
"342008",
"T021398",
"T046654",
"T023373",
"T038839",
"T038750",
"T019286",
"T044819",
"T042882",
"T043411",
"T045313",
"T045316",
"T044820",
"T042886",
"T045318",
"T042887",
"T045317",
"T000126",
"T042888",
"580789",
"T042889",
"T045592",
"T045350",
"T046485",
"T045352",
"T027545",
"T045351",
"T045035",
"T044022",
"T045037",
"T042881",
"T044420",
"T045036"
]
},
"release_date": "2025-04-15T22:00:00.000+00:00",
"title": "CVE-2024-54534"
},
{
"cve": "CVE-2025-21587",
"product_status": {
"known_affected": [
"T029695",
"T004914",
"T023629",
"T038840",
"T021015",
"T044655",
"T045428",
"T044779",
"T044811",
"T021415",
"10695",
"398363",
"T023630",
"T025611",
"1234217",
"10699",
"T032873",
"T045090",
"T035627",
"T045928",
"T042817",
"T016960",
"T013570",
"T042819",
"T045896",
"2951",
"T002207",
"T042820",
"T042821",
"T045339",
"444803",
"T019704",
"T044528",
"T044604",
"T027843",
"T004181",
"T034269",
"67646",
"T033658",
"700367",
"T045525",
"T043786",
"T043787",
"T044237",
"T046656",
"T043788",
"T042898",
"T043789",
"T020304",
"T000377",
"342008",
"T021398",
"T046654",
"T023373",
"T038839",
"T038750",
"T019286",
"T044819",
"T042882",
"T043411",
"T045313",
"T045316",
"T044820",
"T042886",
"T045318",
"T042887",
"T045317",
"T000126",
"T042888",
"580789",
"T042889",
"T045592",
"T045350",
"T046485",
"T045352",
"T027545",
"T045351",
"T045035",
"T044022",
"T045037",
"T042881",
"T044420",
"T045036"
]
},
"release_date": "2025-04-15T22:00:00.000+00:00",
"title": "CVE-2025-21587"
},
{
"cve": "CVE-2025-23083",
"product_status": {
"known_affected": [
"T029695",
"T004914",
"T023629",
"T038840",
"T021015",
"T044655",
"T045428",
"T044779",
"T044811",
"T021415",
"10695",
"398363",
"T023630",
"T025611",
"1234217",
"10699",
"T032873",
"T045090",
"T035627",
"T045928",
"T042817",
"T016960",
"T013570",
"T042819",
"T045896",
"2951",
"T002207",
"T042820",
"T042821",
"T045339",
"444803",
"T019704",
"T044528",
"T044604",
"T027843",
"T004181",
"T034269",
"67646",
"T033658",
"700367",
"T045525",
"T043786",
"T043787",
"T044237",
"T046656",
"T043788",
"T042898",
"T043789",
"T020304",
"T000377",
"342008",
"T021398",
"T046654",
"T023373",
"T038839",
"T038750",
"T019286",
"T044819",
"T042882",
"T043411",
"T045313",
"T045316",
"T044820",
"T042886",
"T045318",
"T042887",
"T045317",
"T000126",
"T042888",
"580789",
"T042889",
"T045592",
"T045350",
"T046485",
"T045352",
"T027545",
"T045351",
"T045035",
"T044022",
"T045037",
"T042881",
"T044420",
"T045036"
]
},
"release_date": "2025-04-15T22:00:00.000+00:00",
"title": "CVE-2025-23083"
},
{
"cve": "CVE-2025-30691",
"product_status": {
"known_affected": [
"T029695",
"T004914",
"T023629",
"T038840",
"T021015",
"T044655",
"T045428",
"T044779",
"T044811",
"T021415",
"10695",
"398363",
"T023630",
"T025611",
"1234217",
"10699",
"T032873",
"T045090",
"T035627",
"T045928",
"T042817",
"T016960",
"T013570",
"T042819",
"T045896",
"2951",
"T002207",
"T042820",
"T042821",
"T045339",
"444803",
"T019704",
"T044528",
"T044604",
"T027843",
"T004181",
"T034269",
"67646",
"T033658",
"700367",
"T045525",
"T043786",
"T043787",
"T044237",
"T046656",
"T043788",
"T042898",
"T043789",
"T020304",
"T000377",
"342008",
"T021398",
"T046654",
"T023373",
"T038839",
"T038750",
"T019286",
"T044819",
"T042882",
"T043411",
"T045313",
"T045316",
"T044820",
"T042886",
"T045318",
"T042887",
"T045317",
"T000126",
"T042888",
"580789",
"T042889",
"T045592",
"T045350",
"T046485",
"T045352",
"T027545",
"T045351",
"T045035",
"T044022",
"T045037",
"T042881",
"T044420",
"T045036"
]
},
"release_date": "2025-04-15T22:00:00.000+00:00",
"title": "CVE-2025-30691"
},
{
"cve": "CVE-2025-30698",
"product_status": {
"known_affected": [
"T029695",
"T004914",
"T023629",
"T038840",
"T021015",
"T044655",
"T045428",
"T044779",
"T044811",
"T021415",
"10695",
"398363",
"T023630",
"T025611",
"1234217",
"10699",
"T032873",
"T045090",
"T035627",
"T045928",
"T042817",
"T016960",
"T013570",
"T042819",
"T045896",
"2951",
"T002207",
"T042820",
"T042821",
"T045339",
"444803",
"T019704",
"T044528",
"T044604",
"T027843",
"T004181",
"T034269",
"67646",
"T033658",
"700367",
"T045525",
"T043786",
"T043787",
"T044237",
"T046656",
"T043788",
"T042898",
"T043789",
"T020304",
"T000377",
"342008",
"T021398",
"T046654",
"T023373",
"T038839",
"T038750",
"T019286",
"T044819",
"T042882",
"T043411",
"T045313",
"T045316",
"T044820",
"T042886",
"T045318",
"T042887",
"T045317",
"T000126",
"T042888",
"580789",
"T042889",
"T045592",
"T045350",
"T046485",
"T045352",
"T027545",
"T045351",
"T045035",
"T044022",
"T045037",
"T042881",
"T044420",
"T045036"
]
},
"release_date": "2025-04-15T22:00:00.000+00:00",
"title": "CVE-2025-30698"
}
]
}
rhsa-2025:1611
Vulnerability from csaf_redhat
Published
2025-02-17 18:04
Modified
2025-10-03 21:08
Summary
Red Hat Security Advisory: nodejs:22 security update
Notes
Topic
An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
Security Fix(es):
* undici: Undici Uses Insufficiently Random Values (CVE-2025-22150)
* nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083)
* nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* undici: Undici Uses Insufficiently Random Values (CVE-2025-22150)\n\n* nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083)\n\n* nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:1611",
"url": "https://access.redhat.com/errata/RHSA-2025:1611"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2339176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339176"
},
{
"category": "external",
"summary": "2339392",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339392"
},
{
"category": "external",
"summary": "2342618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2342618"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1611.json"
}
],
"title": "Red Hat Security Advisory: nodejs:22 security update",
"tracking": {
"current_release_date": "2025-10-03T21:08:20+00:00",
"generator": {
"date": "2025-10-03T21:08:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2025:1611",
"initial_release_date": "2025-02-17T18:04:26+00:00",
"revision_history": [
{
"date": "2025-02-17T18:04:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-02-17T18:04:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-03T21:08:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"product": {
"name": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm (nodejs:22)",
"product_id": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=src\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"product": {
"name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm (nodejs:22)",
"product_id": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=src\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"product": {
"name": "nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm (nodejs:22)",
"product_id": "nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.10.0%2B22759%2B46b58560?arch=src\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"product": {
"name": "nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm (nodejs:22)",
"product_id": "nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-docs@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=noarch\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"product": {
"name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm (nodejs:22)",
"product_id": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=noarch\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"product": {
"name": "nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm (nodejs:22)",
"product_id": "nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.10.0%2B22759%2B46b58560?arch=noarch\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"product": {
"name": "nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm (nodejs:22)",
"product_id": "nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel8.10.0%2B22759%2B46b58560?arch=noarch\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product": {
"name": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22)",
"product_id": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product": {
"name": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22)",
"product_id": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product": {
"name": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22)",
"product_id": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product": {
"name": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22)",
"product_id": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product": {
"name": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22)",
"product_id": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22)",
"product_id": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22)",
"product_id": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs-debuginfo@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product": {
"name": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22)",
"product_id": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.9.2-1.22.13.1.1.module%2Bel8.10.0%2B22759%2B46b58560?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22)",
"product_id": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/v8-12.4-devel@12.4.254.21-1.22.13.1.1.module%2Bel8.10.0%2B22759%2B46b58560?arch=aarch64\u0026epoch=3\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product": {
"name": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22)",
"product_id": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product": {
"name": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22)",
"product_id": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product": {
"name": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22)",
"product_id": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product": {
"name": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22)",
"product_id": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product": {
"name": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22)",
"product_id": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22)",
"product_id": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22)",
"product_id": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs-debuginfo@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product": {
"name": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22)",
"product_id": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.9.2-1.22.13.1.1.module%2Bel8.10.0%2B22759%2B46b58560?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22)",
"product_id": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/v8-12.4-devel@12.4.254.21-1.22.13.1.1.module%2Bel8.10.0%2B22759%2B46b58560?arch=ppc64le\u0026epoch=3\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product": {
"name": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22)",
"product_id": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product": {
"name": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22)",
"product_id": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product": {
"name": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22)",
"product_id": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product": {
"name": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22)",
"product_id": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product": {
"name": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22)",
"product_id": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22)",
"product_id": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22)",
"product_id": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs-debuginfo@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product": {
"name": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22)",
"product_id": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.9.2-1.22.13.1.1.module%2Bel8.10.0%2B22759%2B46b58560?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22)",
"product_id": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/v8-12.4-devel@12.4.254.21-1.22.13.1.1.module%2Bel8.10.0%2B22759%2B46b58560?arch=s390x\u0026epoch=3\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product": {
"name": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22)",
"product_id": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product": {
"name": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22)",
"product_id": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product": {
"name": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22)",
"product_id": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product": {
"name": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22)",
"product_id": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product": {
"name": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22)",
"product_id": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22)",
"product_id": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22)",
"product_id": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs-debuginfo@22.13.1-1.module%2Bel8.10.0%2B22759%2B46b58560?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product": {
"name": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22)",
"product_id": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.9.2-1.22.13.1.1.module%2Bel8.10.0%2B22759%2B46b58560?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
},
{
"category": "product_version",
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22)",
"product_id": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/v8-12.4-devel@12.4.254.21-1.22.13.1.1.module%2Bel8.10.0%2B22759%2B46b58560?arch=x86_64\u0026epoch=3\u0026rpmmod=nodejs:22:8100020250130144944:6d880403"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22"
},
"product_reference": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22"
},
"product_reference": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22"
},
"product_reference": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22"
},
"product_reference": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
},
"product_reference": "nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22"
},
"product_reference": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22"
},
"product_reference": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22"
},
"product_reference": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
},
"product_reference": "nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22"
},
"product_reference": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22"
},
"product_reference": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22"
},
"product_reference": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
},
"product_reference": "nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22"
},
"product_reference": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22"
},
"product_reference": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22"
},
"product_reference": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
},
"product_reference": "nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22"
},
"product_reference": "nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22"
},
"product_reference": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22"
},
"product_reference": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22"
},
"product_reference": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
},
"product_reference": "nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22"
},
"product_reference": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22"
},
"product_reference": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22"
},
"product_reference": "nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22"
},
"product_reference": "nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22"
},
"product_reference": "nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22"
},
"product_reference": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22"
},
"product_reference": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22"
},
"product_reference": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
},
"product_reference": "npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22"
},
"product_reference": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22"
},
"product_reference": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22"
},
"product_reference": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
},
"product_reference": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-22150",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2025-01-21T18:01:24.182126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2339176"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the undici package for Node.js. Undici uses `Math.random()` to choose the boundary for a multipart/form-data request. It is known that the output of `Math.random()` can be predicted if several of its generated values are known. If an app has a mechanism that sends multipart requests to an attacker-controlled website, it can leak the necessary values. Therefore, an attacker can tamper with the requests going to the backend APIs if certain conditions are met.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: Undici Uses Insufficiently Random Values",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22150"
},
{
"category": "external",
"summary": "RHBZ#2339176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339176"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22150",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22150"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22150",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22150"
},
{
"category": "external",
"summary": "https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f",
"url": "https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/blob/8b06b8250907d92fead664b3368f1d2aa27c1f35/lib/web/fetch/body.js#L113",
"url": "https://github.com/nodejs/undici/blob/8b06b8250907d92fead664b3368f1d2aa27c1f35/lib/web/fetch/body.js#L113"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/commit/711e20772764c29f6622ddc937c63b6eefdf07d0",
"url": "https://github.com/nodejs/undici/commit/711e20772764c29f6622ddc937c63b6eefdf07d0"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/commit/c2d78cd19fe4f4c621424491e26ce299e65e934a",
"url": "https://github.com/nodejs/undici/commit/c2d78cd19fe4f4c621424491e26ce299e65e934a"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/commit/c3acc6050b781b827d80c86cbbab34f14458d385",
"url": "https://github.com/nodejs/undici/commit/c3acc6050b781b827d80c86cbbab34f14458d385"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/2913312",
"url": "https://hackerone.com/reports/2913312"
}
],
"release_date": "2025-01-21T17:46:58.872000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-17T18:04:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1611"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undici: Undici Uses Insufficiently Random Values"
},
{
"cve": "CVE-2025-23083",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"discovery_date": "2025-01-22T02:00:43.830080+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2339392"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Node.js diagnostics_channel. This vulnerability allows an attacker to reinstate and misuse worker constructors, potentially bypassing the Permission Model via hooking into events when a worker thread is created.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: Node.js Worker Thread Exposure via Diagnostics Channel",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because the diagnostics_channel utility, allowing attackers to hook into events triggered when a worker thread is created. This not only exposes user-defined workers but also internal workers, enabling the attacker to retrieve instances and potentially capture and reinstate their constructors for malicious purposes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-23083"
},
{
"category": "external",
"summary": "RHBZ#2339392",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339392"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-23083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23083"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-23083",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23083"
},
{
"category": "external",
"summary": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases",
"url": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases"
}
],
"release_date": "2025-01-22T01:11:30.802000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-17T18:04:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1611"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nodejs: Node.js Worker Thread Exposure via Diagnostics Channel"
},
{
"cve": "CVE-2025-23085",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2025-01-28T17:23:01.915000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2342618"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in NodeJS when handling HTTP/2 connections, where the remote peer abruptly closes the socket without sending the proper HTTP/2 notification to the server, leading to a memory leak. This flaw allows an attacker to force the targeted process in the targeted host to an uncontrollable resource consumption state, starving the process and possibly other processes running at the same host to memory starvation, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-23085"
},
{
"category": "external",
"summary": "RHBZ#2342618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2342618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-23085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23085"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-23085",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23085"
}
],
"release_date": "2025-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-17T18:04:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1611"
},
{
"category": "workaround",
"details": "There\u0027s no available mitigation for this issue other than updating to the package version which contains the fix.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-22.13.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-22.13.1-1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22759+46b58560.src.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22759+46b58560.noarch.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.aarch64.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.ppc64le.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.s390x.rpm-nodejs:22",
"AppStream-8.10.0.Z.MAIN.EUS:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560.x86_64.rpm-nodejs:22"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap"
}
]
}
rhsa-2025:1443
Vulnerability from csaf_redhat
Published
2025-02-13 15:42
Modified
2025-10-03 21:08
Summary
Red Hat Security Advisory: nodejs:20 security update
Notes
Topic
An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
Security Fix(es):
* undici: Undici Uses Insufficiently Random Values (CVE-2025-22150)
* nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083)
* nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* undici: Undici Uses Insufficiently Random Values (CVE-2025-22150)\n\n* nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083)\n\n* nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:1443",
"url": "https://access.redhat.com/errata/RHSA-2025:1443"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2339176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339176"
},
{
"category": "external",
"summary": "2339392",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339392"
},
{
"category": "external",
"summary": "2342618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2342618"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1443.json"
}
],
"title": "Red Hat Security Advisory: nodejs:20 security update",
"tracking": {
"current_release_date": "2025-10-03T21:08:13+00:00",
"generator": {
"date": "2025-10-03T21:08:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2025:1443",
"initial_release_date": "2025-02-13T15:42:45+00:00",
"revision_history": [
{
"date": "2025-02-13T15:42:45+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-02-13T15:42:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-03T21:08:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm-nodejs:20",
"product": {
"name": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm (nodejs:20)",
"product_id": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=src\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"product": {
"name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm (nodejs:20)",
"product_id": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0.z%2B20478%2B84a9f781?arch=src\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"product": {
"name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm (nodejs:20)",
"product_id": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.3.0%2B19518%2B63aad52d?arch=src\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm-nodejs:20",
"product": {
"name": "nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm (nodejs:20)",
"product_id": "nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-docs@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=noarch\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"product": {
"name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm (nodejs:20)",
"product_id": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0.z%2B20478%2B84a9f781?arch=noarch\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"product": {
"name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20)",
"product_id": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.3.0%2B19518%2B63aad52d?arch=noarch\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"product": {
"name": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20)",
"product_id": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel9.3.0%2B19518%2B63aad52d?arch=noarch\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"product": {
"name": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm (nodejs:20)",
"product_id": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"product": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm (nodejs:20)",
"product_id": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"product": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm (nodejs:20)",
"product_id": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"product": {
"name": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm (nodejs:20)",
"product_id": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"product": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm (nodejs:20)",
"product_id": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"product": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm (nodejs:20)",
"product_id": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.8.2-1.20.18.2.1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"product": {
"name": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm (nodejs:20)",
"product_id": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"product": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm (nodejs:20)",
"product_id": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"product": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm (nodejs:20)",
"product_id": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"product": {
"name": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm (nodejs:20)",
"product_id": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"product": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm (nodejs:20)",
"product_id": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"product": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm (nodejs:20)",
"product_id": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.8.2-1.20.18.2.1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"product": {
"name": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm (nodejs:20)",
"product_id": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"product": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm (nodejs:20)",
"product_id": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"product": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm (nodejs:20)",
"product_id": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"product": {
"name": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm (nodejs:20)",
"product_id": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"product": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm (nodejs:20)",
"product_id": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"product": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm (nodejs:20)",
"product_id": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.8.2-1.20.18.2.1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"product": {
"name": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm (nodejs:20)",
"product_id": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"product": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm (nodejs:20)",
"product_id": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"product": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm (nodejs:20)",
"product_id": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"product": {
"name": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm (nodejs:20)",
"product_id": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"product": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm (nodejs:20)",
"product_id": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@20.18.2-1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
},
{
"category": "product_version",
"name": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"product": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm (nodejs:20)",
"product_id": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.8.2-1.20.18.2.1.module%2Bel9.5.0%2B22758%2B4ad2c198?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9050020250130114516:rhel9"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20"
},
"product_reference": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20"
},
"product_reference": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20"
},
"product_reference": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm-nodejs:20"
},
"product_reference": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
},
"product_reference": "nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20"
},
"product_reference": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20"
},
"product_reference": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20"
},
"product_reference": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
},
"product_reference": "nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20"
},
"product_reference": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20"
},
"product_reference": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20"
},
"product_reference": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
},
"product_reference": "nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20"
},
"product_reference": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20"
},
"product_reference": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20"
},
"product_reference": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
},
"product_reference": "nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm-nodejs:20"
},
"product_reference": "nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20"
},
"product_reference": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20"
},
"product_reference": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20"
},
"product_reference": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
},
"product_reference": "nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20"
},
"product_reference": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20"
},
"product_reference": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20"
},
"product_reference": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20"
},
"product_reference": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20"
},
"product_reference": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20"
},
"product_reference": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20"
},
"product_reference": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20"
},
"product_reference": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
},
"product_reference": "npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-22150",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2025-01-21T18:01:24.182126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2339176"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the undici package for Node.js. Undici uses `Math.random()` to choose the boundary for a multipart/form-data request. It is known that the output of `Math.random()` can be predicted if several of its generated values are known. If an app has a mechanism that sends multipart requests to an attacker-controlled website, it can leak the necessary values. Therefore, an attacker can tamper with the requests going to the backend APIs if certain conditions are met.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: Undici Uses Insufficiently Random Values",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22150"
},
{
"category": "external",
"summary": "RHBZ#2339176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339176"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22150",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22150"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22150",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22150"
},
{
"category": "external",
"summary": "https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f",
"url": "https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/blob/8b06b8250907d92fead664b3368f1d2aa27c1f35/lib/web/fetch/body.js#L113",
"url": "https://github.com/nodejs/undici/blob/8b06b8250907d92fead664b3368f1d2aa27c1f35/lib/web/fetch/body.js#L113"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/commit/711e20772764c29f6622ddc937c63b6eefdf07d0",
"url": "https://github.com/nodejs/undici/commit/711e20772764c29f6622ddc937c63b6eefdf07d0"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/commit/c2d78cd19fe4f4c621424491e26ce299e65e934a",
"url": "https://github.com/nodejs/undici/commit/c2d78cd19fe4f4c621424491e26ce299e65e934a"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/commit/c3acc6050b781b827d80c86cbbab34f14458d385",
"url": "https://github.com/nodejs/undici/commit/c3acc6050b781b827d80c86cbbab34f14458d385"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/2913312",
"url": "https://hackerone.com/reports/2913312"
}
],
"release_date": "2025-01-21T17:46:58.872000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-13T15:42:45+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1443"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undici: Undici Uses Insufficiently Random Values"
},
{
"cve": "CVE-2025-23083",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"discovery_date": "2025-01-22T02:00:43.830080+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2339392"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Node.js diagnostics_channel. This vulnerability allows an attacker to reinstate and misuse worker constructors, potentially bypassing the Permission Model via hooking into events when a worker thread is created.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: Node.js Worker Thread Exposure via Diagnostics Channel",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because the diagnostics_channel utility, allowing attackers to hook into events triggered when a worker thread is created. This not only exposes user-defined workers but also internal workers, enabling the attacker to retrieve instances and potentially capture and reinstate their constructors for malicious purposes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-23083"
},
{
"category": "external",
"summary": "RHBZ#2339392",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339392"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-23083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23083"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-23083",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23083"
},
{
"category": "external",
"summary": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases",
"url": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases"
}
],
"release_date": "2025-01-22T01:11:30.802000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-13T15:42:45+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1443"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nodejs: Node.js Worker Thread Exposure via Diagnostics Channel"
},
{
"cve": "CVE-2025-23085",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2025-01-28T17:23:01.915000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2342618"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in NodeJS when handling HTTP/2 connections, where the remote peer abruptly closes the socket without sending the proper HTTP/2 notification to the server, leading to a memory leak. This flaw allows an attacker to force the targeted process in the targeted host to an uncontrollable resource consumption state, starving the process and possibly other processes running at the same host to memory starvation, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-23085"
},
{
"category": "external",
"summary": "RHBZ#2342618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2342618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-23085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23085"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-23085",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23085"
}
],
"release_date": "2025-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-13T15:42:45+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1443"
},
{
"category": "workaround",
"details": "There\u0027s no available mitigation for this issue other than updating to the package version which contains the fix.",
"product_ids": [
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-20.18.2-1.module+el9.5.0+22758+4ad2c198.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-20.18.2-1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.aarch64.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.ppc64le.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.s390x.rpm-nodejs:20",
"AppStream-9.5.0.Z.MAIN:npm-10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198.x86_64.rpm-nodejs:20"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap"
}
]
}
rhsa-2025:1351
Vulnerability from csaf_redhat
Published
2025-02-12 15:32
Modified
2025-10-03 21:08
Summary
Red Hat Security Advisory: nodejs:20 security update
Notes
Topic
An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
Security Fix(es):
* undici: Undici Uses Insufficiently Random Values (CVE-2025-22150)
* nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083)
* nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* undici: Undici Uses Insufficiently Random Values (CVE-2025-22150)\n\n* nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083)\n\n* nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:1351",
"url": "https://access.redhat.com/errata/RHSA-2025:1351"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2339176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339176"
},
{
"category": "external",
"summary": "2339392",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339392"
},
{
"category": "external",
"summary": "2342618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2342618"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1351.json"
}
],
"title": "Red Hat Security Advisory: nodejs:20 security update",
"tracking": {
"current_release_date": "2025-10-03T21:08:13+00:00",
"generator": {
"date": "2025-10-03T21:08:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2025:1351",
"initial_release_date": "2025-02-12T15:32:22+00:00",
"revision_history": [
{
"date": "2025-02-12T15:32:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-02-12T15:32:22+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-03T21:08:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"product": {
"name": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm (nodejs:20)",
"product_id": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=src\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"product": {
"name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm (nodejs:20)",
"product_id": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=src\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"product": {
"name": "nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm (nodejs:20)",
"product_id": "nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=src\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"product": {
"name": "nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm (nodejs:20)",
"product_id": "nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-docs@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=noarch\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"product": {
"name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm (nodejs:20)",
"product_id": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=noarch\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"product": {
"name": "nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm (nodejs:20)",
"product_id": "nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=noarch\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"product": {
"name": "nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm (nodejs:20)",
"product_id": "nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=noarch\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"product": {
"name": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm (nodejs:20)",
"product_id": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"product": {
"name": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm (nodejs:20)",
"product_id": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"product": {
"name": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm (nodejs:20)",
"product_id": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"product": {
"name": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm (nodejs:20)",
"product_id": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"product": {
"name": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm (nodejs:20)",
"product_id": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"product": {
"name": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm (nodejs:20)",
"product_id": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.8.2-1.20.18.2.1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"product": {
"name": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm (nodejs:20)",
"product_id": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"product": {
"name": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm (nodejs:20)",
"product_id": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"product": {
"name": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm (nodejs:20)",
"product_id": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"product": {
"name": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm (nodejs:20)",
"product_id": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"product": {
"name": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm (nodejs:20)",
"product_id": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"product": {
"name": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm (nodejs:20)",
"product_id": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.8.2-1.20.18.2.1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"product": {
"name": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm (nodejs:20)",
"product_id": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"product": {
"name": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm (nodejs:20)",
"product_id": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"product": {
"name": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm (nodejs:20)",
"product_id": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"product": {
"name": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm (nodejs:20)",
"product_id": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"product": {
"name": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm (nodejs:20)",
"product_id": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"product": {
"name": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm (nodejs:20)",
"product_id": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.8.2-1.20.18.2.1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"product": {
"name": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm (nodejs:20)",
"product_id": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"product": {
"name": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm (nodejs:20)",
"product_id": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"product": {
"name": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm (nodejs:20)",
"product_id": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"product": {
"name": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm (nodejs:20)",
"product_id": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"product": {
"name": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm (nodejs:20)",
"product_id": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@20.18.2-1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
},
{
"category": "product_version",
"name": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"product": {
"name": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm (nodejs:20)",
"product_id": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.8.2-1.20.18.2.1.module%2Bel8.10.0%2B22767%2Ba3309b10?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020250203134842:489197e6"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20"
},
"product_reference": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20"
},
"product_reference": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20"
},
"product_reference": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20"
},
"product_reference": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
},
"product_reference": "nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20"
},
"product_reference": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20"
},
"product_reference": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20"
},
"product_reference": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
},
"product_reference": "nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20"
},
"product_reference": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20"
},
"product_reference": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20"
},
"product_reference": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
},
"product_reference": "nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20"
},
"product_reference": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20"
},
"product_reference": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20"
},
"product_reference": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
},
"product_reference": "nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20"
},
"product_reference": "nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20"
},
"product_reference": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20"
},
"product_reference": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20"
},
"product_reference": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
},
"product_reference": "nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20"
},
"product_reference": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20"
},
"product_reference": "nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20"
},
"product_reference": "nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20"
},
"product_reference": "nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20"
},
"product_reference": "nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20"
},
"product_reference": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20"
},
"product_reference": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20"
},
"product_reference": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
},
"product_reference": "npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-22150",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2025-01-21T18:01:24.182126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2339176"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the undici package for Node.js. Undici uses `Math.random()` to choose the boundary for a multipart/form-data request. It is known that the output of `Math.random()` can be predicted if several of its generated values are known. If an app has a mechanism that sends multipart requests to an attacker-controlled website, it can leak the necessary values. Therefore, an attacker can tamper with the requests going to the backend APIs if certain conditions are met.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: Undici Uses Insufficiently Random Values",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22150"
},
{
"category": "external",
"summary": "RHBZ#2339176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339176"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22150",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22150"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22150",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22150"
},
{
"category": "external",
"summary": "https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f",
"url": "https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/blob/8b06b8250907d92fead664b3368f1d2aa27c1f35/lib/web/fetch/body.js#L113",
"url": "https://github.com/nodejs/undici/blob/8b06b8250907d92fead664b3368f1d2aa27c1f35/lib/web/fetch/body.js#L113"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/commit/711e20772764c29f6622ddc937c63b6eefdf07d0",
"url": "https://github.com/nodejs/undici/commit/711e20772764c29f6622ddc937c63b6eefdf07d0"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/commit/c2d78cd19fe4f4c621424491e26ce299e65e934a",
"url": "https://github.com/nodejs/undici/commit/c2d78cd19fe4f4c621424491e26ce299e65e934a"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/commit/c3acc6050b781b827d80c86cbbab34f14458d385",
"url": "https://github.com/nodejs/undici/commit/c3acc6050b781b827d80c86cbbab34f14458d385"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/2913312",
"url": "https://hackerone.com/reports/2913312"
}
],
"release_date": "2025-01-21T17:46:58.872000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-12T15:32:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1351"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undici: Undici Uses Insufficiently Random Values"
},
{
"cve": "CVE-2025-23083",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"discovery_date": "2025-01-22T02:00:43.830080+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2339392"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Node.js diagnostics_channel. This vulnerability allows an attacker to reinstate and misuse worker constructors, potentially bypassing the Permission Model via hooking into events when a worker thread is created.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: Node.js Worker Thread Exposure via Diagnostics Channel",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because the diagnostics_channel utility, allowing attackers to hook into events triggered when a worker thread is created. This not only exposes user-defined workers but also internal workers, enabling the attacker to retrieve instances and potentially capture and reinstate their constructors for malicious purposes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-23083"
},
{
"category": "external",
"summary": "RHBZ#2339392",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339392"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-23083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23083"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-23083",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23083"
},
{
"category": "external",
"summary": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases",
"url": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases"
}
],
"release_date": "2025-01-22T01:11:30.802000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-12T15:32:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1351"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nodejs: Node.js Worker Thread Exposure via Diagnostics Channel"
},
{
"cve": "CVE-2025-23085",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2025-01-28T17:23:01.915000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2342618"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in NodeJS when handling HTTP/2 connections, where the remote peer abruptly closes the socket without sending the proper HTTP/2 notification to the server, leading to a memory leak. This flaw allows an attacker to force the targeted process in the targeted host to an uncontrollable resource consumption state, starving the process and possibly other processes running at the same host to memory starvation, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-23085"
},
{
"category": "external",
"summary": "RHBZ#2342618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2342618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-23085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23085"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-23085",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23085"
}
],
"release_date": "2025-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-12T15:32:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1351"
},
{
"category": "workaround",
"details": "There\u0027s no available mitigation for this issue other than updating to the package version which contains the fix.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.18.2-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.18.2-1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.10.0+22767+a3309b10.src.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.10.0+22767+a3309b10.noarch.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.aarch64.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.ppc64le.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.s390x.rpm-nodejs:20",
"AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10.x86_64.rpm-nodejs:20"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap"
}
]
}
rhsa-2025:1613
Vulnerability from csaf_redhat
Published
2025-02-17 19:21
Modified
2025-10-03 21:08
Summary
Red Hat Security Advisory: nodejs:22 security update
Notes
Topic
An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
Security Fix(es):
* undici: Undici Uses Insufficiently Random Values (CVE-2025-22150)
* nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083)
* nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* undici: Undici Uses Insufficiently Random Values (CVE-2025-22150)\n\n* nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083)\n\n* nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:1613",
"url": "https://access.redhat.com/errata/RHSA-2025:1613"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2339176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339176"
},
{
"category": "external",
"summary": "2339392",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339392"
},
{
"category": "external",
"summary": "2342618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2342618"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1613.json"
}
],
"title": "Red Hat Security Advisory: nodejs:22 security update",
"tracking": {
"current_release_date": "2025-10-03T21:08:18+00:00",
"generator": {
"date": "2025-10-03T21:08:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2025:1613",
"initial_release_date": "2025-02-17T19:21:42+00:00",
"revision_history": [
{
"date": "2025-02-17T19:21:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-02-17T19:21:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-03T21:08:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"product": {
"name": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm (nodejs:22)",
"product_id": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=src\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"product": {
"name": "nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm (nodejs:22)",
"product_id": "nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=src\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"product": {
"name": "nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm (nodejs:22)",
"product_id": "nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.5.0%2B22763%2B17233acb?arch=src\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"product": {
"name": "nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm (nodejs:22)",
"product_id": "nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-docs@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=noarch\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"product": {
"name": "nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm (nodejs:22)",
"product_id": "nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=noarch\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"product": {
"name": "nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm (nodejs:22)",
"product_id": "nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.5.0%2B22763%2B17233acb?arch=noarch\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"product": {
"name": "nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm (nodejs:22)",
"product_id": "nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel9.5.0%2B22763%2B17233acb?arch=noarch\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product": {
"name": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22)",
"product_id": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product": {
"name": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22)",
"product_id": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product": {
"name": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22)",
"product_id": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product": {
"name": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22)",
"product_id": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product": {
"name": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22)",
"product_id": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22)",
"product_id": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22)",
"product_id": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs-debuginfo@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product": {
"name": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22)",
"product_id": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.9.2-1.22.13.1.1.module%2Bel9.5.0%2B22763%2B17233acb?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22)",
"product_id": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/v8-12.4-devel@12.4.254.21-1.22.13.1.1.module%2Bel9.5.0%2B22763%2B17233acb?arch=aarch64\u0026epoch=3\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product": {
"name": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22)",
"product_id": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product": {
"name": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22)",
"product_id": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product": {
"name": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22)",
"product_id": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product": {
"name": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22)",
"product_id": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product": {
"name": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22)",
"product_id": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22)",
"product_id": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22)",
"product_id": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs-debuginfo@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product": {
"name": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22)",
"product_id": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.9.2-1.22.13.1.1.module%2Bel9.5.0%2B22763%2B17233acb?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22)",
"product_id": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/v8-12.4-devel@12.4.254.21-1.22.13.1.1.module%2Bel9.5.0%2B22763%2B17233acb?arch=ppc64le\u0026epoch=3\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product": {
"name": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22)",
"product_id": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product": {
"name": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22)",
"product_id": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product": {
"name": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22)",
"product_id": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product": {
"name": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22)",
"product_id": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product": {
"name": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22)",
"product_id": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22)",
"product_id": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22)",
"product_id": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs-debuginfo@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product": {
"name": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22)",
"product_id": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.9.2-1.22.13.1.1.module%2Bel9.5.0%2B22763%2B17233acb?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22)",
"product_id": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/v8-12.4-devel@12.4.254.21-1.22.13.1.1.module%2Bel9.5.0%2B22763%2B17233acb?arch=s390x\u0026epoch=3\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product": {
"name": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22)",
"product_id": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product": {
"name": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22)",
"product_id": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product": {
"name": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22)",
"product_id": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product": {
"name": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22)",
"product_id": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product": {
"name": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22)",
"product_id": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22)",
"product_id": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22)",
"product_id": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs-debuginfo@22.13.1-1.module%2Bel9.5.0%2B22763%2B17233acb?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product": {
"name": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22)",
"product_id": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.9.2-1.22.13.1.1.module%2Bel9.5.0%2B22763%2B17233acb?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
},
{
"category": "product_version",
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22)",
"product_id": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/v8-12.4-devel@12.4.254.21-1.22.13.1.1.module%2Bel9.5.0%2B22763%2B17233acb?arch=x86_64\u0026epoch=3\u0026rpmmod=nodejs:22:9050020250131131518:rhel9"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22"
},
"product_reference": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22"
},
"product_reference": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22"
},
"product_reference": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22"
},
"product_reference": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
},
"product_reference": "nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22"
},
"product_reference": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22"
},
"product_reference": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22"
},
"product_reference": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
},
"product_reference": "nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22"
},
"product_reference": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22"
},
"product_reference": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22"
},
"product_reference": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
},
"product_reference": "nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22"
},
"product_reference": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22"
},
"product_reference": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22"
},
"product_reference": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
},
"product_reference": "nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22"
},
"product_reference": "nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22"
},
"product_reference": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22"
},
"product_reference": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22"
},
"product_reference": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
},
"product_reference": "nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
},
"product_reference": "nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22"
},
"product_reference": "nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22"
},
"product_reference": "nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22"
},
"product_reference": "nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22"
},
"product_reference": "nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22"
},
"product_reference": "nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22"
},
"product_reference": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22"
},
"product_reference": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22"
},
"product_reference": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
},
"product_reference": "npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22"
},
"product_reference": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22"
},
"product_reference": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22"
},
"product_reference": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm (nodejs:22) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
},
"product_reference": "v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-22150",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2025-01-21T18:01:24.182126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2339176"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the undici package for Node.js. Undici uses `Math.random()` to choose the boundary for a multipart/form-data request. It is known that the output of `Math.random()` can be predicted if several of its generated values are known. If an app has a mechanism that sends multipart requests to an attacker-controlled website, it can leak the necessary values. Therefore, an attacker can tamper with the requests going to the backend APIs if certain conditions are met.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: Undici Uses Insufficiently Random Values",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22150"
},
{
"category": "external",
"summary": "RHBZ#2339176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339176"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22150",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22150"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22150",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22150"
},
{
"category": "external",
"summary": "https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f",
"url": "https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/blob/8b06b8250907d92fead664b3368f1d2aa27c1f35/lib/web/fetch/body.js#L113",
"url": "https://github.com/nodejs/undici/blob/8b06b8250907d92fead664b3368f1d2aa27c1f35/lib/web/fetch/body.js#L113"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/commit/711e20772764c29f6622ddc937c63b6eefdf07d0",
"url": "https://github.com/nodejs/undici/commit/711e20772764c29f6622ddc937c63b6eefdf07d0"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/commit/c2d78cd19fe4f4c621424491e26ce299e65e934a",
"url": "https://github.com/nodejs/undici/commit/c2d78cd19fe4f4c621424491e26ce299e65e934a"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/commit/c3acc6050b781b827d80c86cbbab34f14458d385",
"url": "https://github.com/nodejs/undici/commit/c3acc6050b781b827d80c86cbbab34f14458d385"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/2913312",
"url": "https://hackerone.com/reports/2913312"
}
],
"release_date": "2025-01-21T17:46:58.872000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-17T19:21:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1613"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undici: Undici Uses Insufficiently Random Values"
},
{
"cve": "CVE-2025-23083",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"discovery_date": "2025-01-22T02:00:43.830080+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2339392"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Node.js diagnostics_channel. This vulnerability allows an attacker to reinstate and misuse worker constructors, potentially bypassing the Permission Model via hooking into events when a worker thread is created.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: Node.js Worker Thread Exposure via Diagnostics Channel",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because the diagnostics_channel utility, allowing attackers to hook into events triggered when a worker thread is created. This not only exposes user-defined workers but also internal workers, enabling the attacker to retrieve instances and potentially capture and reinstate their constructors for malicious purposes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-23083"
},
{
"category": "external",
"summary": "RHBZ#2339392",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339392"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-23083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23083"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-23083",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23083"
},
{
"category": "external",
"summary": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases",
"url": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases"
}
],
"release_date": "2025-01-22T01:11:30.802000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-17T19:21:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1613"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nodejs: Node.js Worker Thread Exposure via Diagnostics Channel"
},
{
"cve": "CVE-2025-23085",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2025-01-28T17:23:01.915000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2342618"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in NodeJS when handling HTTP/2 connections, where the remote peer abruptly closes the socket without sending the proper HTTP/2 notification to the server, leading to a memory leak. This flaw allows an attacker to force the targeted process in the targeted host to an uncontrollable resource consumption state, starving the process and possibly other processes running at the same host to memory starvation, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-23085"
},
{
"category": "external",
"summary": "RHBZ#2342618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2342618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-23085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23085"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-23085",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23085"
}
],
"release_date": "2025-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-17T19:21:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1613"
},
{
"category": "workaround",
"details": "There\u0027s no available mitigation for this issue other than updating to the package version which contains the fix.",
"product_ids": [
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-debugsource-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-devel-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-docs-22.13.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-full-i18n-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-libs-debuginfo-22.13.1-1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-nodemon-3.0.1-1.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-2021.06-4.module+el9.5.0+22763+17233acb.src.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:nodejs-packaging-bundler-2021.06-4.module+el9.5.0+22763+17233acb.noarch.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:npm-10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.aarch64.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.ppc64le.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.s390x.rpm-nodejs:22",
"AppStream-9.5.0.Z.MAIN:v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb.x86_64.rpm-nodejs:22"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap"
}
]
}
rhsa-2025:1522
Vulnerability from csaf_redhat
Published
2025-02-17 04:50
Modified
2025-09-25 15:18
Summary
Red Hat Security Advisory: nodejs:20 security update
Notes
Topic
An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
Security Fix(es):
* nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:1522",
"url": "https://access.redhat.com/errata/RHSA-2025:1522"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2339392",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339392"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1522.json"
}
],
"title": "Red Hat Security Advisory: nodejs:20 security update",
"tracking": {
"current_release_date": "2025-09-25T15:18:11+00:00",
"generator": {
"date": "2025-09-25T15:18:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.8"
}
},
"id": "RHSA-2025:1522",
"initial_release_date": "2025-02-17T04:50:14+00:00",
"revision_history": [
{
"date": "2025-02-17T04:50:14+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-02-17T04:50:14+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-25T15:18:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.4::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.src.rpm-nodejs:20",
"product": {
"name": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.src.rpm (nodejs:20)",
"product_id": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.src.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=src\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"product": {
"name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm (nodejs:20)",
"product_id": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0.z%2B20478%2B84a9f781?arch=src\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"product": {
"name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm (nodejs:20)",
"product_id": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.3.0%2B19518%2B63aad52d?arch=src\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-docs-20.18.2-1.module+el9.4.0+22789+7c201776.noarch.rpm-nodejs:20",
"product": {
"name": "nodejs-docs-20.18.2-1.module+el9.4.0+22789+7c201776.noarch.rpm (nodejs:20)",
"product_id": "nodejs-docs-20.18.2-1.module+el9.4.0+22789+7c201776.noarch.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-docs@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=noarch\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"product": {
"name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm (nodejs:20)",
"product_id": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0.z%2B20478%2B84a9f781?arch=noarch\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"product": {
"name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20)",
"product_id": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.3.0%2B19518%2B63aad52d?arch=noarch\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"product": {
"name": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20)",
"product_id": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel9.3.0%2B19518%2B63aad52d?arch=noarch\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"product": {
"name": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm (nodejs:20)",
"product_id": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"product": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm (nodejs:20)",
"product_id": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"product": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm (nodejs:20)",
"product_id": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"product": {
"name": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm (nodejs:20)",
"product_id": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"product": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm (nodejs:20)",
"product_id": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"product": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.aarch64.rpm (nodejs:20)",
"product_id": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.8.2-1.20.18.2.1.module%2Bel9.4.0%2B22789%2B7c201776?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"product": {
"name": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm (nodejs:20)",
"product_id": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"product": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm (nodejs:20)",
"product_id": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"product": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm (nodejs:20)",
"product_id": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"product": {
"name": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm (nodejs:20)",
"product_id": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"product": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm (nodejs:20)",
"product_id": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"product": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.ppc64le.rpm (nodejs:20)",
"product_id": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.8.2-1.20.18.2.1.module%2Bel9.4.0%2B22789%2B7c201776?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"product": {
"name": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm (nodejs:20)",
"product_id": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"product": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm (nodejs:20)",
"product_id": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"product": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm (nodejs:20)",
"product_id": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"product": {
"name": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm (nodejs:20)",
"product_id": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"product": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm (nodejs:20)",
"product_id": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"product": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.s390x.rpm (nodejs:20)",
"product_id": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.8.2-1.20.18.2.1.module%2Bel9.4.0%2B22789%2B7c201776?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"product": {
"name": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm (nodejs:20)",
"product_id": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"product": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm (nodejs:20)",
"product_id": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"product": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm (nodejs:20)",
"product_id": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"product": {
"name": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm (nodejs:20)",
"product_id": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"product": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm (nodejs:20)",
"product_id": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@20.18.2-1.module%2Bel9.4.0%2B22789%2B7c201776?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
},
{
"category": "product_version",
"name": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"product": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.x86_64.rpm (nodejs:20)",
"product_id": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@10.8.2-1.20.18.2.1.module%2Bel9.4.0%2B22789%2B7c201776?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020250211134231:rhel9"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20"
},
"product_reference": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20"
},
"product_reference": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20"
},
"product_reference": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.src.rpm-nodejs:20"
},
"product_reference": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.src.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20"
},
"product_reference": "nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20"
},
"product_reference": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20"
},
"product_reference": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20"
},
"product_reference": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20"
},
"product_reference": "nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20"
},
"product_reference": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20"
},
"product_reference": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20"
},
"product_reference": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20"
},
"product_reference": "nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20"
},
"product_reference": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20"
},
"product_reference": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20"
},
"product_reference": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20"
},
"product_reference": "nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-docs-20.18.2-1.module+el9.4.0+22789+7c201776.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-docs-20.18.2-1.module+el9.4.0+22789+7c201776.noarch.rpm-nodejs:20"
},
"product_reference": "nodejs-docs-20.18.2-1.module+el9.4.0+22789+7c201776.noarch.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20"
},
"product_reference": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20"
},
"product_reference": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20"
},
"product_reference": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20"
},
"product_reference": "nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20"
},
"product_reference": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20"
},
"product_reference": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20"
},
"product_reference": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20"
},
"product_reference": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20"
},
"product_reference": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20"
},
"product_reference": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20"
},
"product_reference": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20"
},
"product_reference": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20"
},
"product_reference": "npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-23083",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"discovery_date": "2025-01-22T02:00:43.830080+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2339392"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Node.js diagnostics_channel. This vulnerability allows an attacker to reinstate and misuse worker constructors, potentially bypassing the Permission Model via hooking into events when a worker thread is created.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: Node.js Worker Thread Exposure via Diagnostics Channel",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because the diagnostics_channel utility, allowing attackers to hook into events triggered when a worker thread is created. This not only exposes user-defined workers but also internal workers, enabling the attacker to retrieve instances and potentially capture and reinstate their constructors for malicious purposes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.src.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-docs-20.18.2-1.module+el9.4.0+22789+7c201776.noarch.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-23083"
},
{
"category": "external",
"summary": "RHBZ#2339392",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339392"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-23083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23083"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-23083",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23083"
},
{
"category": "external",
"summary": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases",
"url": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases"
}
],
"release_date": "2025-01-22T01:11:30.802000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-17T04:50:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.src.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-docs-20.18.2-1.module+el9.4.0+22789+7c201776.noarch.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1522"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.src.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debuginfo-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-debugsource-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-devel-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-docs-20.18.2-1.module+el9.4.0+22789+7c201776.noarch.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-full-i18n-20.18.2-1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.aarch64.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.ppc64le.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.s390x.rpm-nodejs:20",
"AppStream-9.4.0.Z.EUS:npm-10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776.x86_64.rpm-nodejs:20"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nodejs: Node.js Worker Thread Exposure via Diagnostics Channel"
}
]
}
CERTFR-2025-AVI-0319
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | GraalVM Enterprise Edition | Oracle GraalVM Enterprise Edition version 20.3.17 | ||
| Oracle | Java SE | Oracle Java SE version 21.0.6 | ||
| Oracle | Java SE | Oracle Java SE version 8u441 | ||
| Oracle | GraalVM Enterprise Edition | Oracle GraalVM for JDK version 21.0.6 | ||
| Oracle | Java SE | Oracle Java SE version 17.0.14 | ||
| Oracle | GraalVM Enterprise Edition | Oracle GraalVM for JDK version 24 | ||
| Oracle | Java SE | Oracle Java SE version 11.0.26 | ||
| Oracle | GraalVM Enterprise Edition | Oracle GraalVM for JDK version 17.0.14 | ||
| Oracle | GraalVM Enterprise Edition | Oracle GraalVM Enterprise Edition version 21.3.13 | ||
| Oracle | Java SE | Oracle Java SE version 24 | ||
| Oracle | Java SE | Oracle Java SE version 8u441-perf |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle GraalVM Enterprise Edition version 20.3.17",
"product": {
"name": "GraalVM Enterprise Edition",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 21.0.6",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 8u441",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM for JDK version 21.0.6",
"product": {
"name": "GraalVM Enterprise Edition",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 17.0.14",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM for JDK version 24",
"product": {
"name": "GraalVM Enterprise Edition",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 11.0.26",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM for JDK version 17.0.14",
"product": {
"name": "GraalVM Enterprise Edition",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle GraalVM Enterprise Edition version 21.3.13",
"product": {
"name": "GraalVM Enterprise Edition",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 24",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Java SE version 8u441-perf",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-54508",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54508"
},
{
"name": "CVE-2024-44296",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-44296"
},
{
"name": "CVE-2024-54502",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54502"
},
{
"name": "CVE-2024-47544",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47544"
},
{
"name": "CVE-2024-54505",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54505"
},
{
"name": "CVE-2024-40866",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40866"
},
{
"name": "CVE-2024-47545",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47545"
},
{
"name": "CVE-2024-54479",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54479"
},
{
"name": "CVE-2024-47596",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47596"
},
{
"name": "CVE-2025-24150",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24150"
},
{
"name": "CVE-2024-27856",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27856"
},
{
"name": "CVE-2024-47606",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47606"
},
{
"name": "CVE-2024-44187",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-44187"
},
{
"name": "CVE-2025-24162",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24162"
},
{
"name": "CVE-2025-30691",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30691"
},
{
"name": "CVE-2024-47546",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47546"
},
{
"name": "CVE-2024-44244",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-44244"
},
{
"name": "CVE-2024-44309",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-44309"
},
{
"name": "CVE-2024-47778",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47778"
},
{
"name": "CVE-2025-23085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23085"
},
{
"name": "CVE-2024-44308",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-44308"
},
{
"name": "CVE-2024-47777",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47777"
},
{
"name": "CVE-2025-21587",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21587"
},
{
"name": "CVE-2025-23083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23083"
},
{
"name": "CVE-2024-47597",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47597"
},
{
"name": "CVE-2025-30698",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30698"
},
{
"name": "CVE-2024-44185",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-44185"
},
{
"name": "CVE-2024-54543",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54543"
},
{
"name": "CVE-2025-23084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23084"
},
{
"name": "CVE-2024-47776",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47776"
},
{
"name": "CVE-2024-47775",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47775"
},
{
"name": "CVE-2024-54534",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54534"
},
{
"name": "CVE-2025-24143",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24143"
},
{
"name": "CVE-2025-24158",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24158"
}
],
"initial_release_date": "2025-04-16T00:00:00",
"last_revision_date": "2025-04-16T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0319",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-04-16T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Java SE. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Java SE",
"vendor_advisories": [
{
"published_at": "2025-04-15",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle Java SE cpuapr2025",
"url": "https://www.oracle.com/security-alerts/cpuapr2025.html"
}
]
}
CERTFR-2025-AVI-0756
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| VMware | Tanzu Platform | Tanzu Platform for Cloud Foundry isolation segment 10.2.2+LTS-T | ||
| VMware | Tanzu | Tanzu for MySQL on Cloud Foundry versions antérieures à 10.0.2 | ||
| VMware | Tanzu | Java Buildpack versions antérieures à 4.84.0 | ||
| VMware | Tanzu | Stemcells pour Ubuntu Jammy Azure Light versions antérieures à 1.894 | ||
| VMware | Tanzu Platform | Tanzu Platform for Cloud Foundry isolation segment versions antérieures à 10.0.9 | ||
| VMware | Tanzu | Tanzu Scheduler versions antérieures à 2.0.20 | ||
| VMware | Tanzu | Spring Cloud Services for VMware Tanzu versions antérieures à 3.3.9 | ||
| VMware | Tanzu | Tanzu GemFire versions antérieures à 10.1.4 | ||
| VMware | Tanzu Operations Manager | Tanzu Operations Manager versions antérieures à 3.1.2 | ||
| VMware | Tanzu Platform | Tanzu Platform for Cloud Foundry isolation segment versions antérieures à 6.0.19+LTS-T | ||
| VMware | Tanzu | Single Sign-On for VMware Tanzu Application Service versions antérieures à 1.16.12 | ||
| VMware | Tanzu | Tanzu Hub versions antérieures à 10.2.1 | ||
| VMware | Tanzu | Stemcells pour Ubuntu Jammy versions antérieures à 1.894 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Tanzu Platform for Cloud Foundry isolation segment 10.2.2+LTS-T",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu for MySQL on Cloud Foundry versions ant\u00e9rieures \u00e0 10.0.2",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Java Buildpack versions ant\u00e9rieures \u00e0 4.84.0",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells pour Ubuntu Jammy Azure Light versions ant\u00e9rieures \u00e0 1.894",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform for Cloud Foundry isolation segment versions ant\u00e9rieures \u00e0 10.0.9",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Scheduler versions ant\u00e9rieures \u00e0 2.0.20",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Spring Cloud Services for VMware Tanzu versions ant\u00e9rieures \u00e0 3.3.9",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu GemFire versions ant\u00e9rieures \u00e0 10.1.4",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Operations Manager versions ant\u00e9rieures \u00e0 3.1.2",
"product": {
"name": "Tanzu Operations Manager",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform for Cloud Foundry isolation segment versions ant\u00e9rieures \u00e0 6.0.19+LTS-T",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Single Sign-On for VMware Tanzu Application Service versions ant\u00e9rieures \u00e0 1.16.12",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Hub versions ant\u00e9rieures \u00e0 10.2.1",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells pour Ubuntu Jammy versions ant\u00e9rieures \u00e0 1.894",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2021-44832",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44832"
},
{
"name": "CVE-2021-45105",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45105"
},
{
"name": "CVE-2021-44228",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44228"
},
{
"name": "CVE-2013-1548",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-1548"
},
{
"name": "CVE-2015-4779",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4779"
},
{
"name": "CVE-2015-4780",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4780"
},
{
"name": "CVE-2015-4787",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4787"
},
{
"name": "CVE-2015-4790",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4790"
},
{
"name": "CVE-2015-4778",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4778"
},
{
"name": "CVE-2015-4782",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4782"
},
{
"name": "CVE-2015-4789",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4789"
},
{
"name": "CVE-2015-4764",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4764"
},
{
"name": "CVE-2015-4783",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4783"
},
{
"name": "CVE-2015-2583",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2583"
},
{
"name": "CVE-2015-4781",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4781"
},
{
"name": "CVE-2015-4776",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4776"
},
{
"name": "CVE-2015-4786",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4786"
},
{
"name": "CVE-2015-2656",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2656"
},
{
"name": "CVE-2015-4788",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4788"
},
{
"name": "CVE-2015-4785",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4785"
},
{
"name": "CVE-2015-4754",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4754"
},
{
"name": "CVE-2015-4775",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4775"
},
{
"name": "CVE-2015-4777",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4777"
},
{
"name": "CVE-2015-2640",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2640"
},
{
"name": "CVE-2015-4774",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4774"
},
{
"name": "CVE-2015-2626",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2626"
},
{
"name": "CVE-2015-2624",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2624"
},
{
"name": "CVE-2015-4784",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4784"
},
{
"name": "CVE-2015-2654",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2654"
},
{
"name": "CVE-2017-8046",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8046"
},
{
"name": "CVE-2018-3280",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3280"
},
{
"name": "CVE-2018-3137",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3137"
},
{
"name": "CVE-2018-3285",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3285"
},
{
"name": "CVE-2018-3182",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3182"
},
{
"name": "CVE-2018-3186",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3186"
},
{
"name": "CVE-2018-3195",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3195"
},
{
"name": "CVE-2018-3286",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3286"
},
{
"name": "CVE-2018-3170",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3170"
},
{
"name": "CVE-2018-3279",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3279"
},
{
"name": "CVE-2018-3212",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3212"
},
{
"name": "CVE-2018-3203",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3203"
},
{
"name": "CVE-2018-3145",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3145"
},
{
"name": "CVE-2019-2530",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2530"
},
{
"name": "CVE-2019-2436",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2436"
},
{
"name": "CVE-2019-2539",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2539"
},
{
"name": "CVE-2019-2494",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2494"
},
{
"name": "CVE-2019-2535",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2535"
},
{
"name": "CVE-2019-2533",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2533"
},
{
"name": "CVE-2019-2495",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2495"
},
{
"name": "CVE-2019-2513",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2513"
},
{
"name": "CVE-2019-2536",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2536"
},
{
"name": "CVE-2019-2502",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2502"
},
{
"name": "CVE-2019-2634",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2634"
},
{
"name": "CVE-2019-2587",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2587"
},
{
"name": "CVE-2019-2584",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2584"
},
{
"name": "CVE-2019-2691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2691"
},
{
"name": "CVE-2019-2606",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2606"
},
{
"name": "CVE-2019-2630",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2630"
},
{
"name": "CVE-2019-2624",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2624"
},
{
"name": "CVE-2019-2623",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2623"
},
{
"name": "CVE-2019-2695",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2695"
},
{
"name": "CVE-2019-2596",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2596"
},
{
"name": "CVE-2019-2580",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2580"
},
{
"name": "CVE-2019-2644",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2644"
},
{
"name": "CVE-2019-2681",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2681"
},
{
"name": "CVE-2019-2617",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2617"
},
{
"name": "CVE-2019-2636",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2636"
},
{
"name": "CVE-2019-2689",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2689"
},
{
"name": "CVE-2019-2693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2693"
},
{
"name": "CVE-2019-2593",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2593"
},
{
"name": "CVE-2019-2625",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2625"
},
{
"name": "CVE-2019-2585",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2585"
},
{
"name": "CVE-2019-2631",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2631"
},
{
"name": "CVE-2019-2694",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2694"
},
{
"name": "CVE-2019-2620",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2620"
},
{
"name": "CVE-2019-2688",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2688"
},
{
"name": "CVE-2019-2589",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2589"
},
{
"name": "CVE-2019-2635",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2635"
},
{
"name": "CVE-2019-2626",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2626"
},
{
"name": "CVE-2019-2686",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2686"
},
{
"name": "CVE-2019-2685",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2685"
},
{
"name": "CVE-2019-2687",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2687"
},
{
"name": "CVE-2019-2607",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2607"
},
{
"name": "CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"name": "CVE-2019-2811",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2811"
},
{
"name": "CVE-2019-2740",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2740"
},
{
"name": "CVE-2019-2879",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2879"
},
{
"name": "CVE-2019-2808",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2808"
},
{
"name": "CVE-2019-2738",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2738"
},
{
"name": "CVE-2019-2819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2819"
},
{
"name": "CVE-2019-2737",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2737"
},
{
"name": "CVE-2019-2814",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2814"
},
{
"name": "CVE-2019-2778",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2778"
},
{
"name": "CVE-2019-2822",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2822"
},
{
"name": "CVE-2019-2802",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2802"
},
{
"name": "CVE-2019-2803",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2803"
},
{
"name": "CVE-2019-2752",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2752"
},
{
"name": "CVE-2019-2826",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2826"
},
{
"name": "CVE-2019-2784",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2784"
},
{
"name": "CVE-2019-2789",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2789"
},
{
"name": "CVE-2019-2801",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2801"
},
{
"name": "CVE-2019-2791",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2791"
},
{
"name": "CVE-2019-2798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2798"
},
{
"name": "CVE-2019-2796",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2796"
},
{
"name": "CVE-2019-2815",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2815"
},
{
"name": "CVE-2019-2810",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2810"
},
{
"name": "CVE-2019-2780",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2780"
},
{
"name": "CVE-2019-2758",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2758"
},
{
"name": "CVE-2019-2757",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2757"
},
{
"name": "CVE-2019-2785",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2785"
},
{
"name": "CVE-2019-2747",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2747"
},
{
"name": "CVE-2019-2741",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2741"
},
{
"name": "CVE-2019-2830",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2830"
},
{
"name": "CVE-2019-2834",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2834"
},
{
"name": "CVE-2019-2743",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2743"
},
{
"name": "CVE-2019-2739",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2739"
},
{
"name": "CVE-2019-2805",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2805"
},
{
"name": "CVE-2019-2797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2797"
},
{
"name": "CVE-2019-2774",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2774"
},
{
"name": "CVE-2019-2795",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2795"
},
{
"name": "CVE-2019-2746",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2746"
},
{
"name": "CVE-2019-2812",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2812"
},
{
"name": "CVE-2019-2924",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2924"
},
{
"name": "CVE-2019-2914",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2914"
},
{
"name": "CVE-2019-2960",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2960"
},
{
"name": "CVE-2019-2923",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2923"
},
{
"name": "CVE-2019-2968",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2968"
},
{
"name": "CVE-2019-2993",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2993"
},
{
"name": "CVE-2019-3009",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-3009"
},
{
"name": "CVE-2019-2969",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2969"
},
{
"name": "CVE-2019-3011",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-3011"
},
{
"name": "CVE-2019-2967",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2967"
},
{
"name": "CVE-2019-2946",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2946"
},
{
"name": "CVE-2019-2966",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2966"
},
{
"name": "CVE-2019-2957",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2957"
},
{
"name": "CVE-2019-2948",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2948"
},
{
"name": "CVE-2019-2922",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2922"
},
{
"name": "CVE-2019-3004",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-3004"
},
{
"name": "CVE-2019-2998",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2998"
},
{
"name": "CVE-2019-2911",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2911"
},
{
"name": "CVE-2019-2950",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2950"
},
{
"name": "CVE-2019-2910",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2910"
},
{
"name": "CVE-2019-3018",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-3018"
},
{
"name": "CVE-2019-2974",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2974"
},
{
"name": "CVE-2019-2991",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2991"
},
{
"name": "CVE-2019-2997",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2997"
},
{
"name": "CVE-2019-2938",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2938"
},
{
"name": "CVE-2019-3003",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-3003"
},
{
"name": "CVE-2019-2982",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2982"
},
{
"name": "CVE-2019-2963",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2963"
},
{
"name": "CVE-2020-2579",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2579"
},
{
"name": "CVE-2020-2584",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2584"
},
{
"name": "CVE-2020-2577",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2577"
},
{
"name": "CVE-2020-2679",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2679"
},
{
"name": "CVE-2020-2570",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2570"
},
{
"name": "CVE-2020-2572",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2572"
},
{
"name": "CVE-2020-2627",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2627"
},
{
"name": "CVE-2020-2660",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2660"
},
{
"name": "CVE-2020-2589",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2589"
},
{
"name": "CVE-2020-2573",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2573"
},
{
"name": "CVE-2020-2686",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2686"
},
{
"name": "CVE-2020-2694",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2694"
},
{
"name": "CVE-2020-2574",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2574"
},
{
"name": "CVE-2020-2770",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2770"
},
{
"name": "CVE-2020-2925",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2925"
},
{
"name": "CVE-2020-2853",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2853"
},
{
"name": "CVE-2020-2774",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2774"
},
{
"name": "CVE-2020-2928",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2928"
},
{
"name": "CVE-2020-2897",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2897"
},
{
"name": "CVE-2020-2812",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2812"
},
{
"name": "CVE-2020-2765",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2765"
},
{
"name": "CVE-2020-2761",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2761"
},
{
"name": "CVE-2020-2790",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2790"
},
{
"name": "CVE-2020-2752",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2752"
},
{
"name": "CVE-2020-2904",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2904"
},
{
"name": "CVE-2020-2893",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2893"
},
{
"name": "CVE-2020-2760",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2760"
},
{
"name": "CVE-2020-2780",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2780"
},
{
"name": "CVE-2020-2903",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2903"
},
{
"name": "CVE-2020-2924",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2924"
},
{
"name": "CVE-2020-2806",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2806"
},
{
"name": "CVE-2020-2922",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2922"
},
{
"name": "CVE-2020-2901",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2901"
},
{
"name": "CVE-2020-2926",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2926"
},
{
"name": "CVE-2020-2923",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2923"
},
{
"name": "CVE-2020-2921",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2921"
},
{
"name": "CVE-2020-2779",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2779"
},
{
"name": "CVE-2020-2892",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2892"
},
{
"name": "CVE-2020-2896",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2896"
},
{
"name": "CVE-2020-2804",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2804"
},
{
"name": "CVE-2020-2895",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2895"
},
{
"name": "CVE-2020-2930",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2930"
},
{
"name": "CVE-2020-2814",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2814"
},
{
"name": "CVE-2020-2759",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2759"
},
{
"name": "CVE-2020-2763",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2763"
},
{
"name": "CVE-2020-14550",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14550"
},
{
"name": "CVE-2020-14567",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14567"
},
{
"name": "CVE-2020-14559",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14559"
},
{
"name": "CVE-2020-14576",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14576"
},
{
"name": "CVE-2020-14540",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14540"
},
{
"name": "CVE-2020-14547",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14547"
},
{
"name": "CVE-2020-14553",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14553"
},
{
"name": "CVE-2020-14539",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14539"
},
{
"name": "CVE-2020-14845",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14845"
},
{
"name": "CVE-2020-14799",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14799"
},
{
"name": "CVE-2020-14793",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14793"
},
{
"name": "CVE-2020-14888",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14888"
},
{
"name": "CVE-2020-14790",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14790"
},
{
"name": "CVE-2020-14789",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14789"
},
{
"name": "CVE-2020-14672",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14672"
},
{
"name": "CVE-2020-14846",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14846"
},
{
"name": "CVE-2020-14771",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14771"
},
{
"name": "CVE-2020-14873",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14873"
},
{
"name": "CVE-2020-14791",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14791"
},
{
"name": "CVE-2020-14769",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14769"
},
{
"name": "CVE-2020-14844",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14844"
},
{
"name": "CVE-2020-14809",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14809"
},
{
"name": "CVE-2020-14860",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14860"
},
{
"name": "CVE-2020-14866",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14866"
},
{
"name": "CVE-2020-14861",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14861"
},
{
"name": "CVE-2020-14773",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14773"
},
{
"name": "CVE-2020-14776",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14776"
},
{
"name": "CVE-2020-14852",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14852"
},
{
"name": "CVE-2020-14760",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14760"
},
{
"name": "CVE-2020-14870",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14870"
},
{
"name": "CVE-2020-14837",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14837"
},
{
"name": "CVE-2020-14893",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14893"
},
{
"name": "CVE-2020-14836",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14836"
},
{
"name": "CVE-2020-14829",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14829"
},
{
"name": "CVE-2020-14868",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14868"
},
{
"name": "CVE-2020-14827",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14827"
},
{
"name": "CVE-2020-14839",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14839"
},
{
"name": "CVE-2020-14777",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14777"
},
{
"name": "CVE-2020-14812",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14812"
},
{
"name": "CVE-2020-14775",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14775"
},
{
"name": "CVE-2020-14838",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14838"
},
{
"name": "CVE-2020-14869",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14869"
},
{
"name": "CVE-2020-14765",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14765"
},
{
"name": "CVE-2020-14814",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14814"
},
{
"name": "CVE-2020-14821",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14821"
},
{
"name": "CVE-2020-14830",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14830"
},
{
"name": "CVE-2020-14828",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14828"
},
{
"name": "CVE-2020-14804",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14804"
},
{
"name": "CVE-2020-14800",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14800"
},
{
"name": "CVE-2020-14891",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14891"
},
{
"name": "CVE-2020-14848",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14848"
},
{
"name": "CVE-2020-14867",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14867"
},
{
"name": "CVE-2020-14785",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14785"
},
{
"name": "CVE-2020-14794",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14794"
},
{
"name": "CVE-2020-14786",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14786"
},
{
"name": "CVE-2020-15358",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15358"
},
{
"name": "CVE-2020-1971",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1971"
},
{
"name": "CVE-2021-2010",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2010"
},
{
"name": "CVE-2021-2001",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2001"
},
{
"name": "CVE-2021-2060",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2060"
},
{
"name": "CVE-2021-2014",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2014"
},
{
"name": "CVE-2021-2032",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2032"
},
{
"name": "CVE-2021-2036",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2036"
},
{
"name": "CVE-2021-2007",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2007"
},
{
"name": "CVE-2021-2011",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2011"
},
{
"name": "CVE-2021-2022",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2022"
},
{
"name": "CVE-2019-25013",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-25013"
},
{
"name": "CVE-2021-2308",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2308"
},
{
"name": "CVE-2021-2213",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2213"
},
{
"name": "CVE-2021-2172",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2172"
},
{
"name": "CVE-2021-2293",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2293"
},
{
"name": "CVE-2021-2208",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2208"
},
{
"name": "CVE-2021-2196",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2196"
},
{
"name": "CVE-2021-2194",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2194"
},
{
"name": "CVE-2021-2298",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2298"
},
{
"name": "CVE-2021-2162",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2162"
},
{
"name": "CVE-2021-2179",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2179"
},
{
"name": "CVE-2021-2307",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2307"
},
{
"name": "CVE-2021-2217",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2217"
},
{
"name": "CVE-2021-2180",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2180"
},
{
"name": "CVE-2021-2203",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2203"
},
{
"name": "CVE-2021-2144",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2144"
},
{
"name": "CVE-2021-2226",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2226"
},
{
"name": "CVE-2021-2232",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2232"
},
{
"name": "CVE-2021-2169",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2169"
},
{
"name": "CVE-2021-2301",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2301"
},
{
"name": "CVE-2021-2202",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2202"
},
{
"name": "CVE-2021-2166",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2166"
},
{
"name": "CVE-2021-2174",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2174"
},
{
"name": "CVE-2021-2154",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2154"
},
{
"name": "CVE-2021-2193",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2193"
},
{
"name": "CVE-2021-2300",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2300"
},
{
"name": "CVE-2021-2299",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2299"
},
{
"name": "CVE-2021-2212",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2212"
},
{
"name": "CVE-2021-2178",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2178"
},
{
"name": "CVE-2021-2146",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2146"
},
{
"name": "CVE-2021-2230",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2230"
},
{
"name": "CVE-2021-2278",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2278"
},
{
"name": "CVE-2021-2164",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2164"
},
{
"name": "CVE-2021-2201",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2201"
},
{
"name": "CVE-2021-2170",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2170"
},
{
"name": "CVE-2021-2304",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2304"
},
{
"name": "CVE-2021-2160",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2160"
},
{
"name": "CVE-2021-2171",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2171"
},
{
"name": "CVE-2021-2305",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2305"
},
{
"name": "CVE-2021-2215",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2215"
},
{
"name": "CVE-2021-25214",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-25214"
},
{
"name": "CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"name": "CVE-2020-10878",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10878"
},
{
"name": "CVE-2021-2370",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2370"
},
{
"name": "CVE-2021-2389",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2389"
},
{
"name": "CVE-2021-2444",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2444"
},
{
"name": "CVE-2021-2429",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2429"
},
{
"name": "CVE-2021-2426",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2426"
},
{
"name": "CVE-2021-2427",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2427"
},
{
"name": "CVE-2021-2339",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2339"
},
{
"name": "CVE-2021-2425",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2425"
},
{
"name": "CVE-2021-2387",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2387"
},
{
"name": "CVE-2021-2383",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2383"
},
{
"name": "CVE-2021-2372",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2372"
},
{
"name": "CVE-2021-2399",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2399"
},
{
"name": "CVE-2021-2384",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2384"
},
{
"name": "CVE-2021-2412",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2412"
},
{
"name": "CVE-2021-2441",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2441"
},
{
"name": "CVE-2021-2410",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2410"
},
{
"name": "CVE-2021-2342",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2342"
},
{
"name": "CVE-2021-2437",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2437"
},
{
"name": "CVE-2021-2417",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2417"
},
{
"name": "CVE-2021-2424",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2424"
},
{
"name": "CVE-2021-2385",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2385"
},
{
"name": "CVE-2021-2357",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2357"
},
{
"name": "CVE-2021-2352",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2352"
},
{
"name": "CVE-2021-2402",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2402"
},
{
"name": "CVE-2021-2440",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2440"
},
{
"name": "CVE-2021-2340",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2340"
},
{
"name": "CVE-2021-2390",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2390"
},
{
"name": "CVE-2021-2374",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2374"
},
{
"name": "CVE-2021-2356",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2356"
},
{
"name": "CVE-2021-2411",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2411"
},
{
"name": "CVE-2021-2418",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2418"
},
{
"name": "CVE-2021-2367",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2367"
},
{
"name": "CVE-2021-2354",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2354"
},
{
"name": "CVE-2021-2422",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2422"
},
{
"name": "CVE-2020-10543",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10543"
},
{
"name": "CVE-2020-12723",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12723"
},
{
"name": "CVE-2020-10029",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10029"
},
{
"name": "CVE-2021-23337",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23337"
},
{
"name": "CVE-2020-28500",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-28500"
},
{
"name": "CVE-2019-18276",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18276"
},
{
"name": "CVE-2021-3421",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3421"
},
{
"name": "CVE-2021-3326",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3326"
},
{
"name": "CVE-2019-2708",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2708"
},
{
"name": "CVE-2020-27618",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27618"
},
{
"name": "CVE-2021-35640",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35640"
},
{
"name": "CVE-2021-35626",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35626"
},
{
"name": "CVE-2021-2478",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2478"
},
{
"name": "CVE-2021-35624",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35624"
},
{
"name": "CVE-2021-35583",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35583"
},
{
"name": "CVE-2021-35628",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35628"
},
{
"name": "CVE-2021-35630",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35630"
},
{
"name": "CVE-2021-35644",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35644"
},
{
"name": "CVE-2021-2479",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2479"
},
{
"name": "CVE-2021-35638",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35638"
},
{
"name": "CVE-2021-35646",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35646"
},
{
"name": "CVE-2021-35596",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35596"
},
{
"name": "CVE-2021-35643",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35643"
},
{
"name": "CVE-2021-35637",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35637"
},
{
"name": "CVE-2021-35623",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35623"
},
{
"name": "CVE-2021-35632",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35632"
},
{
"name": "CVE-2021-35641",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35641"
},
{
"name": "CVE-2021-35604",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35604"
},
{
"name": "CVE-2021-35636",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35636"
},
{
"name": "CVE-2021-35546",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35546"
},
{
"name": "CVE-2021-35627",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35627"
},
{
"name": "CVE-2021-35625",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35625"
},
{
"name": "CVE-2021-35608",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35608"
},
{
"name": "CVE-2021-35597",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35597"
},
{
"name": "CVE-2021-35537",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35537"
},
{
"name": "CVE-2021-2481",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2481"
},
{
"name": "CVE-2021-35622",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35622"
},
{
"name": "CVE-2021-35610",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35610"
},
{
"name": "CVE-2021-35633",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35633"
},
{
"name": "CVE-2021-35634",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35634"
},
{
"name": "CVE-2021-35629",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35629"
},
{
"name": "CVE-2021-35631",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35631"
},
{
"name": "CVE-2021-35645",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35645"
},
{
"name": "CVE-2021-35647",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35647"
},
{
"name": "CVE-2021-35612",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35612"
},
{
"name": "CVE-2021-35639",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35639"
},
{
"name": "CVE-2021-35648",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35648"
},
{
"name": "CVE-2021-35607",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35607"
},
{
"name": "CVE-2021-35602",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35602"
},
{
"name": "CVE-2021-35577",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35577"
},
{
"name": "CVE-2021-35642",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35642"
},
{
"name": "CVE-2021-35575",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35575"
},
{
"name": "CVE-2021-35635",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35635"
},
{
"name": "CVE-2021-35591",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35591"
},
{
"name": "CVE-2021-25219",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-25219"
},
{
"name": "CVE-2021-3875",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3875"
},
{
"name": "CVE-2019-10744",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-10744"
},
{
"name": "CVE-2022-21352",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21352"
},
{
"name": "CVE-2022-21304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21304"
},
{
"name": "CVE-2022-21254",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21254"
},
{
"name": "CVE-2022-21265",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21265"
},
{
"name": "CVE-2022-21348",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21348"
},
{
"name": "CVE-2022-21372",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21372"
},
{
"name": "CVE-2022-21245",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21245"
},
{
"name": "CVE-2022-21368",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21368"
},
{
"name": "CVE-2022-21339",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21339"
},
{
"name": "CVE-2022-21264",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21264"
},
{
"name": "CVE-2022-21297",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21297"
},
{
"name": "CVE-2022-21379",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21379"
},
{
"name": "CVE-2022-21253",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21253"
},
{
"name": "CVE-2022-21301",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21301"
},
{
"name": "CVE-2022-21378",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21378"
},
{
"name": "CVE-2022-21370",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21370"
},
{
"name": "CVE-2022-21302",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21302"
},
{
"name": "CVE-2022-21249",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21249"
},
{
"name": "CVE-2022-21344",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21344"
},
{
"name": "CVE-2022-21270",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21270"
},
{
"name": "CVE-2022-21367",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21367"
},
{
"name": "CVE-2022-21342",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21342"
},
{
"name": "CVE-2022-21362",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21362"
},
{
"name": "CVE-2022-21303",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21303"
},
{
"name": "CVE-2022-21256",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21256"
},
{
"name": "CVE-2022-21358",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21358"
},
{
"name": "CVE-2022-21374",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21374"
},
{
"name": "CVE-2022-3602",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3602"
},
{
"name": "CVE-2022-2309",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2309"
},
{
"name": "CVE-2022-29824",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29824"
},
{
"name": "CVE-2022-35737",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35737"
},
{
"name": "CVE-2022-40303",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40303"
},
{
"name": "CVE-2022-40304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40304"
},
{
"name": "CVE-2020-8203",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8203"
},
{
"name": "CVE-2022-3786",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3786"
},
{
"name": "CVE-2022-2795",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2795"
},
{
"name": "CVE-2022-34903",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34903"
},
{
"name": "CVE-2022-3515",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3515"
},
{
"name": "CVE-2022-3996",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3996"
},
{
"name": "CVE-2022-22942",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22942"
},
{
"name": "CVE-2021-4193",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4193"
},
{
"name": "CVE-2020-15366",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15366"
},
{
"name": "CVE-2022-22965",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22965"
},
{
"name": "CVE-2022-0213",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0213"
},
{
"name": "CVE-2022-21418",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21418"
},
{
"name": "CVE-2022-21412",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21412"
},
{
"name": "CVE-2022-21437",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21437"
},
{
"name": "CVE-2022-21478",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21478"
},
{
"name": "CVE-2022-21479",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21479"
},
{
"name": "CVE-2022-21438",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21438"
},
{
"name": "CVE-2022-21440",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21440"
},
{
"name": "CVE-2022-21451",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21451"
},
{
"name": "CVE-2022-21427",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21427"
},
{
"name": "CVE-2022-21415",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21415"
},
{
"name": "CVE-2022-21459",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21459"
},
{
"name": "CVE-2022-21460",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21460"
},
{
"name": "CVE-2022-21414",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21414"
},
{
"name": "CVE-2022-21413",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21413"
},
{
"name": "CVE-2022-21436",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21436"
},
{
"name": "CVE-2022-21435",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21435"
},
{
"name": "CVE-2022-21462",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21462"
},
{
"name": "CVE-2022-21444",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21444"
},
{
"name": "CVE-2022-21417",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21417"
},
{
"name": "CVE-2022-21457",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21457"
},
{
"name": "CVE-2022-21425",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21425"
},
{
"name": "CVE-2022-21452",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21452"
},
{
"name": "CVE-2021-20266",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20266"
},
{
"name": "CVE-2022-1292",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1292"
},
{
"name": "CVE-2022-1473",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1473"
},
{
"name": "CVE-2021-3521",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3521"
},
{
"name": "CVE-2021-4122",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4122"
},
{
"name": "CVE-2022-2068",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2068"
},
{
"name": "CVE-2017-7500",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7500"
},
{
"name": "CVE-2021-33574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33574"
},
{
"name": "CVE-2017-11164",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11164"
},
{
"name": "CVE-2022-21525",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21525"
},
{
"name": "CVE-2022-21537",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21537"
},
{
"name": "CVE-2022-21455",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21455"
},
{
"name": "CVE-2022-21534",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21534"
},
{
"name": "CVE-2022-21528",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21528"
},
{
"name": "CVE-2022-21529",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21529"
},
{
"name": "CVE-2022-21531",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21531"
},
{
"name": "CVE-2022-21515",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21515"
},
{
"name": "CVE-2022-21538",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21538"
},
{
"name": "CVE-2022-21527",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21527"
},
{
"name": "CVE-2022-21517",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21517"
},
{
"name": "CVE-2022-21539",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21539"
},
{
"name": "CVE-2022-21556",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21556"
},
{
"name": "CVE-2022-21509",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21509"
},
{
"name": "CVE-2022-21553",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21553"
},
{
"name": "CVE-2022-21530",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21530"
},
{
"name": "CVE-2022-21522",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21522"
},
{
"name": "CVE-2022-21547",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21547"
},
{
"name": "CVE-2022-21569",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21569"
},
{
"name": "CVE-2022-21526",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21526"
},
{
"name": "CVE-2021-3999",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3999"
},
{
"name": "CVE-2022-23218",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23218"
},
{
"name": "CVE-2022-23219",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23219"
},
{
"name": "CVE-2022-27782",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27782"
},
{
"name": "CVE-2021-25220",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-25220"
},
{
"name": "CVE-2022-0396",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0396"
},
{
"name": "CVE-2022-3358",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3358"
},
{
"name": "CVE-2022-1271",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1271"
},
{
"name": "CVE-2012-5783",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-5783"
},
{
"name": "CVE-2022-21592",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21592"
},
{
"name": "CVE-2022-21617",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21617"
},
{
"name": "CVE-2022-21595",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21595"
},
{
"name": "CVE-2022-21608",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21608"
},
{
"name": "CVE-2022-21589",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21589"
},
{
"name": "CVE-2023-21863",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21863"
},
{
"name": "CVE-2023-21873",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21873"
},
{
"name": "CVE-2023-21879",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21879"
},
{
"name": "CVE-2023-21880",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21880"
},
{
"name": "CVE-2023-21869",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21869"
},
{
"name": "CVE-2023-21872",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21872"
},
{
"name": "CVE-2023-21877",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21877"
},
{
"name": "CVE-2023-21870",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21870"
},
{
"name": "CVE-2023-21887",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21887"
},
{
"name": "CVE-2023-21836",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21836"
},
{
"name": "CVE-2023-21881",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21881"
},
{
"name": "CVE-2023-21876",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21876"
},
{
"name": "CVE-2023-21840",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21840"
},
{
"name": "CVE-2023-21878",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21878"
},
{
"name": "CVE-2023-21866",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21866"
},
{
"name": "CVE-2023-21875",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21875"
},
{
"name": "CVE-2023-21865",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21865"
},
{
"name": "CVE-2023-21883",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21883"
},
{
"name": "CVE-2023-21867",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21867"
},
{
"name": "CVE-2023-21874",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21874"
},
{
"name": "CVE-2023-21871",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21871"
},
{
"name": "CVE-2023-0286",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0286"
},
{
"name": "CVE-2023-0401",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0401"
},
{
"name": "CVE-2023-0215",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0215"
},
{
"name": "CVE-2023-0217",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0217"
},
{
"name": "CVE-2023-0216",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0216"
},
{
"name": "CVE-2022-4450",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4450"
},
{
"name": "CVE-2022-4415",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4415"
},
{
"name": "CVE-2023-24329",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24329"
},
{
"name": "CVE-2023-0464",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0464"
},
{
"name": "CVE-2023-21963",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21963"
},
{
"name": "CVE-2023-21977",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21977"
},
{
"name": "CVE-2023-21912",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21912"
},
{
"name": "CVE-2023-29469",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29469"
},
{
"name": "CVE-2023-28484",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28484"
},
{
"name": "CVE-2023-20873",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-20873"
},
{
"name": "CVE-2023-20883",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-20883"
},
{
"name": "CVE-2023-27535",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27535"
},
{
"name": "CVE-2023-27538",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27538"
},
{
"name": "CVE-2023-27536",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27536"
},
{
"name": "CVE-2023-27537",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27537"
},
{
"name": "CVE-2020-1752",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1752"
},
{
"name": "CVE-2021-35942",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35942"
},
{
"name": "CVE-2021-38604",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-38604"
},
{
"name": "CVE-2020-29562",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29562"
},
{
"name": "CVE-2021-27645",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-27645"
},
{
"name": "CVE-2023-28322",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28322"
},
{
"name": "CVE-2022-46908",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46908"
},
{
"name": "CVE-2023-28320",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28320"
},
{
"name": "CVE-2023-28321",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28321"
},
{
"name": "CVE-2023-22053",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22053"
},
{
"name": "CVE-2023-22007",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22007"
},
{
"name": "CVE-2022-4899",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4899"
},
{
"name": "CVE-2022-25883",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25883"
},
{
"name": "CVE-2023-40403",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40403"
},
{
"name": "CVE-2023-4911",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4911"
},
{
"name": "CVE-2023-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44487"
},
{
"name": "CVE-2016-1000027",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1000027"
},
{
"name": "CVE-2023-35116",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-35116"
},
{
"name": "CVE-2023-22097",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22097"
},
{
"name": "CVE-2023-22084",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22084"
},
{
"name": "CVE-2023-22026",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22026"
},
{
"name": "CVE-2023-22028",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22028"
},
{
"name": "CVE-2023-22015",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22015"
},
{
"name": "CVE-2023-22103",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22103"
},
{
"name": "CVE-2023-22068",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22068"
},
{
"name": "CVE-2023-22078",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22078"
},
{
"name": "CVE-2023-38546",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38546"
},
{
"name": "CVE-2023-22059",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22059"
},
{
"name": "CVE-2023-22066",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22066"
},
{
"name": "CVE-2023-22114",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22114"
},
{
"name": "CVE-2023-22070",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22070"
},
{
"name": "CVE-2023-22032",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22032"
},
{
"name": "CVE-2023-5363",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5363"
},
{
"name": "CVE-2023-4807",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4807"
},
{
"name": "CVE-2023-45853",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45853"
},
{
"name": "CVE-2023-5678",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5678"
},
{
"name": "CVE-2023-40217",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40217"
},
{
"name": "CVE-2023-45803",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45803"
},
{
"name": "CVE-2021-22570",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22570"
},
{
"name": "CVE-2023-2603",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2603"
},
{
"name": "CVE-2023-2602",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2602"
},
{
"name": "CVE-2023-4527",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4527"
},
{
"name": "CVE-2023-4813",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4813"
},
{
"name": "CVE-2023-4806",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4806"
},
{
"name": "CVE-2022-48303",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48303"
},
{
"name": "CVE-2023-34055",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34055"
},
{
"name": "CVE-2023-4039",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4039"
},
{
"name": "CVE-2022-3715",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3715"
},
{
"name": "CVE-2023-0687",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0687"
},
{
"name": "CVE-2023-5156",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5156"
},
{
"name": "CVE-2022-48522",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48522"
},
{
"name": "CVE-2023-39615",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39615"
},
{
"name": "CVE-2021-46848",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46848"
},
{
"name": "CVE-2021-33294",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33294"
},
{
"name": "CVE-2021-43618",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-43618"
},
{
"name": "CVE-2023-45322",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45322"
},
{
"name": "CVE-2022-28321",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28321"
},
{
"name": "CVE-2023-4016",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4016"
},
{
"name": "CVE-2013-4235",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4235"
},
{
"name": "CVE-2023-34969",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34969"
},
{
"name": "CVE-2021-20193",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20193"
},
{
"name": "CVE-2023-29383",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29383"
},
{
"name": "CVE-2023-5981",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5981"
},
{
"name": "CVE-2023-48795",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48795"
},
{
"name": "CVE-2023-6237",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6237"
},
{
"name": "CVE-2023-31484",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31484"
},
{
"name": "CVE-2023-36054",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-36054"
},
{
"name": "CVE-2023-7104",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-7104"
},
{
"name": "CVE-2023-6129",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6129"
},
{
"name": "CVE-2023-46218",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46218"
},
{
"name": "CVE-2023-46219",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46219"
},
{
"name": "CVE-2024-0727",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0727"
},
{
"name": "CVE-2023-47100",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47100"
},
{
"name": "CVE-2023-47038",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47038"
},
{
"name": "CVE-2023-39325",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39325"
},
{
"name": "CVE-2022-27772",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27772"
},
{
"name": "CVE-2023-27043",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27043"
},
{
"name": "CVE-2023-6481",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6481"
},
{
"name": "CVE-2023-36632",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-36632"
},
{
"name": "CVE-2024-28085",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28085"
},
{
"name": "CVE-2024-2511",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2511"
},
{
"name": "CVE-2020-22916",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-22916"
},
{
"name": "CVE-2016-2781",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2781"
},
{
"name": "CVE-2023-3978",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3978"
},
{
"name": "CVE-2017-7501",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7501"
},
{
"name": "CVE-2021-35939",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35939"
},
{
"name": "CVE-2024-0553",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0553"
},
{
"name": "CVE-2021-35938",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35938"
},
{
"name": "CVE-2021-35937",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35937"
},
{
"name": "CVE-2023-6597",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6597"
},
{
"name": "CVE-2024-26686",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26686"
},
{
"name": "CVE-2023-52572",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52572"
},
{
"name": "CVE-2007-4559",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4559"
},
{
"name": "CVE-2023-3138",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3138"
},
{
"name": "CVE-2024-28182",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28182"
},
{
"name": "CVE-2023-45288",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45288"
},
{
"name": "CVE-2024-4603",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4603"
},
{
"name": "CVE-2023-6378",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6378"
},
{
"name": "CVE-2023-31486",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31486"
},
{
"name": "CVE-2024-26739",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26739"
},
{
"name": "CVE-2024-4741",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4741"
},
{
"name": "CVE-2023-51074",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51074"
},
{
"name": "CVE-2023-52757",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52757"
},
{
"name": "CVE-2024-35866",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35866"
},
{
"name": "CVE-2024-35867",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35867"
},
{
"name": "CVE-2024-35943",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35943"
},
{
"name": "CVE-2024-28180",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28180"
},
{
"name": "CVE-2024-29857",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-29857"
},
{
"name": "CVE-2024-30171",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-30171"
},
{
"name": "CVE-2024-30172",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-30172"
},
{
"name": "CVE-2024-5535",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5535"
},
{
"name": "CVE-2024-35790",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35790"
},
{
"name": "CVE-2024-3651",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3651"
},
{
"name": "CVE-2024-2004",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2004"
},
{
"name": "CVE-2024-2398",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2398"
},
{
"name": "CVE-2024-0397",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0397"
},
{
"name": "CVE-2024-4030",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4030"
},
{
"name": "CVE-2024-4032",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4032"
},
{
"name": "CVE-2024-3596",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3596"
},
{
"name": "CVE-2024-0450",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0450"
},
{
"name": "CVE-2024-25062",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25062"
},
{
"name": "CVE-2024-26458",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26458"
},
{
"name": "CVE-2024-26461",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26461"
},
{
"name": "CVE-2024-28834",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28834"
},
{
"name": "CVE-2024-2961",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2961"
},
{
"name": "CVE-2024-33599",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33599"
},
{
"name": "CVE-2024-33600",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33600"
},
{
"name": "CVE-2024-33601",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33601"
},
{
"name": "CVE-2024-33602",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33602"
},
{
"name": "CVE-2024-35195",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35195"
},
{
"name": "CVE-2024-36945",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-36945"
},
{
"name": "CVE-2024-38540",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38540"
},
{
"name": "CVE-2024-38541",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38541"
},
{
"name": "CVE-2023-4641",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4641"
},
{
"name": "CVE-2024-0567",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0567"
},
{
"name": "CVE-2024-22365",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22365"
},
{
"name": "CVE-2024-21137",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21137"
},
{
"name": "CVE-2024-0760",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0760"
},
{
"name": "CVE-2024-1737",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1737"
},
{
"name": "CVE-2024-1975",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1975"
},
{
"name": "CVE-2024-28835",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28835"
},
{
"name": "CVE-2024-6923",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6923"
},
{
"name": "CVE-2024-3219",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3219"
},
{
"name": "CVE-2024-36908",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-36908"
},
{
"name": "CVE-2024-27402",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27402"
},
{
"name": "CVE-2024-37891",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37891"
},
{
"name": "CVE-2024-6345",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6345"
},
{
"name": "CVE-2024-38808",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38808"
},
{
"name": "CVE-2024-38809",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38809"
},
{
"name": "CVE-2024-42230",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-42230"
},
{
"name": "CVE-2024-38807",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38807"
},
{
"name": "CVE-2024-6232",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6232"
},
{
"name": "CVE-2024-6119",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6119"
},
{
"name": "CVE-2024-38816",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38816"
},
{
"name": "CVE-2022-48893",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48893"
},
{
"name": "CVE-2024-42322",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-42322"
},
{
"name": "CVE-2024-7264",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7264"
},
{
"name": "CVE-2023-5841",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5841"
},
{
"name": "CVE-2024-34459",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34459"
},
{
"name": "CVE-2024-8096",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8096"
},
{
"name": "CVE-2023-6246",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6246"
},
{
"name": "CVE-2024-46812",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-46812"
},
{
"name": "CVE-2024-46821",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-46821"
},
{
"name": "CVE-2024-46751",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-46751"
},
{
"name": "CVE-2024-46753",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-46753"
},
{
"name": "CVE-2024-46774",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-46774"
},
{
"name": "CVE-2024-46787",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-46787"
},
{
"name": "CVE-2022-21454",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21454"
},
{
"name": "CVE-2024-21193",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21193"
},
{
"name": "CVE-2024-21194",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21194"
},
{
"name": "CVE-2024-21196",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21196"
},
{
"name": "CVE-2024-21197",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21197"
},
{
"name": "CVE-2024-21198",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21198"
},
{
"name": "CVE-2024-21199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21199"
},
{
"name": "CVE-2024-21201",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21201"
},
{
"name": "CVE-2024-21207",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21207"
},
{
"name": "CVE-2024-21209",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21209"
},
{
"name": "CVE-2024-21212",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21212"
},
{
"name": "CVE-2024-21213",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21213"
},
{
"name": "CVE-2024-21219",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21219"
},
{
"name": "CVE-2024-21236",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21236"
},
{
"name": "CVE-2024-21239",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21239"
},
{
"name": "CVE-2024-21241",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21241"
},
{
"name": "CVE-2024-7254",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7254"
},
{
"name": "CVE-2024-9143",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9143"
},
{
"name": "CVE-2024-38819",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38819"
},
{
"name": "CVE-2024-38820",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38820"
},
{
"name": "CVE-2024-10487",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10487"
},
{
"name": "CVE-2024-10458",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10458"
},
{
"name": "CVE-2024-10459",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10459"
},
{
"name": "CVE-2024-10460",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10460"
},
{
"name": "CVE-2024-10461",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10461"
},
{
"name": "CVE-2024-10462",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10462"
},
{
"name": "CVE-2024-10463",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10463"
},
{
"name": "CVE-2024-10464",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10464"
},
{
"name": "CVE-2024-10465",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10465"
},
{
"name": "CVE-2024-10466",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10466"
},
{
"name": "CVE-2024-10467",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10467"
},
{
"name": "CVE-2024-10468",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10468"
},
{
"name": "CVE-2024-34447",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34447"
},
{
"name": "CVE-2024-38286",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38286"
},
{
"name": "CVE-2024-7592",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7592"
},
{
"name": "CVE-2024-8088",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8088"
},
{
"name": "CVE-2024-9681",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9681"
},
{
"name": "CVE-2024-11168",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11168"
},
{
"name": "CVE-2024-38828",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38828"
},
{
"name": "CVE-2024-46816",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-46816"
},
{
"name": "CVE-2024-11395",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11395"
},
{
"name": "CVE-2024-49960",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-49960"
},
{
"name": "CVE-2024-50047",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50047"
},
{
"name": "CVE-2024-50073",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50073"
},
{
"name": "CVE-2024-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11691"
},
{
"name": "CVE-2024-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11692"
},
{
"name": "CVE-2024-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11693"
},
{
"name": "CVE-2024-11694",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11694"
},
{
"name": "CVE-2024-11695",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11695"
},
{
"name": "CVE-2024-11696",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11696"
},
{
"name": "CVE-2024-11697",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11697"
},
{
"name": "CVE-2024-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11698"
},
{
"name": "CVE-2024-11699",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11699"
},
{
"name": "CVE-2024-11700",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11700"
},
{
"name": "CVE-2024-11701",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11701"
},
{
"name": "CVE-2024-11702",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11702"
},
{
"name": "CVE-2024-11703",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11703"
},
{
"name": "CVE-2024-11704",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11704"
},
{
"name": "CVE-2024-11705",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11705"
},
{
"name": "CVE-2024-11706",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11706"
},
{
"name": "CVE-2024-11708",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11708"
},
{
"name": "CVE-2024-50272",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50272"
},
{
"name": "CVE-2024-50280",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50280"
},
{
"name": "CVE-2024-11053",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11053"
},
{
"name": "CVE-2024-10041",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10041"
},
{
"name": "CVE-2024-10963",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10963"
},
{
"name": "CVE-2024-47554",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47554"
},
{
"name": "CVE-2024-49989",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-49989"
},
{
"name": "CVE-2024-50125",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50125"
},
{
"name": "CVE-2024-53051",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-53051"
},
{
"name": "CVE-2024-53144",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-53144"
},
{
"name": "CVE-2024-8805",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8805"
},
{
"name": "CVE-2025-0237",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0237"
},
{
"name": "CVE-2025-0238",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0238"
},
{
"name": "CVE-2025-0239",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0239"
},
{
"name": "CVE-2025-0240",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0240"
},
{
"name": "CVE-2025-0241",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0241"
},
{
"name": "CVE-2025-0242",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0242"
},
{
"name": "CVE-2025-0243",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0243"
},
{
"name": "CVE-2025-0245",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0245"
},
{
"name": "CVE-2025-0247",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0247"
},
{
"name": "CVE-2025-0434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0434"
},
{
"name": "CVE-2025-0435",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0435"
},
{
"name": "CVE-2025-0436",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0436"
},
{
"name": "CVE-2025-0437",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0437"
},
{
"name": "CVE-2025-0438",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0438"
},
{
"name": "CVE-2025-0439",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0439"
},
{
"name": "CVE-2025-0440",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0440"
},
{
"name": "CVE-2025-0441",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0441"
},
{
"name": "CVE-2025-0442",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0442"
},
{
"name": "CVE-2025-0443",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0443"
},
{
"name": "CVE-2025-0446",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0446"
},
{
"name": "CVE-2025-0447",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0447"
},
{
"name": "CVE-2025-0448",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0448"
},
{
"name": "CVE-2025-21523",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21523"
},
{
"name": "CVE-2025-0612",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0612"
},
{
"name": "CVE-2025-23083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23083"
},
{
"name": "CVE-2025-23084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23084"
},
{
"name": "CVE-2025-23085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23085"
},
{
"name": "CVE-2025-0938",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0938"
},
{
"name": "CVE-2025-0444",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0444"
},
{
"name": "CVE-2025-0445",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0445"
},
{
"name": "CVE-2025-0451",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0451"
},
{
"name": "CVE-2025-0762",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0762"
},
{
"name": "CVE-2025-1009",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1009"
},
{
"name": "CVE-2025-1010",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1010"
},
{
"name": "CVE-2025-1011",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1011"
},
{
"name": "CVE-2025-1012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1012"
},
{
"name": "CVE-2025-1013",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1013"
},
{
"name": "CVE-2025-1014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1014"
},
{
"name": "CVE-2024-56664",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56664"
},
{
"name": "CVE-2025-1016",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1016"
},
{
"name": "CVE-2025-1017",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1017"
},
{
"name": "CVE-2025-1018",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1018"
},
{
"name": "CVE-2025-1019",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1019"
},
{
"name": "CVE-2025-1020",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1020"
},
{
"name": "CVE-2025-0167",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0167"
},
{
"name": "CVE-2025-0725",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0725"
},
{
"name": "CVE-2024-47535",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47535"
},
{
"name": "CVE-2024-50258",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50258"
},
{
"name": "CVE-2024-53203",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-53203"
},
{
"name": "CVE-2024-53128",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-53128"
},
{
"name": "CVE-2025-0995",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0995"
},
{
"name": "CVE-2025-0996",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0996"
},
{
"name": "CVE-2025-0997",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0997"
},
{
"name": "CVE-2025-0998",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0998"
},
{
"name": "CVE-2024-13176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-13176"
},
{
"name": "CVE-2025-1414",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1414"
},
{
"name": "CVE-2025-0999",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0999"
},
{
"name": "CVE-2025-1006",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1006"
},
{
"name": "CVE-2025-1426",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1426"
},
{
"name": "CVE-2024-56751",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56751"
},
{
"name": "CVE-2023-39017",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39017"
},
{
"name": "CVE-2025-1795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1795"
},
{
"name": "CVE-2025-1914",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1914"
},
{
"name": "CVE-2025-1915",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1915"
},
{
"name": "CVE-2025-1916",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1916"
},
{
"name": "CVE-2025-1917",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1917"
},
{
"name": "CVE-2025-1918",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1918"
},
{
"name": "CVE-2025-1919",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1919"
},
{
"name": "CVE-2025-1921",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1921"
},
{
"name": "CVE-2025-1922",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1922"
},
{
"name": "CVE-2025-1923",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1923"
},
{
"name": "CVE-2025-1930",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1930"
},
{
"name": "CVE-2025-1931",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1931"
},
{
"name": "CVE-2025-1932",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1932"
},
{
"name": "CVE-2025-1933",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1933"
},
{
"name": "CVE-2025-1934",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1934"
},
{
"name": "CVE-2025-1935",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1935"
},
{
"name": "CVE-2025-1936",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1936"
},
{
"name": "CVE-2025-1937",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1937"
},
{
"name": "CVE-2025-1938",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1938"
},
{
"name": "CVE-2025-1939",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1939"
},
{
"name": "CVE-2025-1940",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1940"
},
{
"name": "CVE-2025-1941",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1941"
},
{
"name": "CVE-2025-1942",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1942"
},
{
"name": "CVE-2025-1943",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1943"
},
{
"name": "CVE-2025-1920",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1920"
},
{
"name": "CVE-2025-2135",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2135"
},
{
"name": "CVE-2025-2136",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2136"
},
{
"name": "CVE-2025-2137",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2137"
},
{
"name": "CVE-2025-24813",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24813"
},
{
"name": "CVE-2024-6763",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6763"
},
{
"name": "CVE-2022-49043",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-49043"
},
{
"name": "CVE-2024-45338",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45338"
},
{
"name": "CVE-2024-51744",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-51744"
},
{
"name": "CVE-2025-24970",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24970"
},
{
"name": "CVE-2025-25193",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25193"
},
{
"name": "CVE-2024-45772",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45772"
},
{
"name": "CVE-2025-2476",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2476"
},
{
"name": "CVE-2025-2857",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2857"
},
{
"name": "CVE-2024-45337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
},
{
"name": "CVE-2025-22870",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22870"
},
{
"name": "CVE-2025-2783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2783"
},
{
"name": "CVE-2022-49063",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-49063"
},
{
"name": "CVE-2022-49535",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-49535"
},
{
"name": "CVE-2024-56171",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56171"
},
{
"name": "CVE-2025-27113",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27113"
},
{
"name": "CVE-2025-3066",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3066"
},
{
"name": "CVE-2025-3067",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3067"
},
{
"name": "CVE-2025-3068",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3068"
},
{
"name": "CVE-2025-3071",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3071"
},
{
"name": "CVE-2025-3072",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3072"
},
{
"name": "CVE-2025-3073",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3073"
},
{
"name": "CVE-2025-3074",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3074"
},
{
"name": "CVE-2025-3028",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3028"
},
{
"name": "CVE-2025-3029",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3029"
},
{
"name": "CVE-2025-3030",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3030"
},
{
"name": "CVE-2025-3031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3031"
},
{
"name": "CVE-2025-3032",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3032"
},
{
"name": "CVE-2025-3033",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3033"
},
{
"name": "CVE-2025-3034",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3034"
},
{
"name": "CVE-2025-3035",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3035"
},
{
"name": "CVE-2024-54458",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54458"
},
{
"name": "CVE-2025-3608",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3608"
},
{
"name": "CVE-2025-21574",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21574"
},
{
"name": "CVE-2025-21575",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21575"
},
{
"name": "CVE-2025-21577",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21577"
},
{
"name": "CVE-2025-21579",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21579"
},
{
"name": "CVE-2025-21580",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21580"
},
{
"name": "CVE-2025-21581",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21581"
},
{
"name": "CVE-2025-21584",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21584"
},
{
"name": "CVE-2025-21585",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21585"
},
{
"name": "CVE-2025-21588",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21588"
},
{
"name": "CVE-2025-30681",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30681"
},
{
"name": "CVE-2025-30682",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30682"
},
{
"name": "CVE-2025-30683",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30683"
},
{
"name": "CVE-2025-30684",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30684"
},
{
"name": "CVE-2025-30685",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30685"
},
{
"name": "CVE-2025-30687",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30687"
},
{
"name": "CVE-2025-30688",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30688"
},
{
"name": "CVE-2025-30689",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30689"
},
{
"name": "CVE-2025-30693",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30693"
},
{
"name": "CVE-2025-30695",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30695"
},
{
"name": "CVE-2025-30696",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30696"
},
{
"name": "CVE-2025-30699",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30699"
},
{
"name": "CVE-2025-30703",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30703"
},
{
"name": "CVE-2025-30704",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30704"
},
{
"name": "CVE-2025-30705",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30705"
},
{
"name": "CVE-2025-30715",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30715"
},
{
"name": "CVE-2025-30721",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30721"
},
{
"name": "CVE-2025-21839",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21839"
},
{
"name": "CVE-2025-3619",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3619"
},
{
"name": "CVE-2025-3620",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3620"
},
{
"name": "CVE-2025-24928",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24928"
},
{
"name": "CVE-2025-21941",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21941"
},
{
"name": "CVE-2025-21956",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21956"
},
{
"name": "CVE-2025-21957",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21957"
},
{
"name": "CVE-2025-21959",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21959"
},
{
"name": "CVE-2025-21962",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21962"
},
{
"name": "CVE-2025-21963",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21963"
},
{
"name": "CVE-2025-21964",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21964"
},
{
"name": "CVE-2025-21968",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21968"
},
{
"name": "CVE-2025-21970",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21970"
},
{
"name": "CVE-2025-21975",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21975"
},
{
"name": "CVE-2025-21981",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21981"
},
{
"name": "CVE-2025-21991",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21991"
},
{
"name": "CVE-2025-21992",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21992"
},
{
"name": "CVE-2025-21994",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21994"
},
{
"name": "CVE-2025-21996",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21996"
},
{
"name": "CVE-2025-21999",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21999"
},
{
"name": "CVE-2025-22004",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22004"
},
{
"name": "CVE-2025-22005",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22005"
},
{
"name": "CVE-2025-22007",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22007"
},
{
"name": "CVE-2025-22008",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22008"
},
{
"name": "CVE-2025-22010",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22010"
},
{
"name": "CVE-2025-22014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22014"
},
{
"name": "CVE-2024-12798",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12798"
},
{
"name": "CVE-2024-12801",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12801"
},
{
"name": "CVE-2025-22868",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22868"
},
{
"name": "CVE-2025-22871",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22871"
},
{
"name": "CVE-2025-22235",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22235"
},
{
"name": "CVE-2025-2312",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2312"
},
{
"name": "CVE-2025-30204",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30204"
},
{
"name": "CVE-2025-4050",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4050"
},
{
"name": "CVE-2025-4051",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4051"
},
{
"name": "CVE-2025-4052",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4052"
},
{
"name": "CVE-2025-4096",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4096"
},
{
"name": "CVE-2025-2817",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2817"
},
{
"name": "CVE-2025-4082",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4082"
},
{
"name": "CVE-2025-4083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4083"
},
{
"name": "CVE-2025-4085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4085"
},
{
"name": "CVE-2025-4087",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4087"
},
{
"name": "CVE-2025-4088",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4088"
},
{
"name": "CVE-2025-4089",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4089"
},
{
"name": "CVE-2025-4090",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4090"
},
{
"name": "CVE-2025-4091",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4091"
},
{
"name": "CVE-2025-4092",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4092"
},
{
"name": "CVE-2023-53034",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-53034"
},
{
"name": "CVE-2024-46742",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-46742"
},
{
"name": "CVE-2025-21853",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21853"
},
{
"name": "CVE-2025-22025",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22025"
},
{
"name": "CVE-2025-22027",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22027"
},
{
"name": "CVE-2025-22035",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22035"
},
{
"name": "CVE-2025-22044",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22044"
},
{
"name": "CVE-2025-22045",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22045"
},
{
"name": "CVE-2025-22050",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22050"
},
{
"name": "CVE-2025-22054",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22054"
},
{
"name": "CVE-2025-22055",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22055"
},
{
"name": "CVE-2025-22056",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22056"
},
{
"name": "CVE-2025-22060",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22060"
},
{
"name": "CVE-2025-22063",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22063"
},
{
"name": "CVE-2025-22066",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22066"
},
{
"name": "CVE-2025-22071",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22071"
},
{
"name": "CVE-2025-22073",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22073"
},
{
"name": "CVE-2025-22075",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22075"
},
{
"name": "CVE-2025-22079",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22079"
},
{
"name": "CVE-2025-22081",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22081"
},
{
"name": "CVE-2025-22086",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22086"
},
{
"name": "CVE-2025-22089",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22089"
},
{
"name": "CVE-2025-22097",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22097"
},
{
"name": "CVE-2025-23136",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23136"
},
{
"name": "CVE-2025-23138",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23138"
},
{
"name": "CVE-2025-37785",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37785"
},
{
"name": "CVE-2025-37838",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37838"
},
{
"name": "CVE-2025-38152",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38152"
},
{
"name": "CVE-2025-38575",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38575"
},
{
"name": "CVE-2025-38637",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38637"
},
{
"name": "CVE-2025-39728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-39728"
},
{
"name": "CVE-2025-39735",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-39735"
},
{
"name": "CVE-2025-27516",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27516"
},
{
"name": "CVE-2025-29087",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-29087"
},
{
"name": "CVE-2025-3277",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3277"
},
{
"name": "CVE-2025-4609",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4609"
},
{
"name": "CVE-2025-4664",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4664"
},
{
"name": "CVE-2025-4372",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4372"
},
{
"name": "CVE-2025-4516",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4516"
},
{
"name": "CVE-2025-22233",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22233"
},
{
"name": "CVE-2024-55549",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-55549"
},
{
"name": "CVE-2024-9287",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9287"
},
{
"name": "CVE-2025-24855",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24855"
},
{
"name": "CVE-2025-4918",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4918"
},
{
"name": "CVE-2025-4919",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4919"
},
{
"name": "CVE-2025-41232",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41232"
},
{
"name": "CVE-2025-23165",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23165"
},
{
"name": "CVE-2025-23166",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23166"
},
{
"name": "CVE-2025-5063",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5063"
},
{
"name": "CVE-2025-5064",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5064"
},
{
"name": "CVE-2025-5065",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5065"
},
{
"name": "CVE-2025-5066",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5066"
},
{
"name": "CVE-2025-5067",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5067"
},
{
"name": "CVE-2025-32414",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32414"
},
{
"name": "CVE-2025-32415",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32415"
},
{
"name": "CVE-2022-49728",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-49728"
},
{
"name": "CVE-2024-58093",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58093"
},
{
"name": "CVE-2025-22018",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22018"
},
{
"name": "CVE-2025-22020",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22020"
},
{
"name": "CVE-2025-22062",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22062"
},
{
"name": "CVE-2025-23145",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23145"
},
{
"name": "CVE-2025-37798",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37798"
},
{
"name": "CVE-2025-37749",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37749"
},
{
"name": "CVE-2025-22869",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22869"
},
{
"name": "CVE-2025-5263",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5263"
},
{
"name": "CVE-2025-5264",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5264"
},
{
"name": "CVE-2025-5265",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5265"
},
{
"name": "CVE-2025-5266",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5266"
},
{
"name": "CVE-2025-5267",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5267"
},
{
"name": "CVE-2025-5268",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5268"
},
{
"name": "CVE-2025-5270",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5270"
},
{
"name": "CVE-2025-5271",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5271"
},
{
"name": "CVE-2025-5272",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5272"
},
{
"name": "CVE-2025-5281",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5281"
},
{
"name": "CVE-2025-5283",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5283"
},
{
"name": "CVE-2025-46701",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46701"
},
{
"name": "CVE-2025-22021",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22021"
},
{
"name": "CVE-2025-23140",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23140"
},
{
"name": "CVE-2025-23142",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23142"
},
{
"name": "CVE-2025-23144",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23144"
},
{
"name": "CVE-2025-23146",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23146"
},
{
"name": "CVE-2025-23147",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23147"
},
{
"name": "CVE-2025-23148",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23148"
},
{
"name": "CVE-2025-23150",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23150"
},
{
"name": "CVE-2025-23151",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23151"
},
{
"name": "CVE-2025-23156",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23156"
},
{
"name": "CVE-2025-23157",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23157"
},
{
"name": "CVE-2025-23158",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23158"
},
{
"name": "CVE-2025-23159",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23159"
},
{
"name": "CVE-2025-23161",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23161"
},
{
"name": "CVE-2025-23163",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23163"
},
{
"name": "CVE-2025-37738",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37738"
},
{
"name": "CVE-2025-37739",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37739"
},
{
"name": "CVE-2025-37740",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37740"
},
{
"name": "CVE-2025-37741",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37741"
},
{
"name": "CVE-2025-37742",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37742"
},
{
"name": "CVE-2025-37756",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37756"
},
{
"name": "CVE-2025-37757",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37757"
},
{
"name": "CVE-2025-37758",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37758"
},
{
"name": "CVE-2025-37765",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37765"
},
{
"name": "CVE-2025-37766",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37766"
},
{
"name": "CVE-2025-37767",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37767"
},
{
"name": "CVE-2025-37768",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37768"
},
{
"name": "CVE-2025-37770",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37770"
},
{
"name": "CVE-2025-37771",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37771"
},
{
"name": "CVE-2025-37773",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37773"
},
{
"name": "CVE-2025-37780",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37780"
},
{
"name": "CVE-2025-37781",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37781"
},
{
"name": "CVE-2025-37787",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37787"
},
{
"name": "CVE-2025-37788",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37788"
},
{
"name": "CVE-2025-37789",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37789"
},
{
"name": "CVE-2025-37790",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37790"
},
{
"name": "CVE-2025-37792",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37792"
},
{
"name": "CVE-2025-37794",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37794"
},
{
"name": "CVE-2025-37796",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37796"
},
{
"name": "CVE-2025-37797",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37797"
},
{
"name": "CVE-2025-37803",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37803"
},
{
"name": "CVE-2025-37805",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37805"
},
{
"name": "CVE-2025-37808",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37808"
},
{
"name": "CVE-2025-37810",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37810"
},
{
"name": "CVE-2025-37811",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37811"
},
{
"name": "CVE-2025-37812",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37812"
},
{
"name": "CVE-2025-37817",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37817"
},
{
"name": "CVE-2025-37823",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37823"
},
{
"name": "CVE-2025-37824",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37824"
},
{
"name": "CVE-2025-37829",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37829"
},
{
"name": "CVE-2025-37830",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37830"
},
{
"name": "CVE-2025-37836",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37836"
},
{
"name": "CVE-2025-37839",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37839"
},
{
"name": "CVE-2025-37840",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37840"
},
{
"name": "CVE-2025-37841",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37841"
},
{
"name": "CVE-2025-37844",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37844"
},
{
"name": "CVE-2025-37850",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37850"
},
{
"name": "CVE-2025-37851",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37851"
},
{
"name": "CVE-2025-37857",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37857"
},
{
"name": "CVE-2025-37858",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37858"
},
{
"name": "CVE-2025-37859",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37859"
},
{
"name": "CVE-2025-37862",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37862"
},
{
"name": "CVE-2025-37867",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37867"
},
{
"name": "CVE-2025-37871",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37871"
},
{
"name": "CVE-2025-37875",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37875"
},
{
"name": "CVE-2025-37881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37881"
},
{
"name": "CVE-2025-37883",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37883"
},
{
"name": "CVE-2025-37885",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37885"
},
{
"name": "CVE-2025-37889",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37889"
},
{
"name": "CVE-2025-37892",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37892"
},
{
"name": "CVE-2025-37937",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37937"
},
{
"name": "CVE-2025-37940",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37940"
},
{
"name": "CVE-2025-37982",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37982"
},
{
"name": "CVE-2025-37983",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37983"
},
{
"name": "CVE-2025-37985",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37985"
},
{
"name": "CVE-2025-37989",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37989"
},
{
"name": "CVE-2025-37819",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37819"
},
{
"name": "CVE-2025-37890",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37890"
},
{
"name": "CVE-2025-37905",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37905"
},
{
"name": "CVE-2025-37909",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37909"
},
{
"name": "CVE-2025-37911",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37911"
},
{
"name": "CVE-2025-37912",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37912"
},
{
"name": "CVE-2025-37913",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37913"
},
{
"name": "CVE-2025-37914",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37914"
},
{
"name": "CVE-2025-37915",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37915"
},
{
"name": "CVE-2025-37923",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37923"
},
{
"name": "CVE-2025-37927",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37927"
},
{
"name": "CVE-2025-37930",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37930"
},
{
"name": "CVE-2025-37932",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37932"
},
{
"name": "CVE-2025-37949",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37949"
},
{
"name": "CVE-2025-37964",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37964"
},
{
"name": "CVE-2025-37967",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37967"
},
{
"name": "CVE-2025-37969",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37969"
},
{
"name": "CVE-2025-37970",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37970"
},
{
"name": "CVE-2025-37990",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37990"
},
{
"name": "CVE-2025-37991",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37991"
},
{
"name": "CVE-2025-5068",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5068"
},
{
"name": "CVE-2025-5419",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5419"
},
{
"name": "CVE-2025-27144",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27144"
},
{
"name": "CVE-2025-49709",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49709"
},
{
"name": "CVE-2025-49710",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49710"
},
{
"name": "CVE-2023-6779",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6779"
},
{
"name": "CVE-2023-6780",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6780"
},
{
"name": "CVE-2024-12133",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12133"
},
{
"name": "CVE-2024-12243",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12243"
},
{
"name": "CVE-2024-2236",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2236"
},
{
"name": "CVE-2024-56433",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56433"
},
{
"name": "CVE-2025-0395",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0395"
},
{
"name": "CVE-2025-1390",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1390"
},
{
"name": "CVE-2025-29088",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-29088"
},
{
"name": "CVE-2025-31115",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31115"
},
{
"name": "CVE-2025-4598",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4598"
},
{
"name": "CVE-2025-5958",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5958"
},
{
"name": "CVE-2025-5959",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5959"
},
{
"name": "CVE-2025-41234",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41234"
},
{
"name": "CVE-2025-49146",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49146"
},
{
"name": "CVE-2025-48988",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48988"
},
{
"name": "CVE-2025-49124",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49124"
},
{
"name": "CVE-2025-49125",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49125"
},
{
"name": "CVE-2025-6191",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6191"
},
{
"name": "CVE-2025-6192",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6192"
},
{
"name": "CVE-2024-53427",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-53427"
},
{
"name": "CVE-2024-56406",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56406"
},
{
"name": "CVE-2025-22872",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22872"
},
{
"name": "CVE-2025-4802",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4802"
},
{
"name": "CVE-2022-49168",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-49168"
},
{
"name": "CVE-2025-37998",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37998"
},
{
"name": "CVE-2023-42366",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42366"
},
{
"name": "CVE-2025-6424",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6424"
},
{
"name": "CVE-2025-6425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6425"
},
{
"name": "CVE-2025-6426",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6426"
},
{
"name": "CVE-2025-6427",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6427"
},
{
"name": "CVE-2025-6429",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6429"
},
{
"name": "CVE-2025-6430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6430"
},
{
"name": "CVE-2025-6432",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6432"
},
{
"name": "CVE-2025-6433",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6433"
},
{
"name": "CVE-2025-6434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6434"
},
{
"name": "CVE-2025-6020",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6020"
},
{
"name": "CVE-2025-6555",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6555"
},
{
"name": "CVE-2025-6556",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6556"
},
{
"name": "CVE-2025-6557",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6557"
},
{
"name": "CVE-2025-6435",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6435"
},
{
"name": "CVE-2025-6436",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6436"
},
{
"name": "CVE-2025-6554",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6554"
},
{
"name": "CVE-2025-6021",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6021"
},
{
"name": "CVE-2022-49636",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-49636"
},
{
"name": "CVE-2025-37997",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37997"
},
{
"name": "CVE-2025-38000",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38000"
},
{
"name": "CVE-2025-38001",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38001"
},
{
"name": "CVE-2025-32462",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32462"
},
{
"name": "CVE-2025-52520",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52520"
},
{
"name": "CVE-2025-53506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53506"
},
{
"name": "CVE-2024-47081",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47081"
},
{
"name": "CVE-2025-3576",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3576"
},
{
"name": "CVE-2025-47268",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47268"
},
{
"name": "CVE-2025-37992",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37992"
},
{
"name": "CVE-2025-37994",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37994"
},
{
"name": "CVE-2025-37995",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37995"
},
{
"name": "CVE-2025-38005",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38005"
},
{
"name": "CVE-2025-38009",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38009"
},
{
"name": "CVE-2025-38023",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38023"
},
{
"name": "CVE-2025-38024",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38024"
},
{
"name": "CVE-2025-38083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38083"
},
{
"name": "CVE-2025-22227",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22227"
},
{
"name": "CVE-2025-6558",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6558"
},
{
"name": "CVE-2025-7656",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7656"
},
{
"name": "CVE-2025-7657",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7657"
},
{
"name": "CVE-2025-30749",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30749"
},
{
"name": "CVE-2025-30754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30754"
},
{
"name": "CVE-2025-50059",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50059"
},
{
"name": "CVE-2025-50106",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50106"
},
{
"name": "CVE-2025-50088",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50088"
},
{
"name": "CVE-2025-48734",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48734"
},
{
"name": "CVE-2022-21546",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21546"
},
{
"name": "CVE-2020-16156",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-16156"
},
{
"name": "CVE-2025-8010",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8010"
},
{
"name": "CVE-2025-8011",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8011"
},
{
"name": "CVE-2025-8027",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8027"
},
{
"name": "CVE-2025-8028",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8028"
},
{
"name": "CVE-2025-8029",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8029"
},
{
"name": "CVE-2025-8030",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8030"
},
{
"name": "CVE-2025-8031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8031"
},
{
"name": "CVE-2025-8032",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8032"
},
{
"name": "CVE-2025-8033",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8033"
},
{
"name": "CVE-2025-8034",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8034"
},
{
"name": "CVE-2025-8035",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8035"
},
{
"name": "CVE-2025-8036",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8036"
},
{
"name": "CVE-2025-8037",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8037"
},
{
"name": "CVE-2025-8038",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8038"
},
{
"name": "CVE-2025-8039",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8039"
},
{
"name": "CVE-2025-8040",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8040"
},
{
"name": "CVE-2025-8041",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8041"
},
{
"name": "CVE-2025-8043",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8043"
},
{
"name": "CVE-2025-8044",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8044"
},
{
"name": "CVE-2024-23337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-23337"
},
{
"name": "CVE-2024-45339",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45339"
},
{
"name": "CVE-2024-47611",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47611"
},
{
"name": "CVE-2025-0913",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0913"
},
{
"name": "CVE-2025-22874",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22874"
},
{
"name": "CVE-2025-32988",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32988"
},
{
"name": "CVE-2025-32989",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32989"
},
{
"name": "CVE-2025-32990",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32990"
},
{
"name": "CVE-2025-38177",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38177"
},
{
"name": "CVE-2025-4673",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4673"
},
{
"name": "CVE-2025-48060",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48060"
},
{
"name": "CVE-2025-4877",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4877"
},
{
"name": "CVE-2025-4878",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4878"
},
{
"name": "CVE-2025-48924",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48924"
},
{
"name": "CVE-2025-50181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50181"
},
{
"name": "CVE-2025-5318",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5318"
},
{
"name": "CVE-2025-5372",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5372"
},
{
"name": "CVE-2025-5914",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5914"
},
{
"name": "CVE-2025-5915",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5915"
},
{
"name": "CVE-2025-5916",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5916"
},
{
"name": "CVE-2025-5917",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5917"
},
{
"name": "CVE-2025-6069",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6069"
},
{
"name": "CVE-2025-6395",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6395"
},
{
"name": "CVE-2025-38094",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38094"
},
{
"name": "CVE-2025-8194",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8194"
},
{
"name": "CVE-2025-8292",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8292"
},
{
"name": "CVE-2025-7424",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7424"
},
{
"name": "CVE-2025-7425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7425"
},
{
"name": "CVE-2025-50182",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50182"
},
{
"name": "CVE-2025-5889",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5889"
},
{
"name": "CVE-2025-8576",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8576"
},
{
"name": "CVE-2025-8577",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8577"
},
{
"name": "CVE-2025-8578",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8578"
},
{
"name": "CVE-2025-8579",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8579"
},
{
"name": "CVE-2025-8580",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8580"
},
{
"name": "CVE-2025-8581",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8581"
},
{
"name": "CVE-2025-8582",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8582"
},
{
"name": "CVE-2025-8583",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8583"
},
{
"name": "CVE-2025-27210",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27210"
},
{
"name": "CVE-2025-27817",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27817"
},
{
"name": "CVE-2025-27818",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27818"
},
{
"name": "CVE-2025-8879",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8879"
},
{
"name": "CVE-2025-8880",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8880"
},
{
"name": "CVE-2025-8881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8881"
},
{
"name": "CVE-2025-8882",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8882"
},
{
"name": "CVE-2025-8901",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8901"
},
{
"name": "CVE-2025-48989",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48989"
},
{
"name": "CVE-2025-7339",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7339"
},
{
"name": "CVE-2025-7783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
},
{
"name": "CVE-2021-32256",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32256"
},
{
"name": "CVE-2024-25260",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25260"
},
{
"name": "CVE-2025-1371",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1371"
},
{
"name": "CVE-2025-1376",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1376"
},
{
"name": "CVE-2025-1377",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1377"
},
{
"name": "CVE-2025-47273",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
},
{
"name": "CVE-2025-48964",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48964"
},
{
"name": "CVE-2025-49794",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49794"
},
{
"name": "CVE-2025-49796",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49796"
},
{
"name": "CVE-2025-41242",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41242"
},
{
"name": "CVE-2025-9132",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9132"
},
{
"name": "CVE-2025-54988",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54988"
},
{
"name": "CVE-2025-6965",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6965"
},
{
"name": "CVE-2024-13009",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-13009"
},
{
"name": "CVE-2025-55668",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55668"
},
{
"name": "CVE-2025-4674",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4674"
},
{
"name": "CVE-2025-47907",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47907"
},
{
"name": "CVE-2025-52999",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52999"
},
{
"name": "CVE-2025-55163",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55163"
},
{
"name": "CVE-2025-8941",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8941"
},
{
"name": "CVE-2025-9288",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9288"
},
{
"name": "CVE-2005-2541",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-2541"
},
{
"name": "CVE-2008-5727",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5727"
},
{
"name": "CVE-2008-5728",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5728"
},
{
"name": "CVE-2008-5729",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5729"
},
{
"name": "CVE-2008-5730",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5730"
},
{
"name": "CVE-2008-5742",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5742"
},
{
"name": "CVE-2011-3374",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3374"
},
{
"name": "CVE-2014-4715",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-4715"
},
{
"name": "CVE-2015-2214",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2214"
},
{
"name": "CVE-2016-0682",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0682"
},
{
"name": "CVE-2016-0689",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0689"
},
{
"name": "CVE-2016-0692",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0692"
},
{
"name": "CVE-2016-0694",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0694"
},
{
"name": "CVE-2016-2149",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2149"
},
{
"name": "CVE-2016-2160",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2160"
},
{
"name": "CVE-2016-3418",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3418"
},
{
"name": "CVE-2017-10140",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10140"
},
{
"name": "CVE-2017-12195",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12195"
},
{
"name": "CVE-2017-12629",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12629"
},
{
"name": "CVE-2017-3604",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3604"
},
{
"name": "CVE-2017-3605",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3605"
},
{
"name": "CVE-2017-3606",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3606"
},
{
"name": "CVE-2017-3607",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3607"
},
{
"name": "CVE-2017-3608",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3608"
},
{
"name": "CVE-2017-3609",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3609"
},
{
"name": "CVE-2017-3610",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3610"
},
{
"name": "CVE-2017-3611",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3611"
},
{
"name": "CVE-2017-3612",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3612"
},
{
"name": "CVE-2017-3613",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3613"
},
{
"name": "CVE-2017-3614",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3614"
},
{
"name": "CVE-2017-3615",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3615"
},
{
"name": "CVE-2017-3616",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3616"
},
{
"name": "CVE-2017-3617",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3617"
},
{
"name": "CVE-2018-1000169",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000169"
},
{
"name": "CVE-2018-1196",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1196"
},
{
"name": "CVE-2018-1273",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1273"
},
{
"name": "CVE-2019-10782",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-10782"
},
{
"name": "CVE-2019-9658",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9658"
},
{
"name": "CVE-2020-2981",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2981"
},
{
"name": "CVE-2021-20298",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20298"
},
{
"name": "CVE-2021-20304",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20304"
},
{
"name": "CVE-2021-22055",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22055"
},
{
"name": "CVE-2021-23169",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23169"
},
{
"name": "CVE-2021-3236",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3236"
},
{
"name": "CVE-2022-0635",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0635"
},
{
"name": "CVE-2022-0667",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0667"
},
{
"name": "CVE-2022-3219",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3219"
},
{
"name": "CVE-2022-39046",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-39046"
},
{
"name": "CVE-2022-42010",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42010"
},
{
"name": "CVE-2022-42011",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42011"
},
{
"name": "CVE-2022-42012",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42012"
},
{
"name": "CVE-2022-44638",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-44638"
},
{
"name": "CVE-2023-31437",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31437"
},
{
"name": "CVE-2023-31438",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31438"
},
{
"name": "CVE-2023-31439",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31439"
},
{
"name": "CVE-2023-37769",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-37769"
},
{
"name": "CVE-2023-39810",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39810"
},
{
"name": "CVE-2023-4156",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4156"
},
{
"name": "CVE-2023-4320",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4320"
},
{
"name": "CVE-2023-43785",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43785"
},
{
"name": "CVE-2023-43786",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43786"
},
{
"name": "CVE-2023-43787",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43787"
},
{
"name": "CVE-2023-46129",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46129"
},
{
"name": "CVE-2023-47039",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47039"
},
{
"name": "CVE-2023-5189",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5189"
},
{
"name": "CVE-2024-11584",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11584"
},
{
"name": "CVE-2024-21742",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21742"
},
{
"name": "CVE-2024-22047",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22047"
},
{
"name": "CVE-2024-2397",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2397"
},
{
"name": "CVE-2024-26462",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26462"
},
{
"name": "CVE-2024-31047",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-31047"
},
{
"name": "CVE-2024-3220",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3220"
},
{
"name": "CVE-2024-58251",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58251"
},
{
"name": "CVE-2024-6174",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6174"
},
{
"name": "CVE-2024-7012",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7012"
},
{
"name": "CVE-2025-1352",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1352"
},
{
"name": "CVE-2025-1365",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1365"
},
{
"name": "CVE-2025-1372",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1372"
},
{
"name": "CVE-2025-24294",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24294"
},
{
"name": "CVE-2025-26519",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26519"
},
{
"name": "CVE-2025-27587",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27587"
},
{
"name": "CVE-2025-30258",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30258"
},
{
"name": "CVE-2025-31672",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31672"
},
{
"name": "CVE-2025-40909",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40909"
},
{
"name": "CVE-2025-43857",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43857"
},
{
"name": "CVE-2025-45582",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-45582"
},
{
"name": "CVE-2025-45768",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-45768"
},
{
"name": "CVE-2025-46392",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46392"
},
{
"name": "CVE-2025-46394",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46394"
},
{
"name": "CVE-2025-49795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49795"
},
{
"name": "CVE-2025-5115",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5115"
},
{
"name": "CVE-2025-5222",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5222"
},
{
"name": "CVE-2025-5278",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5278"
},
{
"name": "CVE-2025-53864",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53864"
},
{
"name": "CVE-2025-6170",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6170"
},
{
"name": "CVE-2025-6297",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6297"
},
{
"name": "CVE-2025-7962",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7962"
},
{
"name": "CVE-2025-8058",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8058"
},
{
"name": "CVE-2025-8262",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8262"
},
{
"name": "CVE-2025-8732",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8732"
},
{
"name": "CVE-2025-8885",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8885"
},
{
"name": "CVE-2025-8916",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8916"
},
{
"name": "CVE-2025-9179",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9179"
},
{
"name": "CVE-2025-9180",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9180"
},
{
"name": "CVE-2025-9181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9181"
},
{
"name": "CVE-2025-9182",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9182"
},
{
"name": "CVE-2025-9183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9183"
},
{
"name": "CVE-2025-9184",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9184"
},
{
"name": "CVE-2025-9185",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9185"
},
{
"name": "CVE-2025-9187",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9187"
},
{
"name": "CVE-2025-9308",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9308"
}
],
"initial_release_date": "2025-09-05T00:00:00",
"last_revision_date": "2025-09-05T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0756",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-09-05T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits VMware. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits VMware",
"vendor_advisories": [
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36093",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36093"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36102",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36102"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36101",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36101"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36100",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36100"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36105",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36105"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36091",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36091"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36078",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36078"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36107",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36107"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36094",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36094"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36097",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36097"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-46",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36104"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36108",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36108"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36095",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36095"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-09",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36090"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36096",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36096"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36106",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36106"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36109",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36109"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36098",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36098"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-68",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36111"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36103",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36103"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36099",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36099"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36092",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36092"
},
{
"published_at": "2025-09-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36110",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36110"
}
]
}
CERTFR-2025-AVI-0602
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans Oracle PeopleSoft. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | PeopleSoft | PeopleSoft Enterprise PeopleTools version 8.60 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise HCM Human Resources version 9.2 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise PeopleTools version 8.61 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise HCM Global Payroll Core version 9.2.52 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise PeopleTools version 8.62 | ||
| Oracle | PeopleSoft | PeopleSoft Enterprise HCM Global Payroll Core version 9.2.51 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "PeopleSoft Enterprise PeopleTools version 8.60",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise HCM Human Resources version 9.2",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise PeopleTools version 8.61",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise HCM Global Payroll Core version 9.2.52",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise PeopleTools version 8.62",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "PeopleSoft Enterprise HCM Global Payroll Core version 9.2.51",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-30747",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30747"
},
{
"name": "CVE-2025-50062",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50062"
},
{
"name": "CVE-2025-24970",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24970"
},
{
"name": "CVE-2024-13176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-13176"
},
{
"name": "CVE-2024-26143",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26143"
},
{
"name": "CVE-2025-30748",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30748"
},
{
"name": "CVE-2025-23085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23085"
},
{
"name": "CVE-2025-23083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23083"
},
{
"name": "CVE-2024-9143",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9143"
},
{
"name": "CVE-2023-44483",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44483"
},
{
"name": "CVE-2025-25193",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25193"
},
{
"name": "CVE-2025-23084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23084"
}
],
"initial_release_date": "2025-07-18T00:00:00",
"last_revision_date": "2025-07-18T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0602",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-07-18T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle PeopleSoft. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle PeopleSoft",
"vendor_advisories": [
{
"published_at": "2025-07-15",
"title": "Bulletin de s\u00e9curit\u00e9 Oracle PeopleSoft cpujul2025",
"url": "https://www.oracle.com/security-alerts/cpujul2025.html"
}
]
}
CERTFR-2025-AVI-0102
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Tenable. Entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Tenable | Identity Exposure | Identity Exposure versions antérieures à 3.77.8 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Identity Exposure versions ant\u00e9rieures \u00e0 3.77.8",
"product": {
"name": "Identity Exposure",
"vendor": {
"name": "Tenable",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-25629",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25629"
},
{
"name": "CVE-2024-11053",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11053"
},
{
"name": "CVE-2025-23085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23085"
},
{
"name": "CVE-2025-23083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23083"
},
{
"name": "CVE-2025-1091",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1091"
},
{
"name": "CVE-2025-0665",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0665"
},
{
"name": "CVE-2025-0760",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0760"
},
{
"name": "CVE-2025-23084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23084"
},
{
"name": "CVE-2025-0725",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0725"
},
{
"name": "CVE-2025-0167",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0167"
}
],
"initial_release_date": "2025-02-07T00:00:00",
"last_revision_date": "2025-02-10T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0102",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-02-07T00:00:00.000000"
},
{
"description": "Ajout des vuln\u00e9rabilit\u00e9s CVE-2025-0167, CVE-2025-0665 et CVE-2025-0725",
"revision_date": "2025-02-10T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Tenable. Entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Tenable",
"vendor_advisories": [
{
"published_at": "2025-02-20",
"title": "Bulletin de s\u00e9curit\u00e9 Tenable tns-2025-01",
"url": "https://www.tenable.com/security/tns-2025-01"
}
]
}
CERTFR-2025-AVI-0060
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans Node.js. Elles permettent à un attaquant de provoquer un déni de service à distance et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Node.js versions v23.x ant\u00e9rieures \u00e0 v23.6.1",
"product": {
"name": "Node.js",
"vendor": {
"name": "Node.js",
"scada": false
}
}
},
{
"description": "Node.js versions v20.x ant\u00e9rieures \u00e0 v20.18.2",
"product": {
"name": "Node.js",
"vendor": {
"name": "Node.js",
"scada": false
}
}
},
{
"description": "Node.js versions v18.x ant\u00e9rieures \u00e0 v18.20.6",
"product": {
"name": "Node.js",
"vendor": {
"name": "Node.js",
"scada": false
}
}
},
{
"description": "Node.js versions v22.x ant\u00e9rieures \u00e0 v22.13.1",
"product": {
"name": "Node.js",
"vendor": {
"name": "Node.js",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-23088",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23088"
},
{
"name": "CVE-2025-23085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23085"
},
{
"name": "CVE-2025-23083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23083"
},
{
"name": "CVE-2025-23087",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23087"
},
{
"name": "CVE-2025-23084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23084"
},
{
"name": "CVE-2025-23089",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23089"
}
],
"initial_release_date": "2025-01-22T00:00:00",
"last_revision_date": "2025-01-22T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0060",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-01-22T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Node.js. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Node.js",
"vendor_advisories": [
{
"published_at": "2025-01-21",
"title": "Bulletin de s\u00e9curit\u00e9 Node.js",
"url": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases"
}
]
}
CERTFR-2025-AVI-0150
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans Tenable Identity Exposure. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Tenable | Identity Exposure | Identity Exposure versions antérieures à 3.77.9 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Identity Exposure versions ant\u00e9rieures \u00e0 3.77.9",
"product": {
"name": "Identity Exposure",
"vendor": {
"name": "Tenable",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-25629",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25629"
},
{
"name": "CVE-2024-11053",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11053"
},
{
"name": "CVE-2025-23085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23085"
},
{
"name": "CVE-2025-23083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23083"
},
{
"name": "CVE-2025-1091",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1091"
},
{
"name": "CVE-2025-0665",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0665"
},
{
"name": "CVE-2025-0760",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0760"
},
{
"name": "CVE-2025-23084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23084"
},
{
"name": "CVE-2025-0725",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0725"
},
{
"name": "CVE-2025-0167",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0167"
}
],
"initial_release_date": "2025-02-21T00:00:00",
"last_revision_date": "2025-02-21T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0150",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-02-21T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Tenable Identity Exposure. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Tenable Identity Exposure",
"vendor_advisories": [
{
"published_at": "2025-02-20",
"title": "Bulletin de s\u00e9curit\u00e9 Tenable tns-2025-01",
"url": "https://www.tenable.com/security/tns-2025-01"
}
]
}
CERTFR-2025-AVI-0967
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| VMware | Tanzu Platform | File Integrity Monitoring pour VMware Tanzu Platform versions antérieures à 2.1.49 | ||
| VMware | Tanzu Platform | Cloud Service Broker pour Azure pour VMware Tanzu Platform versions antérieures à 1.13.1 | ||
| VMware | Tanzu Platform | AI Services pour VMware Tanzu Platform versions antérieures à 10.3.0 | ||
| VMware | Tanzu Platform | Scheduler pour VMware Tanzu Platform versions antérieures à 2.0.21 | ||
| VMware | Tanzu Platform | Foundation Core pour VMware Tanzu Platform versions antérieures à 3.1.4 | ||
| VMware | Tanzu Platform | Elastic Application Runtime pour VMware Tanzu Platform versions antérieures à 10.2.4+LTS-T | ||
| VMware | Tanzu Platform | Isolation Segmentation pour VMware Tanzu Platform versions antérieures à 6.0.21+LTS-T | ||
| VMware | Tanzu Platform | .NET Core Buildpack versions antérieures à 2.4.64 | ||
| VMware | Tanzu Platform | VMware Tanzu Data Flow sur Tanzu Platform versions antérieures à 2.0.0 | ||
| VMware | Tanzu Platform | Isolation Segmentation pour VMware Tanzu Platform versions antérieures à 10.2.4 | ||
| VMware | Tanzu Platform | CredHub Secrets Management pour VMware Tanzu Platform versions antérieures à 1.6.7 | ||
| VMware | Tanzu Platform | Extended App Support pour Tanzu Platform versions antérieures à 1.0.8 | ||
| VMware | Tanzu Platform | Go Buildpack versions antérieures à 1.10.57 | ||
| VMware | Tanzu Platform | VMware Tanzu RabbitMQ sur Tanzu Platform versions antérieures à 10.1.0 | ||
| VMware | Tanzu Platform | NodeJS Buildpack versions antérieures à 1.8.61 | ||
| VMware | Tanzu Platform | Foundation Core pour VMware Tanzu Platform versions antérieures à 3.2.0 | ||
| VMware | Tanzu Platform | Application Services pour VMware Tanzu Platform versions antérieures à 3.3.11 | ||
| VMware | Tanzu Platform | IPsec Encryption pour VMware Tanzu Platform versions antérieures à 1.9.68 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "File Integrity Monitoring pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 2.1.49",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Cloud Service Broker pour Azure pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 1.13.1",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "AI Services pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 10.3.0",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Scheduler pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 2.0.21",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Foundation Core pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 3.1.4",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Elastic Application Runtime pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 10.2.4+LTS-T",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Isolation Segmentation pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 6.0.21+LTS-T",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": ".NET Core Buildpack versions ant\u00e9rieures \u00e0 2.4.64",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware Tanzu Data Flow sur Tanzu Platform versions ant\u00e9rieures \u00e0 2.0.0",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Isolation Segmentation pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 10.2.4",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "CredHub Secrets Management pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 1.6.7",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Extended App Support pour Tanzu Platform versions ant\u00e9rieures \u00e0 1.0.8",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Go Buildpack versions ant\u00e9rieures \u00e0 1.10.57",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware Tanzu RabbitMQ sur Tanzu Platform versions ant\u00e9rieures \u00e0 10.1.0",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "NodeJS Buildpack versions ant\u00e9rieures \u00e0 1.8.61",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Foundation Core pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 3.2.0",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Application Services pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 3.3.11",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "IPsec Encryption pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 1.9.68",
"product": {
"name": "Tanzu Platform",
"vendor": {
"name": "VMware",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2022-1343",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1343"
},
{
"name": "CVE-2025-8715",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8715"
},
{
"name": "CVE-2025-30681",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30681"
},
{
"name": "CVE-2023-0216",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0216"
},
{
"name": "CVE-2024-20919",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20919"
},
{
"name": "CVE-2022-1473",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1473"
},
{
"name": "CVE-2023-21938",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21938"
},
{
"name": "CVE-2023-40217",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40217"
},
{
"name": "CVE-2020-14621",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14621"
},
{
"name": "CVE-2023-0401",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0401"
},
{
"name": "CVE-2025-59830",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59830"
},
{
"name": "CVE-2023-21843",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21843"
},
{
"name": "CVE-2024-36138",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-36138"
},
{
"name": "CVE-2020-2803",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2803"
},
{
"name": "CVE-2024-21235",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21235"
},
{
"name": "CVE-2025-30689",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30689"
},
{
"name": "CVE-2024-11168",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11168"
},
{
"name": "CVE-2025-9231",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9231"
},
{
"name": "CVE-2022-21426",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21426"
},
{
"name": "CVE-2024-22020",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22020"
},
{
"name": "CVE-2025-30715",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30715"
},
{
"name": "CVE-2025-30682",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30682"
},
{
"name": "CVE-2021-35586",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35586"
},
{
"name": "CVE-2025-25186",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25186"
},
{
"name": "CVE-2025-50102",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50102"
},
{
"name": "CVE-2025-55248",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55248"
},
{
"name": "CVE-2024-21144",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21144"
},
{
"name": "CVE-2021-35550",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35550"
},
{
"name": "CVE-2025-22872",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22872"
},
{
"name": "CVE-2021-35567",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35567"
},
{
"name": "CVE-2020-14579",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14579"
},
{
"name": "CVE-2025-50100",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50100"
},
{
"name": "CVE-2023-21954",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21954"
},
{
"name": "CVE-2022-4304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4304"
},
{
"name": "CVE-2023-21939",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21939"
},
{
"name": "CVE-2024-20926",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20926"
},
{
"name": "CVE-2025-0913",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0913"
},
{
"name": "CVE-2021-2163",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2163"
},
{
"name": "CVE-2024-21890",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21890"
},
{
"name": "CVE-2024-21896",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21896"
},
{
"name": "CVE-2025-47907",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47907"
},
{
"name": "CVE-2025-40026",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40026"
},
{
"name": "CVE-2022-1292",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1292"
},
{
"name": "CVE-2024-21068",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21068"
},
{
"name": "CVE-2024-7409",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7409"
},
{
"name": "CVE-2025-30703",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30703"
},
{
"name": "CVE-2023-21830",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21830"
},
{
"name": "CVE-2021-2161",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2161"
},
{
"name": "CVE-2025-6069",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6069"
},
{
"name": "CVE-2021-2341",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2341"
},
{
"name": "CVE-2024-6232",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6232"
},
{
"name": "CVE-2025-50080",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50080"
},
{
"name": "CVE-2024-6505",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6505"
},
{
"name": "CVE-2025-4330",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4330"
},
{
"name": "CVE-2020-14593",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14593"
},
{
"name": "CVE-2025-50078",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50078"
},
{
"name": "CVE-2020-14664",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14664"
},
{
"name": "CVE-2024-9287",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9287"
},
{
"name": "CVE-2025-4138",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4138"
},
{
"name": "CVE-2020-14797",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14797"
},
{
"name": "CVE-2023-0215",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0215"
},
{
"name": "CVE-2023-36632",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-36632"
},
{
"name": "CVE-2020-14798",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14798"
},
{
"name": "CVE-2023-0286",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0286"
},
{
"name": "CVE-2024-43484",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43484"
},
{
"name": "CVE-2025-24293",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24293"
},
{
"name": "CVE-2025-30696",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30696"
},
{
"name": "CVE-2025-55752",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
},
{
"name": "CVE-2022-21299",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21299"
},
{
"name": "CVE-2020-2773",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2773"
},
{
"name": "CVE-2024-22025",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22025"
},
{
"name": "CVE-2024-20921",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20921"
},
{
"name": "CVE-2020-14578",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14578"
},
{
"name": "CVE-2025-21584",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21584"
},
{
"name": "CVE-2020-2805",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2805"
},
{
"name": "CVE-2025-58767",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58767"
},
{
"name": "CVE-2023-4807",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4807"
},
{
"name": "CVE-2024-45341",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45341"
},
{
"name": "CVE-2020-2830",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2830"
},
{
"name": "CVE-2025-54798",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54798"
},
{
"name": "CVE-2022-21624",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21624"
},
{
"name": "CVE-2020-2781",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2781"
},
{
"name": "CVE-2022-21305",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21305"
},
{
"name": "CVE-2020-14556",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14556"
},
{
"name": "CVE-2025-50085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50085"
},
{
"name": "CVE-2020-14792",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14792"
},
{
"name": "CVE-2023-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44487"
},
{
"name": "CVE-2025-41248",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41248"
},
{
"name": "CVE-2024-3447",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3447"
},
{
"name": "CVE-2022-2068",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2068"
},
{
"name": "CVE-2022-21271",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21271"
},
{
"name": "CVE-2025-61919",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61919"
},
{
"name": "CVE-2022-40897",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40897"
},
{
"name": "CVE-2025-0938",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0938"
},
{
"name": "CVE-2025-27210",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27210"
},
{
"name": "CVE-2025-61771",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61771"
},
{
"name": "CVE-2025-61770",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61770"
},
{
"name": "CVE-2023-22081",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22081"
},
{
"name": "CVE-2022-4203",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4203"
},
{
"name": "CVE-2025-50106",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50106"
},
{
"name": "CVE-2023-46809",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46809"
},
{
"name": "CVE-2024-21510",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21510"
},
{
"name": "CVE-2022-21626",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21626"
},
{
"name": "CVE-2025-58057",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58057"
},
{
"name": "CVE-2025-8291",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8291"
},
{
"name": "CVE-2020-14781",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14781"
},
{
"name": "CVE-2025-30683",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30683"
},
{
"name": "CVE-2025-30699",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30699"
},
{
"name": "CVE-2025-61921",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61921"
},
{
"name": "CVE-2025-22866",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22866"
},
{
"name": "CVE-2025-30754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30754"
},
{
"name": "CVE-2024-38229",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38229"
},
{
"name": "CVE-2025-47910",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47910"
},
{
"name": "CVE-2025-23167",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23167"
},
{
"name": "CVE-2023-27043",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27043"
},
{
"name": "CVE-2024-43483",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43483"
},
{
"name": "CVE-2025-50094",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50094"
},
{
"name": "CVE-2021-35559",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35559"
},
{
"name": "CVE-2023-0217",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0217"
},
{
"name": "CVE-2024-58266",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58266"
},
{
"name": "CVE-2025-50098",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50098"
},
{
"name": "CVE-2022-21291",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21291"
},
{
"name": "CVE-2025-50086",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50086"
},
{
"name": "CVE-2022-3786",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3786"
},
{
"name": "CVE-2023-38552",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38552"
},
{
"name": "CVE-2021-35565",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35565"
},
{
"name": "CVE-2025-47906",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47906"
},
{
"name": "CVE-2025-58446",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58446"
},
{
"name": "CVE-2025-8194",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8194"
},
{
"name": "CVE-2024-3446",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3446"
},
{
"name": "CVE-2025-50082",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50082"
},
{
"name": "CVE-2025-40027",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40027"
},
{
"name": "CVE-2025-50097",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50097"
},
{
"name": "CVE-2025-50181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50181"
},
{
"name": "CVE-2025-50084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50084"
},
{
"name": "CVE-2025-50079",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50079"
},
{
"name": "CVE-2025-1795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1795"
},
{
"name": "CVE-2021-35603",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35603"
},
{
"name": "CVE-2023-22067",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22067"
},
{
"name": "CVE-2025-4517",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4517"
},
{
"name": "CVE-2025-55193",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55193"
},
{
"name": "CVE-2025-21574",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21574"
},
{
"name": "CVE-2024-22019",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22019"
},
{
"name": "CVE-2025-4674",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4674"
},
{
"name": "CVE-2020-2754",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2754"
},
{
"name": "CVE-2020-14796",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14796"
},
{
"name": "CVE-2025-21580",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21580"
},
{
"name": "CVE-2022-29526",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29526"
},
{
"name": "CVE-2025-55754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55754"
},
{
"name": "CVE-2025-53023",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53023"
},
{
"name": "CVE-2025-21575",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21575"
},
{
"name": "CVE-2025-4435",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4435"
},
{
"name": "CVE-2025-21577",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21577"
},
{
"name": "CVE-2022-21628",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21628"
},
{
"name": "CVE-2024-4467",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4467"
},
{
"name": "CVE-2024-21011",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21011"
},
{
"name": "CVE-2024-45336",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45336"
},
{
"name": "CVE-2021-2369",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2369"
},
{
"name": "CVE-2025-22868",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22868"
},
{
"name": "CVE-2024-12718",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12718"
},
{
"name": "CVE-2024-27983",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27983"
},
{
"name": "CVE-2025-23085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23085"
},
{
"name": "CVE-2024-0450",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0450"
},
{
"name": "CVE-2024-5642",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5642"
},
{
"name": "CVE-2025-59425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59425"
},
{
"name": "CVE-2024-3219",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3219"
},
{
"name": "CVE-2025-50096",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50096"
},
{
"name": "CVE-2024-47554",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47554"
},
{
"name": "CVE-2025-9232",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9232"
},
{
"name": "CVE-2025-23165",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23165"
},
{
"name": "CVE-2023-30584",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-30584"
},
{
"name": "CVE-2025-61795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61795"
},
{
"name": "CVE-2025-30705",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30705"
},
{
"name": "CVE-2025-8713",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8713"
},
{
"name": "CVE-2025-21587",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21587"
},
{
"name": "CVE-2025-50088",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50088"
},
{
"name": "CVE-2024-21892",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21892"
},
{
"name": "CVE-2024-45337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
},
{
"name": "CVE-2024-21147",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21147"
},
{
"name": "CVE-2024-27982",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27982"
},
{
"name": "CVE-2020-14581",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14581"
},
{
"name": "CVE-2024-37372",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37372"
},
{
"name": "CVE-2025-50077",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50077"
},
{
"name": "CVE-2025-23083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23083"
},
{
"name": "CVE-2021-2388",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2388"
},
{
"name": "CVE-2025-50092",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50092"
},
{
"name": "CVE-2025-50099",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50099"
},
{
"name": "CVE-2021-35588",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35588"
},
{
"name": "CVE-2025-41244",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41244"
},
{
"name": "CVE-2024-21140",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21140"
},
{
"name": "CVE-2025-30684",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30684"
},
{
"name": "CVE-2024-21094",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21094"
},
{
"name": "CVE-2025-48989",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48989"
},
{
"name": "CVE-2022-21365",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21365"
},
{
"name": "CVE-2025-50093",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50093"
},
{
"name": "CVE-2025-22874",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22874"
},
{
"name": "CVE-2020-14782",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14782"
},
{
"name": "CVE-2025-50059",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50059"
},
{
"name": "CVE-2025-21579",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21579"
},
{
"name": "CVE-2023-21937",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21937"
},
{
"name": "CVE-2025-30761",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30761"
},
{
"name": "CVE-2025-50087",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50087"
},
{
"name": "CVE-2024-47535",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47535"
},
{
"name": "CVE-2022-4450",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4450"
},
{
"name": "CVE-2024-7592",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7592"
},
{
"name": "CVE-2023-2650",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2650"
},
{
"name": "CVE-2022-21434",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21434"
},
{
"name": "CVE-2025-54410",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54410"
},
{
"name": "CVE-2023-52970",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52970"
},
{
"name": "CVE-2022-3996",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3996"
},
{
"name": "CVE-2025-52434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52434"
},
{
"name": "CVE-2022-21294",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21294"
},
{
"name": "CVE-2025-30698",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30698"
},
{
"name": "CVE-2020-2755",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2755"
},
{
"name": "CVE-2025-8714",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8714"
},
{
"name": "CVE-2024-43485",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43485"
},
{
"name": "CVE-2020-14779",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14779"
},
{
"name": "CVE-2025-4673",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4673"
},
{
"name": "CVE-2023-22045",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22045"
},
{
"name": "CVE-2025-30721",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30721"
},
{
"name": "CVE-2025-58056",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58056"
},
{
"name": "CVE-2025-22871",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22871"
},
{
"name": "CVE-2024-21138",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21138"
},
{
"name": "CVE-2025-50091",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50091"
},
{
"name": "CVE-2024-22018",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22018"
},
{
"name": "CVE-2023-22049",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22049"
},
{
"name": "CVE-2022-21341",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21341"
},
{
"name": "CVE-2025-23166",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23166"
},
{
"name": "CVE-2021-35578",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35578"
},
{
"name": "CVE-2024-0397",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0397"
},
{
"name": "CVE-2020-14583",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14583"
},
{
"name": "CVE-2022-21340",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21340"
},
{
"name": "CVE-2024-12254",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12254"
},
{
"name": "CVE-2025-4516",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4516"
},
{
"name": "CVE-2025-22869",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22869"
},
{
"name": "CVE-2022-3358",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3358"
},
{
"name": "CVE-2022-21293",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21293"
},
{
"name": "CVE-2022-2097",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2097"
},
{
"name": "CVE-2025-50104",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50104"
},
{
"name": "CVE-2020-2800",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2800"
},
{
"name": "CVE-2025-6242",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6242"
},
{
"name": "CVE-2025-61772",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61772"
},
{
"name": "CVE-2025-30722",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30722"
},
{
"name": "CVE-2024-21145",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21145"
},
{
"name": "CVE-2022-21282",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21282"
},
{
"name": "CVE-2022-21349",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21349"
},
{
"name": "CVE-2024-50602",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50602"
},
{
"name": "CVE-2024-21891",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21891"
},
{
"name": "CVE-2025-22870",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22870"
},
{
"name": "CVE-2025-30687",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30687"
},
{
"name": "CVE-2023-21968",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21968"
},
{
"name": "CVE-2025-50101",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50101"
},
{
"name": "CVE-2025-30749",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30749"
},
{
"name": "CVE-2025-61748",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61748"
},
{
"name": "CVE-2025-4207",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4207"
},
{
"name": "CVE-2025-9230",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9230"
},
{
"name": "CVE-2025-27789",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27789"
},
{
"name": "CVE-2022-21248",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21248"
},
{
"name": "CVE-2023-21930",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21930"
},
{
"name": "CVE-2024-22017",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22017"
},
{
"name": "CVE-2025-8916",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8916"
},
{
"name": "CVE-2025-8885",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8885"
},
{
"name": "CVE-2024-20918",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20918"
},
{
"name": "CVE-2025-41249",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41249"
},
{
"name": "CVE-2025-30704",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30704"
},
{
"name": "CVE-2021-35564",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35564"
},
{
"name": "CVE-2023-52969",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52969"
},
{
"name": "CVE-2025-46551",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46551"
},
{
"name": "CVE-2025-30693",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30693"
},
{
"name": "CVE-2025-21585",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21585"
},
{
"name": "CVE-2025-53506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53506"
},
{
"name": "CVE-2025-23084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23084"
},
{
"name": "CVE-2022-3602",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3602"
},
{
"name": "CVE-2025-1094",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1094"
},
{
"name": "CVE-2022-1434",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1434"
},
{
"name": "CVE-2020-2757",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2757"
},
{
"name": "CVE-2025-53864",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53864"
},
{
"name": "CVE-2024-4032",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4032"
},
{
"name": "CVE-2025-40025",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40025"
},
{
"name": "CVE-2025-61620",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61620"
},
{
"name": "CVE-2021-35556",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35556"
},
{
"name": "CVE-2024-8244",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8244"
},
{
"name": "CVE-2024-21085",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21085"
},
{
"name": "CVE-2025-21502",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21502"
},
{
"name": "CVE-2023-39331",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39331"
},
{
"name": "CVE-2025-55315",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55315"
},
{
"name": "CVE-2021-35560",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35560"
},
{
"name": "CVE-2025-21581",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21581"
},
{
"name": "CVE-2024-20945",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20945"
},
{
"name": "CVE-2025-58754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58754"
},
{
"name": "CVE-2024-21131",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21131"
},
{
"name": "CVE-2025-41242",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41242"
},
{
"name": "CVE-2024-21210",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21210"
},
{
"name": "CVE-2025-53057",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53057"
},
{
"name": "CVE-2023-39332",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39332"
},
{
"name": "CVE-2020-2756",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2756"
},
{
"name": "CVE-2024-27980",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27980"
},
{
"name": "CVE-2023-21967",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21967"
},
{
"name": "CVE-2025-30685",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30685"
},
{
"name": "CVE-2023-39333",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39333"
},
{
"name": "CVE-2022-21619",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21619"
},
{
"name": "CVE-2025-30695",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30695"
},
{
"name": "CVE-2025-30688",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30688"
},
{
"name": "CVE-2023-5752",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5752"
},
{
"name": "CVE-2025-61780",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61780"
},
{
"name": "CVE-2021-35561",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35561"
},
{
"name": "CVE-2022-21476",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21476"
},
{
"name": "CVE-2025-53066",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53066"
},
{
"name": "CVE-2024-21217",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21217"
},
{
"name": "CVE-2023-6597",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6597"
},
{
"name": "CVE-2024-20952",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20952"
},
{
"name": "CVE-2022-21541",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21541"
},
{
"name": "CVE-2025-27221",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27221"
},
{
"name": "CVE-2022-21360",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21360"
},
{
"name": "CVE-2022-21296",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21296"
},
{
"name": "CVE-2022-21540",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21540"
},
{
"name": "CVE-2025-50083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50083"
},
{
"name": "CVE-2024-21208",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21208"
},
{
"name": "CVE-2024-36137",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-36137"
},
{
"name": "CVE-2020-14577",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14577"
},
{
"name": "CVE-2025-49014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49014"
},
{
"name": "CVE-2024-6923",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6923"
},
{
"name": "CVE-2024-8088",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8088"
}
],
"initial_release_date": "2025-11-05T00:00:00",
"last_revision_date": "2025-11-05T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0967",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-11-05T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits VMware. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits VMware",
"vendor_advisories": [
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36323",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36323"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36343",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36343"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-99",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36326"
},
{
"published_at": "2025-11-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36305",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36305"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36345",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36345"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-53",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36329"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-81",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36316"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2024-41",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36331"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36334",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36334"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36335",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36335"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36340",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36340"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36319",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36319"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36339",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36339"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36322",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36322"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36321",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36321"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-68",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36324"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36336",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36336"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36318",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36318"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36337",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36337"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36346",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36346"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-81",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36315"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36317",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36317"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36344",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36344"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36341",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36341"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36314",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36314"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2024-41",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36330"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36332",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36332"
},
{
"published_at": "2025-11-04",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36304",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36304"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36342",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36342"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36333",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36333"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-99",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36327"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36338",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36338"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-53",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36328"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-68",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36325"
}
]
}
suse-su-2025:0232-1
Vulnerability from csaf_suse
Published
2025-01-24 14:33
Modified
2025-01-24 14:33
Summary
Security update for nodejs20
Notes
Title of the patch
Security update for nodejs20
Description of the patch
This update for nodejs20 fixes the following issues:
Update to 20.18.2:
- CVE-2025-23083: Fixed worker permission bypass via InternalWorker leak in diagnostics (bsc#1236251)
- CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERR_PROTO (bsc#1236250)
- CVE-2025-22150: Fixed insufficiently random values used when defining the boundary for a multipart/form-data request in undici (bsc#1236258)
Patchnames
SUSE-2025-232,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-232,SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-232,SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-232,SUSE-SLE-Product-SLES_SAP-15-SP5-2025-232
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for nodejs20",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for nodejs20 fixes the following issues:\n\nUpdate to 20.18.2:\n\n- CVE-2025-23083: Fixed worker permission bypass via InternalWorker leak in diagnostics (bsc#1236251)\n- CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERR_PROTO (bsc#1236250)\n- CVE-2025-22150: Fixed insufficiently random values used when defining the boundary for a multipart/form-data request in undici (bsc#1236258)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-232,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-232,SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-232,SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-232,SUSE-SLE-Product-SLES_SAP-15-SP5-2025-232",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0232-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:0232-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-20250232-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:0232-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-January/020195.html"
},
{
"category": "self",
"summary": "SUSE Bug 1236250",
"url": "https://bugzilla.suse.com/1236250"
},
{
"category": "self",
"summary": "SUSE Bug 1236251",
"url": "https://bugzilla.suse.com/1236251"
},
{
"category": "self",
"summary": "SUSE Bug 1236258",
"url": "https://bugzilla.suse.com/1236258"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-22150 page",
"url": "https://www.suse.com/security/cve/CVE-2025-22150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-23083 page",
"url": "https://www.suse.com/security/cve/CVE-2025-23083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-23085 page",
"url": "https://www.suse.com/security/cve/CVE-2025-23085/"
}
],
"title": "Security update for nodejs20",
"tracking": {
"current_release_date": "2025-01-24T14:33:49Z",
"generator": {
"date": "2025-01-24T14:33:49Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:0232-1",
"initial_release_date": "2025-01-24T14:33:49Z",
"revision_history": [
{
"date": "2025-01-24T14:33:49Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "corepack20-20.18.2-150500.11.18.1.aarch64",
"product": {
"name": "corepack20-20.18.2-150500.11.18.1.aarch64",
"product_id": "corepack20-20.18.2-150500.11.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "nodejs20-20.18.2-150500.11.18.1.aarch64",
"product": {
"name": "nodejs20-20.18.2-150500.11.18.1.aarch64",
"product_id": "nodejs20-20.18.2-150500.11.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"product": {
"name": "nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"product_id": "nodejs20-devel-20.18.2-150500.11.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "npm20-20.18.2-150500.11.18.1.aarch64",
"product": {
"name": "npm20-20.18.2-150500.11.18.1.aarch64",
"product_id": "npm20-20.18.2-150500.11.18.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack20-20.18.2-150500.11.18.1.i586",
"product": {
"name": "corepack20-20.18.2-150500.11.18.1.i586",
"product_id": "corepack20-20.18.2-150500.11.18.1.i586"
}
},
{
"category": "product_version",
"name": "nodejs20-20.18.2-150500.11.18.1.i586",
"product": {
"name": "nodejs20-20.18.2-150500.11.18.1.i586",
"product_id": "nodejs20-20.18.2-150500.11.18.1.i586"
}
},
{
"category": "product_version",
"name": "nodejs20-devel-20.18.2-150500.11.18.1.i586",
"product": {
"name": "nodejs20-devel-20.18.2-150500.11.18.1.i586",
"product_id": "nodejs20-devel-20.18.2-150500.11.18.1.i586"
}
},
{
"category": "product_version",
"name": "npm20-20.18.2-150500.11.18.1.i586",
"product": {
"name": "npm20-20.18.2-150500.11.18.1.i586",
"product_id": "npm20-20.18.2-150500.11.18.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"product": {
"name": "nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"product_id": "nodejs20-docs-20.18.2-150500.11.18.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack20-20.18.2-150500.11.18.1.ppc64le",
"product": {
"name": "corepack20-20.18.2-150500.11.18.1.ppc64le",
"product_id": "corepack20-20.18.2-150500.11.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nodejs20-20.18.2-150500.11.18.1.ppc64le",
"product": {
"name": "nodejs20-20.18.2-150500.11.18.1.ppc64le",
"product_id": "nodejs20-20.18.2-150500.11.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"product": {
"name": "nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"product_id": "nodejs20-devel-20.18.2-150500.11.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "npm20-20.18.2-150500.11.18.1.ppc64le",
"product": {
"name": "npm20-20.18.2-150500.11.18.1.ppc64le",
"product_id": "npm20-20.18.2-150500.11.18.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack20-20.18.2-150500.11.18.1.s390x",
"product": {
"name": "corepack20-20.18.2-150500.11.18.1.s390x",
"product_id": "corepack20-20.18.2-150500.11.18.1.s390x"
}
},
{
"category": "product_version",
"name": "nodejs20-20.18.2-150500.11.18.1.s390x",
"product": {
"name": "nodejs20-20.18.2-150500.11.18.1.s390x",
"product_id": "nodejs20-20.18.2-150500.11.18.1.s390x"
}
},
{
"category": "product_version",
"name": "nodejs20-devel-20.18.2-150500.11.18.1.s390x",
"product": {
"name": "nodejs20-devel-20.18.2-150500.11.18.1.s390x",
"product_id": "nodejs20-devel-20.18.2-150500.11.18.1.s390x"
}
},
{
"category": "product_version",
"name": "npm20-20.18.2-150500.11.18.1.s390x",
"product": {
"name": "npm20-20.18.2-150500.11.18.1.s390x",
"product_id": "npm20-20.18.2-150500.11.18.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack20-20.18.2-150500.11.18.1.x86_64",
"product": {
"name": "corepack20-20.18.2-150500.11.18.1.x86_64",
"product_id": "corepack20-20.18.2-150500.11.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "nodejs20-20.18.2-150500.11.18.1.x86_64",
"product": {
"name": "nodejs20-20.18.2-150500.11.18.1.x86_64",
"product_id": "nodejs20-20.18.2-150500.11.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"product": {
"name": "nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"product_id": "nodejs20-devel-20.18.2-150500.11.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "npm20-20.18.2-150500.11.18.1.x86_64",
"product": {
"name": "npm20-20.18.2-150500.11.18.1.x86_64",
"product_id": "npm20-20.18.2-150500.11.18.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150500.11.18.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.aarch64"
},
"product_reference": "nodejs20-20.18.2-150500.11.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150500.11.18.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.x86_64"
},
"product_reference": "nodejs20-20.18.2-150500.11.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150500.11.18.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64"
},
"product_reference": "nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150500.11.18.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64"
},
"product_reference": "nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-docs-20.18.2-150500.11.18.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-docs-20.18.2-150500.11.18.1.noarch"
},
"product_reference": "nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150500.11.18.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.aarch64"
},
"product_reference": "npm20-20.18.2-150500.11.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150500.11.18.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.x86_64"
},
"product_reference": "npm20-20.18.2-150500.11.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150500.11.18.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64"
},
"product_reference": "nodejs20-20.18.2-150500.11.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150500.11.18.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64"
},
"product_reference": "nodejs20-20.18.2-150500.11.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150500.11.18.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64"
},
"product_reference": "nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150500.11.18.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64"
},
"product_reference": "nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-docs-20.18.2-150500.11.18.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch"
},
"product_reference": "nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150500.11.18.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64"
},
"product_reference": "npm20-20.18.2-150500.11.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150500.11.18.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64"
},
"product_reference": "npm20-20.18.2-150500.11.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150500.11.18.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64"
},
"product_reference": "nodejs20-20.18.2-150500.11.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150500.11.18.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.ppc64le"
},
"product_reference": "nodejs20-20.18.2-150500.11.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150500.11.18.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.s390x"
},
"product_reference": "nodejs20-20.18.2-150500.11.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150500.11.18.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64"
},
"product_reference": "nodejs20-20.18.2-150500.11.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150500.11.18.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64"
},
"product_reference": "nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150500.11.18.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le"
},
"product_reference": "nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150500.11.18.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.s390x"
},
"product_reference": "nodejs20-devel-20.18.2-150500.11.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150500.11.18.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64"
},
"product_reference": "nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-docs-20.18.2-150500.11.18.1.noarch as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch"
},
"product_reference": "nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150500.11.18.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64"
},
"product_reference": "npm20-20.18.2-150500.11.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150500.11.18.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.ppc64le"
},
"product_reference": "npm20-20.18.2-150500.11.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150500.11.18.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.s390x"
},
"product_reference": "npm20-20.18.2-150500.11.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150500.11.18.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64"
},
"product_reference": "npm20-20.18.2-150500.11.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150500.11.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.ppc64le"
},
"product_reference": "nodejs20-20.18.2-150500.11.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150500.11.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.x86_64"
},
"product_reference": "nodejs20-20.18.2-150500.11.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150500.11.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le"
},
"product_reference": "nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150500.11.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.x86_64"
},
"product_reference": "nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-docs-20.18.2-150500.11.18.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-docs-20.18.2-150500.11.18.1.noarch"
},
"product_reference": "nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150500.11.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.ppc64le"
},
"product_reference": "npm20-20.18.2-150500.11.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150500.11.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.x86_64"
},
"product_reference": "npm20-20.18.2-150500.11.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-22150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-22150"
}
],
"notes": [
{
"category": "general",
"text": "Undici is an HTTP/1.1 client. Starting in version 4.5.0 and prior to versions 5.28.5, 6.21.1, and 7.2.3, undici uses `Math.random()` to choose the boundary for a multipart/form-data request. It is known that the output of `Math.random()` can be predicted if several of its generated values are known. If there is a mechanism in an app that sends multipart requests to an attacker-controlled website, they can use this to leak the necessary values. Therefore, an attacker can tamper with the requests going to the backend APIs if certain conditions are met. This is fixed in versions 5.28.5, 6.21.1, and 7.2.3. As a workaround, do not issue multipart requests to attacker controlled servers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-22150",
"url": "https://www.suse.com/security/cve/CVE-2025-22150"
},
{
"category": "external",
"summary": "SUSE Bug 1236257 for CVE-2025-22150",
"url": "https://bugzilla.suse.com/1236257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-24T14:33:49Z",
"details": "moderate"
}
],
"title": "CVE-2025-22150"
},
{
"cve": "CVE-2025-23083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-23083"
}
],
"notes": [
{
"category": "general",
"text": "With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. \r\n\r\nThis vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-23083",
"url": "https://www.suse.com/security/cve/CVE-2025-23083"
},
{
"category": "external",
"summary": "SUSE Bug 1236251 for CVE-2025-23083",
"url": "https://bugzilla.suse.com/1236251"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-24T14:33:49Z",
"details": "important"
}
],
"title": "CVE-2025-23083"
},
{
"cve": "CVE-2025-23085",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-23085"
}
],
"notes": [
{
"category": "general",
"text": "A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions.\r\n\r\nThis vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-23085",
"url": "https://www.suse.com/security/cve/CVE-2025-23085"
},
{
"category": "external",
"summary": "SUSE Bug 1236250 for CVE-2025-23085",
"url": "https://bugzilla.suse.com/1236250"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:npm20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-devel-20.18.2-150500.11.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:nodejs20-docs-20.18.2-150500.11.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:npm20-20.18.2-150500.11.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-24T14:33:49Z",
"details": "moderate"
}
],
"title": "CVE-2025-23085"
}
]
}
suse-su-2025:0284-1
Vulnerability from csaf_suse
Published
2025-01-29 13:47
Modified
2025-01-29 13:47
Summary
Security update for nodejs22
Notes
Title of the patch
Security update for nodejs22
Description of the patch
This update for nodejs22 fixes the following issues:
Update to 22.13.1:
- CVE-2025-23083: Fixed worker permission bypass via InternalWorker leak in diagnostics (bsc#1236251)
- CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERR_PROTO (bsc#1236250)
- CVE-2025-22150: Fixed insufficiently random values used when defining the boundary for a multipart/form-data request in undici (bsc#1236258)
Patchnames
SUSE-2025-284,SUSE-SLE-Module-Web-Scripting-15-SP6-2025-284,openSUSE-SLE-15.6-2025-284
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for nodejs22",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for nodejs22 fixes the following issues:\n\nUpdate to 22.13.1:\n\n- CVE-2025-23083: Fixed worker permission bypass via InternalWorker leak in diagnostics (bsc#1236251)\n- CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERR_PROTO (bsc#1236250)\n- CVE-2025-22150: Fixed insufficiently random values used when defining the boundary for a multipart/form-data request in undici (bsc#1236258)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-284,SUSE-SLE-Module-Web-Scripting-15-SP6-2025-284,openSUSE-SLE-15.6-2025-284",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0284-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:0284-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-20250284-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:0284-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-January/020235.html"
},
{
"category": "self",
"summary": "SUSE Bug 1236250",
"url": "https://bugzilla.suse.com/1236250"
},
{
"category": "self",
"summary": "SUSE Bug 1236251",
"url": "https://bugzilla.suse.com/1236251"
},
{
"category": "self",
"summary": "SUSE Bug 1236258",
"url": "https://bugzilla.suse.com/1236258"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-22150 page",
"url": "https://www.suse.com/security/cve/CVE-2025-22150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-23083 page",
"url": "https://www.suse.com/security/cve/CVE-2025-23083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-23085 page",
"url": "https://www.suse.com/security/cve/CVE-2025-23085/"
}
],
"title": "Security update for nodejs22",
"tracking": {
"current_release_date": "2025-01-29T13:47:55Z",
"generator": {
"date": "2025-01-29T13:47:55Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:0284-1",
"initial_release_date": "2025-01-29T13:47:55Z",
"revision_history": [
{
"date": "2025-01-29T13:47:55Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.13.1-150600.13.6.1.aarch64",
"product": {
"name": "corepack22-22.13.1-150600.13.6.1.aarch64",
"product_id": "corepack22-22.13.1-150600.13.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "nodejs22-22.13.1-150600.13.6.1.aarch64",
"product": {
"name": "nodejs22-22.13.1-150600.13.6.1.aarch64",
"product_id": "nodejs22-22.13.1-150600.13.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"product": {
"name": "nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"product_id": "nodejs22-devel-22.13.1-150600.13.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "npm22-22.13.1-150600.13.6.1.aarch64",
"product": {
"name": "npm22-22.13.1-150600.13.6.1.aarch64",
"product_id": "npm22-22.13.1-150600.13.6.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.13.1-150600.13.6.1.i586",
"product": {
"name": "corepack22-22.13.1-150600.13.6.1.i586",
"product_id": "corepack22-22.13.1-150600.13.6.1.i586"
}
},
{
"category": "product_version",
"name": "nodejs22-22.13.1-150600.13.6.1.i586",
"product": {
"name": "nodejs22-22.13.1-150600.13.6.1.i586",
"product_id": "nodejs22-22.13.1-150600.13.6.1.i586"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.13.1-150600.13.6.1.i586",
"product": {
"name": "nodejs22-devel-22.13.1-150600.13.6.1.i586",
"product_id": "nodejs22-devel-22.13.1-150600.13.6.1.i586"
}
},
{
"category": "product_version",
"name": "npm22-22.13.1-150600.13.6.1.i586",
"product": {
"name": "npm22-22.13.1-150600.13.6.1.i586",
"product_id": "npm22-22.13.1-150600.13.6.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"product": {
"name": "nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"product_id": "nodejs22-docs-22.13.1-150600.13.6.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.13.1-150600.13.6.1.ppc64le",
"product": {
"name": "corepack22-22.13.1-150600.13.6.1.ppc64le",
"product_id": "corepack22-22.13.1-150600.13.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nodejs22-22.13.1-150600.13.6.1.ppc64le",
"product": {
"name": "nodejs22-22.13.1-150600.13.6.1.ppc64le",
"product_id": "nodejs22-22.13.1-150600.13.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"product": {
"name": "nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"product_id": "nodejs22-devel-22.13.1-150600.13.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "npm22-22.13.1-150600.13.6.1.ppc64le",
"product": {
"name": "npm22-22.13.1-150600.13.6.1.ppc64le",
"product_id": "npm22-22.13.1-150600.13.6.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.13.1-150600.13.6.1.s390x",
"product": {
"name": "corepack22-22.13.1-150600.13.6.1.s390x",
"product_id": "corepack22-22.13.1-150600.13.6.1.s390x"
}
},
{
"category": "product_version",
"name": "nodejs22-22.13.1-150600.13.6.1.s390x",
"product": {
"name": "nodejs22-22.13.1-150600.13.6.1.s390x",
"product_id": "nodejs22-22.13.1-150600.13.6.1.s390x"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"product": {
"name": "nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"product_id": "nodejs22-devel-22.13.1-150600.13.6.1.s390x"
}
},
{
"category": "product_version",
"name": "npm22-22.13.1-150600.13.6.1.s390x",
"product": {
"name": "npm22-22.13.1-150600.13.6.1.s390x",
"product_id": "npm22-22.13.1-150600.13.6.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.13.1-150600.13.6.1.x86_64",
"product": {
"name": "corepack22-22.13.1-150600.13.6.1.x86_64",
"product_id": "corepack22-22.13.1-150600.13.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "nodejs22-22.13.1-150600.13.6.1.x86_64",
"product": {
"name": "nodejs22-22.13.1-150600.13.6.1.x86_64",
"product_id": "nodejs22-22.13.1-150600.13.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"product": {
"name": "nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"product_id": "nodejs22-devel-22.13.1-150600.13.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "npm22-22.13.1-150600.13.6.1.x86_64",
"product": {
"name": "npm22-22.13.1-150600.13.6.1.x86_64",
"product_id": "npm22-22.13.1-150600.13.6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-web-scripting:15:sp6"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.13.1-150600.13.6.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.aarch64"
},
"product_reference": "nodejs22-22.13.1-150600.13.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.13.1-150600.13.6.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.ppc64le"
},
"product_reference": "nodejs22-22.13.1-150600.13.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.13.1-150600.13.6.1.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.s390x"
},
"product_reference": "nodejs22-22.13.1-150600.13.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.13.1-150600.13.6.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.x86_64"
},
"product_reference": "nodejs22-22.13.1-150600.13.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.13.1-150600.13.6.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64"
},
"product_reference": "nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.13.1-150600.13.6.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le"
},
"product_reference": "nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.13.1-150600.13.6.1.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.s390x"
},
"product_reference": "nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.13.1-150600.13.6.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64"
},
"product_reference": "nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-docs-22.13.1-150600.13.6.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-docs-22.13.1-150600.13.6.1.noarch"
},
"product_reference": "nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.13.1-150600.13.6.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.aarch64"
},
"product_reference": "npm22-22.13.1-150600.13.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.13.1-150600.13.6.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.ppc64le"
},
"product_reference": "npm22-22.13.1-150600.13.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.13.1-150600.13.6.1.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.s390x"
},
"product_reference": "npm22-22.13.1-150600.13.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.13.1-150600.13.6.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.x86_64"
},
"product_reference": "npm22-22.13.1-150600.13.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.13.1-150600.13.6.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.aarch64"
},
"product_reference": "corepack22-22.13.1-150600.13.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.13.1-150600.13.6.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.ppc64le"
},
"product_reference": "corepack22-22.13.1-150600.13.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.13.1-150600.13.6.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.s390x"
},
"product_reference": "corepack22-22.13.1-150600.13.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.13.1-150600.13.6.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.x86_64"
},
"product_reference": "corepack22-22.13.1-150600.13.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.13.1-150600.13.6.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.aarch64"
},
"product_reference": "nodejs22-22.13.1-150600.13.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.13.1-150600.13.6.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.ppc64le"
},
"product_reference": "nodejs22-22.13.1-150600.13.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.13.1-150600.13.6.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.s390x"
},
"product_reference": "nodejs22-22.13.1-150600.13.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.13.1-150600.13.6.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.x86_64"
},
"product_reference": "nodejs22-22.13.1-150600.13.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.13.1-150600.13.6.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64"
},
"product_reference": "nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.13.1-150600.13.6.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le"
},
"product_reference": "nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.13.1-150600.13.6.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.s390x"
},
"product_reference": "nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.13.1-150600.13.6.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64"
},
"product_reference": "nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-docs-22.13.1-150600.13.6.1.noarch as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs22-docs-22.13.1-150600.13.6.1.noarch"
},
"product_reference": "nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.13.1-150600.13.6.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.aarch64"
},
"product_reference": "npm22-22.13.1-150600.13.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.13.1-150600.13.6.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.ppc64le"
},
"product_reference": "npm22-22.13.1-150600.13.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.13.1-150600.13.6.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.s390x"
},
"product_reference": "npm22-22.13.1-150600.13.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.13.1-150600.13.6.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.x86_64"
},
"product_reference": "npm22-22.13.1-150600.13.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-22150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-22150"
}
],
"notes": [
{
"category": "general",
"text": "Undici is an HTTP/1.1 client. Starting in version 4.5.0 and prior to versions 5.28.5, 6.21.1, and 7.2.3, undici uses `Math.random()` to choose the boundary for a multipart/form-data request. It is known that the output of `Math.random()` can be predicted if several of its generated values are known. If there is a mechanism in an app that sends multipart requests to an attacker-controlled website, they can use this to leak the necessary values. Therefore, an attacker can tamper with the requests going to the backend APIs if certain conditions are met. This is fixed in versions 5.28.5, 6.21.1, and 7.2.3. As a workaround, do not issue multipart requests to attacker controlled servers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-22150",
"url": "https://www.suse.com/security/cve/CVE-2025-22150"
},
{
"category": "external",
"summary": "SUSE Bug 1236257 for CVE-2025-22150",
"url": "https://bugzilla.suse.com/1236257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T13:47:55Z",
"details": "moderate"
}
],
"title": "CVE-2025-22150"
},
{
"cve": "CVE-2025-23083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-23083"
}
],
"notes": [
{
"category": "general",
"text": "With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. \r\n\r\nThis vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-23083",
"url": "https://www.suse.com/security/cve/CVE-2025-23083"
},
{
"category": "external",
"summary": "SUSE Bug 1236251 for CVE-2025-23083",
"url": "https://bugzilla.suse.com/1236251"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T13:47:55Z",
"details": "important"
}
],
"title": "CVE-2025-23083"
},
{
"cve": "CVE-2025-23085",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-23085"
}
],
"notes": [
{
"category": "general",
"text": "A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions.\r\n\r\nThis vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-23085",
"url": "https://www.suse.com/security/cve/CVE-2025-23085"
},
{
"category": "external",
"summary": "SUSE Bug 1236250 for CVE-2025-23085",
"url": "https://bugzilla.suse.com/1236250"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:corepack22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:nodejs22-devel-22.13.1-150600.13.6.1.x86_64",
"openSUSE Leap 15.6:nodejs22-docs-22.13.1-150600.13.6.1.noarch",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.aarch64",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.ppc64le",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.s390x",
"openSUSE Leap 15.6:npm22-22.13.1-150600.13.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T13:47:55Z",
"details": "moderate"
}
],
"title": "CVE-2025-23085"
}
]
}
suse-su-2025:0237-1
Vulnerability from csaf_suse
Published
2025-01-24 19:33
Modified
2025-01-24 19:33
Summary
Security update for nodejs20
Notes
Title of the patch
Security update for nodejs20
Description of the patch
This update for nodejs20 fixes the following issues:
Update to 20.18.2:
- CVE-2025-23083: Fixed worker permission bypass via InternalWorker leak in diagnostics (bsc#1236251)
- CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERR_PROTO (bsc#1236250)
- CVE-2025-22150: Fixed insufficiently random values used when defining the boundary for a multipart/form-data request in undici (bsc#1236258)
Patchnames
SUSE-2025-237,SUSE-SLE-Module-Web-Scripting-15-SP6-2025-237,openSUSE-SLE-15.6-2025-237
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for nodejs20",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for nodejs20 fixes the following issues:\n\nUpdate to 20.18.2:\n\n- CVE-2025-23083: Fixed worker permission bypass via InternalWorker leak in diagnostics (bsc#1236251)\n- CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERR_PROTO (bsc#1236250)\n- CVE-2025-22150: Fixed insufficiently random values used when defining the boundary for a multipart/form-data request in undici (bsc#1236258)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-237,SUSE-SLE-Module-Web-Scripting-15-SP6-2025-237,openSUSE-SLE-15.6-2025-237",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0237-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:0237-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-20250237-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:0237-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-January/020197.html"
},
{
"category": "self",
"summary": "SUSE Bug 1236250",
"url": "https://bugzilla.suse.com/1236250"
},
{
"category": "self",
"summary": "SUSE Bug 1236251",
"url": "https://bugzilla.suse.com/1236251"
},
{
"category": "self",
"summary": "SUSE Bug 1236258",
"url": "https://bugzilla.suse.com/1236258"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-22150 page",
"url": "https://www.suse.com/security/cve/CVE-2025-22150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-23083 page",
"url": "https://www.suse.com/security/cve/CVE-2025-23083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-23085 page",
"url": "https://www.suse.com/security/cve/CVE-2025-23085/"
}
],
"title": "Security update for nodejs20",
"tracking": {
"current_release_date": "2025-01-24T19:33:36Z",
"generator": {
"date": "2025-01-24T19:33:36Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:0237-1",
"initial_release_date": "2025-01-24T19:33:36Z",
"revision_history": [
{
"date": "2025-01-24T19:33:36Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "corepack20-20.18.2-150600.3.9.1.aarch64",
"product": {
"name": "corepack20-20.18.2-150600.3.9.1.aarch64",
"product_id": "corepack20-20.18.2-150600.3.9.1.aarch64"
}
},
{
"category": "product_version",
"name": "nodejs20-20.18.2-150600.3.9.1.aarch64",
"product": {
"name": "nodejs20-20.18.2-150600.3.9.1.aarch64",
"product_id": "nodejs20-20.18.2-150600.3.9.1.aarch64"
}
},
{
"category": "product_version",
"name": "nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"product": {
"name": "nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"product_id": "nodejs20-devel-20.18.2-150600.3.9.1.aarch64"
}
},
{
"category": "product_version",
"name": "npm20-20.18.2-150600.3.9.1.aarch64",
"product": {
"name": "npm20-20.18.2-150600.3.9.1.aarch64",
"product_id": "npm20-20.18.2-150600.3.9.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack20-20.18.2-150600.3.9.1.i586",
"product": {
"name": "corepack20-20.18.2-150600.3.9.1.i586",
"product_id": "corepack20-20.18.2-150600.3.9.1.i586"
}
},
{
"category": "product_version",
"name": "nodejs20-20.18.2-150600.3.9.1.i586",
"product": {
"name": "nodejs20-20.18.2-150600.3.9.1.i586",
"product_id": "nodejs20-20.18.2-150600.3.9.1.i586"
}
},
{
"category": "product_version",
"name": "nodejs20-devel-20.18.2-150600.3.9.1.i586",
"product": {
"name": "nodejs20-devel-20.18.2-150600.3.9.1.i586",
"product_id": "nodejs20-devel-20.18.2-150600.3.9.1.i586"
}
},
{
"category": "product_version",
"name": "npm20-20.18.2-150600.3.9.1.i586",
"product": {
"name": "npm20-20.18.2-150600.3.9.1.i586",
"product_id": "npm20-20.18.2-150600.3.9.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"product": {
"name": "nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"product_id": "nodejs20-docs-20.18.2-150600.3.9.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack20-20.18.2-150600.3.9.1.ppc64le",
"product": {
"name": "corepack20-20.18.2-150600.3.9.1.ppc64le",
"product_id": "corepack20-20.18.2-150600.3.9.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nodejs20-20.18.2-150600.3.9.1.ppc64le",
"product": {
"name": "nodejs20-20.18.2-150600.3.9.1.ppc64le",
"product_id": "nodejs20-20.18.2-150600.3.9.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"product": {
"name": "nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"product_id": "nodejs20-devel-20.18.2-150600.3.9.1.ppc64le"
}
},
{
"category": "product_version",
"name": "npm20-20.18.2-150600.3.9.1.ppc64le",
"product": {
"name": "npm20-20.18.2-150600.3.9.1.ppc64le",
"product_id": "npm20-20.18.2-150600.3.9.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack20-20.18.2-150600.3.9.1.s390x",
"product": {
"name": "corepack20-20.18.2-150600.3.9.1.s390x",
"product_id": "corepack20-20.18.2-150600.3.9.1.s390x"
}
},
{
"category": "product_version",
"name": "nodejs20-20.18.2-150600.3.9.1.s390x",
"product": {
"name": "nodejs20-20.18.2-150600.3.9.1.s390x",
"product_id": "nodejs20-20.18.2-150600.3.9.1.s390x"
}
},
{
"category": "product_version",
"name": "nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"product": {
"name": "nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"product_id": "nodejs20-devel-20.18.2-150600.3.9.1.s390x"
}
},
{
"category": "product_version",
"name": "npm20-20.18.2-150600.3.9.1.s390x",
"product": {
"name": "npm20-20.18.2-150600.3.9.1.s390x",
"product_id": "npm20-20.18.2-150600.3.9.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack20-20.18.2-150600.3.9.1.x86_64",
"product": {
"name": "corepack20-20.18.2-150600.3.9.1.x86_64",
"product_id": "corepack20-20.18.2-150600.3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "nodejs20-20.18.2-150600.3.9.1.x86_64",
"product": {
"name": "nodejs20-20.18.2-150600.3.9.1.x86_64",
"product_id": "nodejs20-20.18.2-150600.3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"product": {
"name": "nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"product_id": "nodejs20-devel-20.18.2-150600.3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "npm20-20.18.2-150600.3.9.1.x86_64",
"product": {
"name": "npm20-20.18.2-150600.3.9.1.x86_64",
"product_id": "npm20-20.18.2-150600.3.9.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-web-scripting:15:sp6"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150600.3.9.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.aarch64"
},
"product_reference": "nodejs20-20.18.2-150600.3.9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150600.3.9.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.ppc64le"
},
"product_reference": "nodejs20-20.18.2-150600.3.9.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150600.3.9.1.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.s390x"
},
"product_reference": "nodejs20-20.18.2-150600.3.9.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150600.3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.x86_64"
},
"product_reference": "nodejs20-20.18.2-150600.3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150600.3.9.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64"
},
"product_reference": "nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150600.3.9.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le"
},
"product_reference": "nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150600.3.9.1.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.s390x"
},
"product_reference": "nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150600.3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64"
},
"product_reference": "nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-docs-20.18.2-150600.3.9.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.18.2-150600.3.9.1.noarch"
},
"product_reference": "nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150600.3.9.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.aarch64"
},
"product_reference": "npm20-20.18.2-150600.3.9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150600.3.9.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.ppc64le"
},
"product_reference": "npm20-20.18.2-150600.3.9.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150600.3.9.1.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.s390x"
},
"product_reference": "npm20-20.18.2-150600.3.9.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150600.3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.x86_64"
},
"product_reference": "npm20-20.18.2-150600.3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack20-20.18.2-150600.3.9.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.aarch64"
},
"product_reference": "corepack20-20.18.2-150600.3.9.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack20-20.18.2-150600.3.9.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.ppc64le"
},
"product_reference": "corepack20-20.18.2-150600.3.9.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack20-20.18.2-150600.3.9.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.s390x"
},
"product_reference": "corepack20-20.18.2-150600.3.9.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack20-20.18.2-150600.3.9.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.x86_64"
},
"product_reference": "corepack20-20.18.2-150600.3.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150600.3.9.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.aarch64"
},
"product_reference": "nodejs20-20.18.2-150600.3.9.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150600.3.9.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.ppc64le"
},
"product_reference": "nodejs20-20.18.2-150600.3.9.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150600.3.9.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.s390x"
},
"product_reference": "nodejs20-20.18.2-150600.3.9.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-20.18.2-150600.3.9.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.x86_64"
},
"product_reference": "nodejs20-20.18.2-150600.3.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150600.3.9.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64"
},
"product_reference": "nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150600.3.9.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le"
},
"product_reference": "nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150600.3.9.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.s390x"
},
"product_reference": "nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-devel-20.18.2-150600.3.9.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64"
},
"product_reference": "nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs20-docs-20.18.2-150600.3.9.1.noarch as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nodejs20-docs-20.18.2-150600.3.9.1.noarch"
},
"product_reference": "nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150600.3.9.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.aarch64"
},
"product_reference": "npm20-20.18.2-150600.3.9.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150600.3.9.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.ppc64le"
},
"product_reference": "npm20-20.18.2-150600.3.9.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150600.3.9.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.s390x"
},
"product_reference": "npm20-20.18.2-150600.3.9.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm20-20.18.2-150600.3.9.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.x86_64"
},
"product_reference": "npm20-20.18.2-150600.3.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-22150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-22150"
}
],
"notes": [
{
"category": "general",
"text": "Undici is an HTTP/1.1 client. Starting in version 4.5.0 and prior to versions 5.28.5, 6.21.1, and 7.2.3, undici uses `Math.random()` to choose the boundary for a multipart/form-data request. It is known that the output of `Math.random()` can be predicted if several of its generated values are known. If there is a mechanism in an app that sends multipart requests to an attacker-controlled website, they can use this to leak the necessary values. Therefore, an attacker can tamper with the requests going to the backend APIs if certain conditions are met. This is fixed in versions 5.28.5, 6.21.1, and 7.2.3. As a workaround, do not issue multipart requests to attacker controlled servers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-22150",
"url": "https://www.suse.com/security/cve/CVE-2025-22150"
},
{
"category": "external",
"summary": "SUSE Bug 1236257 for CVE-2025-22150",
"url": "https://bugzilla.suse.com/1236257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-24T19:33:36Z",
"details": "moderate"
}
],
"title": "CVE-2025-22150"
},
{
"cve": "CVE-2025-23083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-23083"
}
],
"notes": [
{
"category": "general",
"text": "With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. \r\n\r\nThis vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-23083",
"url": "https://www.suse.com/security/cve/CVE-2025-23083"
},
{
"category": "external",
"summary": "SUSE Bug 1236251 for CVE-2025-23083",
"url": "https://bugzilla.suse.com/1236251"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-24T19:33:36Z",
"details": "important"
}
],
"title": "CVE-2025-23083"
},
{
"cve": "CVE-2025-23085",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-23085"
}
],
"notes": [
{
"category": "general",
"text": "A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions.\r\n\r\nThis vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-23085",
"url": "https://www.suse.com/security/cve/CVE-2025-23085"
},
{
"category": "external",
"summary": "SUSE Bug 1236250 for CVE-2025-23085",
"url": "https://bugzilla.suse.com/1236250"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.aarch64",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.s390x",
"SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:corepack20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:nodejs20-devel-20.18.2-150600.3.9.1.x86_64",
"openSUSE Leap 15.6:nodejs20-docs-20.18.2-150600.3.9.1.noarch",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.aarch64",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.ppc64le",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.s390x",
"openSUSE Leap 15.6:npm20-20.18.2-150600.3.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-24T19:33:36Z",
"details": "moderate"
}
],
"title": "CVE-2025-23085"
}
]
}
ghsa-wv7p-rjf3-9fr5
Vulnerability from github
Published
2025-01-22 03:30
Modified
2025-07-22 18:30
Severity ?
VLAI Severity ?
Details
With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage.
This vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23.
{
"affected": [],
"aliases": [
"CVE-2025-23083"
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-22T02:15:33Z",
"severity": "HIGH"
},
"details": "With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. \n\nThis vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23.",
"id": "GHSA-wv7p-rjf3-9fr5",
"modified": "2025-07-22T18:30:35Z",
"published": "2025-01-22T03:30:43Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23083"
},
{
"type": "WEB",
"url": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20250228-0008"
},
{
"type": "WEB",
"url": "https://www.vicarius.io/vsociety/posts/cve-2025-23083-detect-nodejs-vulnerability"
},
{
"type": "WEB",
"url": "https://www.vicarius.io/vsociety/posts/cve-2025-23083-mitigate-nodejs-vulnerability"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
}
]
}
ncsc-2025-0130
Vulnerability from csaf_ncscnl
Published
2025-04-16 15:04
Modified
2025-04-16 15:04
Summary
Kwetsbaarheden verholpen in Oracle Java
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten
Oracle heeft kwetsbaarheden verholpen in Oracle Java SE en GraalVM (Specifiek voor versies 17.0.14, 21.0.6, 21.0.6 en 24).
Interpretaties
De kwetsbaarheden in Oracle Java SE en GraalVM stellen ongeauthenticeerde kwaadwillenden met netwerktoegang in staat om kritieke gegevens te manipuleren of te benaderen. Dit kan leiden tot ongeautoriseerde toegang tot gegevens, vooral via API's en in omgevingen die onbetrouwbare code uitvoeren. De kwetsbaarheid in de GStreamer-bibliotheek kan ook leiden tot geheugenproblemen en mogelijk willekeurige code-executie door beschadigde pointers.
Oplossingen
Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans
medium
Schade
high
CWE-190
Integer Overflow or Wraparound
CWE-284
Improper Access Control
CWE-863
Incorrect Authorization
CWE-787
Out-of-bounds Write
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Oracle heeft kwetsbaarheden verholpen in Oracle Java SE en GraalVM (Specifiek voor versies 17.0.14, 21.0.6, 21.0.6 en 24).",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden in Oracle Java SE en GraalVM stellen ongeauthenticeerde kwaadwillenden met netwerktoegang in staat om kritieke gegevens te manipuleren of te benaderen. Dit kan leiden tot ongeautoriseerde toegang tot gegevens, vooral via API\u0027s en in omgevingen die onbetrouwbare code uitvoeren. De kwetsbaarheid in de GStreamer-bibliotheek kan ook leiden tot geheugenproblemen en mogelijk willekeurige code-executie door beschadigde pointers.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd; oracle",
"url": "https://www.oracle.com/security-alerts/cpuapr2025.html"
}
],
"title": "Kwetsbaarheden verholpen in Oracle Java",
"tracking": {
"current_release_date": "2025-04-16T15:04:40.041941Z",
"generator": {
"date": "2025-02-25T15:15:00Z",
"engine": {
"name": "V.A.",
"version": "1.0"
}
},
"id": "NCSC-2025-0130",
"initial_release_date": "2025-04-16T15:04:40.041941Z",
"revision_history": [
{
"date": "2025-04-16T15:04:40.041941Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/17.0.14",
"product": {
"name": "vers:oracle/17.0.14",
"product_id": "CSAFPID-2699120",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.14:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/21.0.6",
"product": {
"name": "vers:oracle/21.0.6",
"product_id": "CSAFPID-2699118",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.6:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/24",
"product": {
"name": "vers:oracle/24",
"product_id": "CSAFPID-2699115",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:24:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle GraalVM for JDK"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/11.0.26",
"product": {
"name": "vers:oracle/11.0.26",
"product_id": "CSAFPID-2699119",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:java_se:11.0.26:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/17.0.14",
"product": {
"name": "vers:oracle/17.0.14",
"product_id": "CSAFPID-2699114",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:java_se:17.0.14:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/21.0.6",
"product": {
"name": "vers:oracle/21.0.6",
"product_id": "CSAFPID-2699116",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:java_se:21.0.6:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/24",
"product": {
"name": "vers:oracle/24",
"product_id": "CSAFPID-2699117",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:java_se:24:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/8u441",
"product": {
"name": "vers:oracle/8u441",
"product_id": "CSAFPID-2698987",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:java_se:8u441:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/8u441-perf",
"product": {
"name": "vers:oracle/8u441-perf",
"product_id": "CSAFPID-2699040",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:java_se:8u441:*:*:*:enterprise_performance:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle Java SE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/20.3.17",
"product": {
"name": "vers:oracle/20.3.17",
"product_id": "CSAFPID-2698988",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graalvm:20.3.17:*:*:*:enterprise:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/21.3.13",
"product": {
"name": "vers:oracle/21.3.13",
"product_id": "CSAFPID-2698986",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graalvm:21.3.13:*:*:*:enterprise:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle GraalVM Enterprise Edition"
}
],
"category": "product_family",
"name": "Oracle Java SE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/11.0.26",
"product": {
"name": "vers:unknown/11.0.26",
"product_id": "CSAFPID-2726951",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:11.0.26"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/17.0.14",
"product": {
"name": "vers:unknown/17.0.14",
"product_id": "CSAFPID-2726953",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:17.0.14"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/21.0.6",
"product": {
"name": "vers:unknown/21.0.6",
"product_id": "CSAFPID-2726950",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:21.0.6"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/24",
"product": {
"name": "vers:unknown/24",
"product_id": "CSAFPID-2726955",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:24"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/8u441",
"product": {
"name": "vers:unknown/8u441",
"product_id": "CSAFPID-2726960",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:8u441"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/8u441-perf",
"product": {
"name": "vers:unknown/8u441-perf",
"product_id": "CSAFPID-2726952",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:8u441-perf"
}
}
}
],
"category": "product_name",
"name": "Java Se"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/8u441",
"product": {
"name": "vers:unknown/8u441",
"product_id": "CSAFPID-2698325"
}
}
],
"category": "product_name",
"name": "Java Se"
}
],
"category": "product_family",
"name": "Oracle"
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/17.0.14",
"product": {
"name": "vers:unknown/17.0.14",
"product_id": "CSAFPID-2698478"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/21.0.6",
"product": {
"name": "vers:unknown/21.0.6",
"product_id": "CSAFPID-2698479"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/24",
"product": {
"name": "vers:unknown/24",
"product_id": "CSAFPID-2698480"
}
}
],
"category": "product_name",
"name": "Oracle GraalVM for JDK"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/11.0.26",
"product": {
"name": "vers:unknown/11.0.26",
"product_id": "CSAFPID-2698474"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/17.0.14",
"product": {
"name": "vers:unknown/17.0.14",
"product_id": "CSAFPID-2698475"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/21.0.6",
"product": {
"name": "vers:unknown/21.0.6",
"product_id": "CSAFPID-2698476"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/24",
"product": {
"name": "vers:unknown/24",
"product_id": "CSAFPID-2698477"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/8u441",
"product": {
"name": "vers:unknown/8u441",
"product_id": "CSAFPID-2698472"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/8u441-perf",
"product": {
"name": "vers:unknown/8u441-perf",
"product_id": "CSAFPID-2698473"
}
}
],
"category": "product_name",
"name": "Oracle Java SE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/20.3.17",
"product": {
"name": "vers:unknown/20.3.17",
"product_id": "CSAFPID-2698481"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/21.3.13",
"product": {
"name": "vers:unknown/21.3.13",
"product_id": "CSAFPID-2698482"
}
}
],
"category": "product_name",
"name": "Oracle GraalVM Enterprise Edition"
}
],
"category": "vendor",
"name": "Oracle Corporation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-47606",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-47606",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47606.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
}
],
"title": "CVE-2024-47606"
},
{
"cve": "CVE-2024-54534",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54534",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54534.json"
}
],
"title": "CVE-2024-54534"
},
{
"cve": "CVE-2025-21587",
"product_status": {
"known_affected": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-21587",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21587.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
}
],
"title": "CVE-2025-21587"
},
{
"cve": "CVE-2025-23083",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-23083",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23083.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
}
],
"title": "CVE-2025-23083"
},
{
"cve": "CVE-2025-30691",
"product_status": {
"known_affected": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30691",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30691.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
}
],
"title": "CVE-2025-30691"
},
{
"cve": "CVE-2025-30698",
"product_status": {
"known_affected": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30698",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30698.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
}
],
"title": "CVE-2025-30698"
}
]
}
fkie_cve-2025-23083
Vulnerability from fkie_nvd
Published
2025-01-22 02:15
Modified
2025-07-22 16:15
Severity ?
Summary
With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage.
This vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23.
References
| URL | Tags | ||
|---|---|---|---|
| support@hackerone.com | https://nodejs.org/en/blog/vulnerability/january-2025-security-releases | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://security.netapp.com/advisory/ntap-20250228-0008/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://www.vicarius.io/vsociety/posts/cve-2025-23083-detect-nodejs-vulnerability | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://www.vicarius.io/vsociety/posts/cve-2025-23083-mitigate-nodejs-vulnerability |
Impacted products
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. \r\n\r\nThis vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23."
},
{
"lang": "es",
"value": "Con la ayuda de la utilidad diagnostics_channel, se puede conectar un evento cada vez que se crea un subproceso de trabajo. Esto no se limita solo a los trabajadores, sino que tambi\u00e9n expone a los trabajadores internos, donde se puede obtener una instancia de ellos y se puede obtener su constructor y restablecerlo para un uso malintencionado. Esta vulnerabilidad afecta a los usuarios del modelo de permisos (--permission) en Node.js v20, v22 y v23."
}
],
"id": "CVE-2025-23083",
"lastModified": "2025-07-22T16:15:26.760",
"metrics": {
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"exploitabilityScore": 2.5,
"impactScore": 5.2,
"source": "support@hackerone.com",
"type": "Secondary"
}
]
},
"published": "2025-01-22T02:15:33.930",
"references": [
{
"source": "support@hackerone.com",
"url": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.netapp.com/advisory/ntap-20250228-0008/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.vicarius.io/vsociety/posts/cve-2025-23083-detect-nodejs-vulnerability"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.vicarius.io/vsociety/posts/cve-2025-23083-mitigate-nodejs-vulnerability"
}
],
"sourceIdentifier": "support@hackerone.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-284"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
}
opensuse-su-2025:14706-1
Vulnerability from csaf_opensuse
Published
2025-01-28 00:00
Modified
2025-01-28 00:00
Summary
corepack22-22.13.0-1.1 on GA media
Notes
Title of the patch
corepack22-22.13.0-1.1 on GA media
Description of the patch
These are all security issues fixed in the corepack22-22.13.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2025-14706
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "corepack22-22.13.0-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the corepack22-22.13.0-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2025-14706",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_14706-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2025:14706-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WLMBUS6KTOM5ZRBZUFNAWPANSHPLYG3W/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2025:14706-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WLMBUS6KTOM5ZRBZUFNAWPANSHPLYG3W/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-22150 page",
"url": "https://www.suse.com/security/cve/CVE-2025-22150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-23083 page",
"url": "https://www.suse.com/security/cve/CVE-2025-23083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-23085 page",
"url": "https://www.suse.com/security/cve/CVE-2025-23085/"
}
],
"title": "corepack22-22.13.0-1.1 on GA media",
"tracking": {
"current_release_date": "2025-01-28T00:00:00Z",
"generator": {
"date": "2025-01-28T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2025:14706-1",
"initial_release_date": "2025-01-28T00:00:00Z",
"revision_history": [
{
"date": "2025-01-28T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.13.0-1.1.aarch64",
"product": {
"name": "corepack22-22.13.0-1.1.aarch64",
"product_id": "corepack22-22.13.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "nodejs22-22.13.0-1.1.aarch64",
"product": {
"name": "nodejs22-22.13.0-1.1.aarch64",
"product_id": "nodejs22-22.13.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.13.0-1.1.aarch64",
"product": {
"name": "nodejs22-devel-22.13.0-1.1.aarch64",
"product_id": "nodejs22-devel-22.13.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "nodejs22-docs-22.13.0-1.1.aarch64",
"product": {
"name": "nodejs22-docs-22.13.0-1.1.aarch64",
"product_id": "nodejs22-docs-22.13.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "npm22-22.13.0-1.1.aarch64",
"product": {
"name": "npm22-22.13.0-1.1.aarch64",
"product_id": "npm22-22.13.0-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.13.0-1.1.ppc64le",
"product": {
"name": "corepack22-22.13.0-1.1.ppc64le",
"product_id": "corepack22-22.13.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nodejs22-22.13.0-1.1.ppc64le",
"product": {
"name": "nodejs22-22.13.0-1.1.ppc64le",
"product_id": "nodejs22-22.13.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.13.0-1.1.ppc64le",
"product": {
"name": "nodejs22-devel-22.13.0-1.1.ppc64le",
"product_id": "nodejs22-devel-22.13.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nodejs22-docs-22.13.0-1.1.ppc64le",
"product": {
"name": "nodejs22-docs-22.13.0-1.1.ppc64le",
"product_id": "nodejs22-docs-22.13.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "npm22-22.13.0-1.1.ppc64le",
"product": {
"name": "npm22-22.13.0-1.1.ppc64le",
"product_id": "npm22-22.13.0-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.13.0-1.1.s390x",
"product": {
"name": "corepack22-22.13.0-1.1.s390x",
"product_id": "corepack22-22.13.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "nodejs22-22.13.0-1.1.s390x",
"product": {
"name": "nodejs22-22.13.0-1.1.s390x",
"product_id": "nodejs22-22.13.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.13.0-1.1.s390x",
"product": {
"name": "nodejs22-devel-22.13.0-1.1.s390x",
"product_id": "nodejs22-devel-22.13.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "nodejs22-docs-22.13.0-1.1.s390x",
"product": {
"name": "nodejs22-docs-22.13.0-1.1.s390x",
"product_id": "nodejs22-docs-22.13.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "npm22-22.13.0-1.1.s390x",
"product": {
"name": "npm22-22.13.0-1.1.s390x",
"product_id": "npm22-22.13.0-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.13.0-1.1.x86_64",
"product": {
"name": "corepack22-22.13.0-1.1.x86_64",
"product_id": "corepack22-22.13.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "nodejs22-22.13.0-1.1.x86_64",
"product": {
"name": "nodejs22-22.13.0-1.1.x86_64",
"product_id": "nodejs22-22.13.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.13.0-1.1.x86_64",
"product": {
"name": "nodejs22-devel-22.13.0-1.1.x86_64",
"product_id": "nodejs22-devel-22.13.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "nodejs22-docs-22.13.0-1.1.x86_64",
"product": {
"name": "nodejs22-docs-22.13.0-1.1.x86_64",
"product_id": "nodejs22-docs-22.13.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "npm22-22.13.0-1.1.x86_64",
"product": {
"name": "npm22-22.13.0-1.1.x86_64",
"product_id": "npm22-22.13.0-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.13.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:corepack22-22.13.0-1.1.aarch64"
},
"product_reference": "corepack22-22.13.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.13.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:corepack22-22.13.0-1.1.ppc64le"
},
"product_reference": "corepack22-22.13.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.13.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:corepack22-22.13.0-1.1.s390x"
},
"product_reference": "corepack22-22.13.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.13.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:corepack22-22.13.0-1.1.x86_64"
},
"product_reference": "corepack22-22.13.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.13.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nodejs22-22.13.0-1.1.aarch64"
},
"product_reference": "nodejs22-22.13.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.13.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nodejs22-22.13.0-1.1.ppc64le"
},
"product_reference": "nodejs22-22.13.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.13.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nodejs22-22.13.0-1.1.s390x"
},
"product_reference": "nodejs22-22.13.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.13.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nodejs22-22.13.0-1.1.x86_64"
},
"product_reference": "nodejs22-22.13.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.13.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.aarch64"
},
"product_reference": "nodejs22-devel-22.13.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.13.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.ppc64le"
},
"product_reference": "nodejs22-devel-22.13.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.13.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.s390x"
},
"product_reference": "nodejs22-devel-22.13.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.13.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.x86_64"
},
"product_reference": "nodejs22-devel-22.13.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-docs-22.13.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.aarch64"
},
"product_reference": "nodejs22-docs-22.13.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-docs-22.13.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.ppc64le"
},
"product_reference": "nodejs22-docs-22.13.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-docs-22.13.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.s390x"
},
"product_reference": "nodejs22-docs-22.13.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-docs-22.13.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.x86_64"
},
"product_reference": "nodejs22-docs-22.13.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.13.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:npm22-22.13.0-1.1.aarch64"
},
"product_reference": "npm22-22.13.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.13.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:npm22-22.13.0-1.1.ppc64le"
},
"product_reference": "npm22-22.13.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.13.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:npm22-22.13.0-1.1.s390x"
},
"product_reference": "npm22-22.13.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.13.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:npm22-22.13.0-1.1.x86_64"
},
"product_reference": "npm22-22.13.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-22150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-22150"
}
],
"notes": [
{
"category": "general",
"text": "Undici is an HTTP/1.1 client. Starting in version 4.5.0 and prior to versions 5.28.5, 6.21.1, and 7.2.3, undici uses `Math.random()` to choose the boundary for a multipart/form-data request. It is known that the output of `Math.random()` can be predicted if several of its generated values are known. If there is a mechanism in an app that sends multipart requests to an attacker-controlled website, they can use this to leak the necessary values. Therefore, an attacker can tamper with the requests going to the backend APIs if certain conditions are met. This is fixed in versions 5.28.5, 6.21.1, and 7.2.3. As a workaround, do not issue multipart requests to attacker controlled servers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-22150",
"url": "https://www.suse.com/security/cve/CVE-2025-22150"
},
{
"category": "external",
"summary": "SUSE Bug 1236257 for CVE-2025-22150",
"url": "https://bugzilla.suse.com/1236257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-22150"
},
{
"cve": "CVE-2025-23083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-23083"
}
],
"notes": [
{
"category": "general",
"text": "With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. \r\n\r\nThis vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-23083",
"url": "https://www.suse.com/security/cve/CVE-2025-23083"
},
{
"category": "external",
"summary": "SUSE Bug 1236251 for CVE-2025-23083",
"url": "https://bugzilla.suse.com/1236251"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-23083"
},
{
"cve": "CVE-2025-23085",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-23085"
}
],
"notes": [
{
"category": "general",
"text": "A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions.\r\n\r\nThis vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-23085",
"url": "https://www.suse.com/security/cve/CVE-2025-23085"
},
{
"category": "external",
"summary": "SUSE Bug 1236250 for CVE-2025-23085",
"url": "https://bugzilla.suse.com/1236250"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:corepack22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-devel-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:nodejs22-docs-22.13.0-1.1.x86_64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.aarch64",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.ppc64le",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.s390x",
"openSUSE Tumbleweed:npm22-22.13.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-23085"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…