Known vulnerabilities in nodejs-packaging - page 4

Vendor: OpenAnolis

Software: nodejs-packaging

Software CPE: cpe:2.3:o:openanolis:nodejs-packaging:*:*:*:*:*:anolis_os:*:*

Website: https://openanolis.cn/

Total vulnerabilities: 96

Public exploits: 4

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Vulnerabilities (96)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU72399 - Resource Management Errors CVE-2023-23919	CWE-399	Medium	No	No	25-1.0.1	20.02.2023	SB2023022020 SB2023030129 SB2023030337 and 33 more
#VU72398 - Permissions, Privileges, and Access Controls CVE-2023-23918	CWE-264	Medium	No	No	23-3, 25-1.0.1	20.02.2023	SB2023022020 SB2023030129 SB2023030337 and 48 more
#VU72247 - Improper input validation CVE-2022-38900	CWE-20	Medium	No	No	23-3	15.02.2023	SB2023021531 SB2023022714 SB2023032315 and 35 more
#VU69942 - Incorrect Regular Expression CVE-2022-3517	CWE-185	Medium	No	No	23-3	06.12.2022	SB2022120638 SB2022120639 SB2022120640 and 50 more
#VU69675 - Improper Control of Generation of Code ('Code Injection') CVE-2022-24999	CWE-94	Medium	Available	No	23-3	29.11.2022	SB2022112910 SB2022112911 SB2022112943 and 50 more
#VU69354 - Reliance on Reverse DNS Resolution for a Security-Critical Action CVE-2022-43548	CWE-350	Medium	No	No	23-3	15.11.2022	SB2022111599 SB20221115101 SB20221115102 and 47 more
#VU67850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-35256	CWE-444	Medium	No	No	25-1, 2021.06-4	03.10.2022	SB2022100347 SB2022100401 SB2022100402 and 50 more
#VU67849 - Use of Insufficiently Random Values CVE-2022-35255	CWE-330	Medium	No	No	25-1, 2021.06-4	03.10.2022	SB2022100401 SB2022100402 SB2022100528 and 40 more
#VU66955 - Improper Control of Generation of Code ('Code Injection') CVE-2020-7788	CWE-94	Medium	No	No	23-3, 25-1	05.09.2022	SB2020121120 SB2022090501 SB2022091209 and 21 more
#VU66400 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2022-33987	CWE-601	Medium	No	No	23-3, 25-1	11.08.2022	SB2022081124 SB2022081525 SB2022090835 and 22 more
#VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-32215	CWE-444	Medium	No	No	23-3, 25-1	13.07.2022	SB2022071338 SB2022071610 SB2022071611 and 54 more
#VU65278 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-32214	CWE-444	Medium	No	No	23-3, 25-1	13.07.2022	SB2022071338 SB2022071610 SB2022071611 and 36 more
#VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-32213	CWE-444	Medium	No	No	23-3, 25-1	13.07.2022	SB2022071338 SB2022071610 SB2022071611 and 55 more
#VU65273 - Improper Check or Handling of Exceptional Conditions CVE-2022-32212	CWE-703	Medium	No	No	23-3, 25-1	13.07.2022	SB2022071338 SB2022071610 SB2022071611 and 48 more
#VU64030 - Resource exhaustion CVE-2021-44906	CWE-400	High	No	No	23-3	07.06.2022	SB2022060836 SB2022062103 SB2022062203 and 53 more
#VU61471 - Exposure of sensitive information to an unauthorized actor CVE-2022-0235	CWE-200	Low	No	No	23-3	20.03.2022	SB2022032001 SB2022032002 SB2022032009 and 35 more
#VU59234 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-22960	CWE-444	Medium	No	No	23-3, 25-1	05.01.2022	SB2022010523 SB2022010524 SB2022042806 and 40 more
#VU59233 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-22959	CWE-444	Medium	No	No	23-3, 25-1	05.01.2022	SB2022010523 SB2022010524 SB2022011841 and 43 more
#VU55102 - Resource exhaustion CVE-2021-35065	CWE-400	Medium	No	No	23-3, 25-1.0.1	21.07.2021	SB2021072101 SB2023020668 SB2023020971 and 24 more
#VU52985 - Incorrect Regular Expression CVE-2020-28469	CWE-185	Medium	No	No	23-3, 25-1	10.05.2021	SB2021051002 SB2021051004 SB2021072625 and 26 more

Showing elements 61 - 80 out of 96

Known vulnerabilities in nodejs-packaging - page 4

Breakdown by Severity Chart

Vulnerabilities (96)

Please verify you're human