Known vulnerabilities in nodejs - page 6
Vendor:
OpenAnolis
Software:
nodejs
Software CPE:
cpe:2.3:o:openanolis:nodejs:*:*:*:*:*:anolis_os:*:*
Website:
https://openanolis.cn/
Total vulnerabilities:
116
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
22.23.2-1
22.23.0-1
22.22.0-5
20.20.2-1
22.22.0-4
22.22.0-3
22.22.0-2
22.22.0-1
22.16.0-5
20.20.0-1
22.16.0-4
22.16.0-1
20.19.2-1
20.19.1-1
20.16.0-1
16.19.1-2.0.2
18.14.2-3
14.21.1-2.0.1
14.18.2-2
14.17.5-1
12.22.5-1
18.20.6-1
20.18.2-1
18.20.4-1
18.20.2-1.0.1
16.20.2-4.0.1
18.19.1-1.0.1
16.20.2-3.0.2
18.18.2-1.0.1
18.17.1-1.0.2
16.20.2-2.0.2
18.16.1-1
16.20.1-1.0.1
16.19.1-1.0.2
14.21.3-1.0.1
18.9.1-1
16.17.1-1
16.16.0-3
14.20.0-2
12.22.12-1
16.13.1-3
12.22.3-2
14.17.3-2
Vulnerabilities (116)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU64034 - Improper Control of Generation of Code ('Code Injection') CVE-2021-3918 |
CWE-94 | High | 14.18.2-2, 16.13.1-3 | 07.06.2022 |
SB2021111302 SB2022060836 SB2022071504 and 45 more |
||
| #VU63698 - Incorrect Regular Expression CVE-2021-33502 |
CWE-185 | Medium | 14.18.2-2, 16.13.1-3 | 26.05.2022 |
SB2021052416 SB2022052615 SB2022060618 and 17 more |
||
| #VU61255 - Incorrect Regular Expression CVE-2021-23362 |
CWE-185 | Medium | 12.22.3-2, 12.22.5-1, 14.17.3-2 | 11.03.2022 |
SB2021032315 SB2022031104 SB2022060315 and 28 more |
||
| #VU61254 - Use After Free CVE-2021-22940 |
CWE-416 | Medium | 12.22.5-1, 14.17.5-1 | 11.03.2022 |
SB2021081615 SB2022031104 SB2022060618 and 23 more |
||
| #VU61253 - Improper Certificate Validation CVE-2021-22939 |
CWE-295 | Medium | 12.22.5-1, 14.17.5-1 | 11.03.2022 |
SB2021081614 SB2022031104 SB2022060618 and 25 more |
||
| #VU58206 - Absolute Path Traversal CVE-2021-32803 |
CWE-36 | Medium | 12.22.5-1, 14.17.5-1 | 17.11.2021 |
SB2021080329 SB2022031104 SB2022060618 and 26 more |
||
| #VU58205 - Absolute Path Traversal CVE-2021-32804 |
CWE-36 | Medium | 12.22.5-1, 14.17.5-1 | 17.11.2021 |
SB2021080328 SB2022031104 SB2022060618 and 27 more |
||
| #VU58203 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-37712 |
CWE-22 | Medium | 14.18.2-2 | 17.11.2021 |
SB2021111707 SB2021111710 SB2022031104 and 24 more |
||
| #VU58202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-37701 |
CWE-22 | Medium | 14.18.2-2 | 17.11.2021 |
SB2021111706 SB2021111710 SB2022031104 and 24 more |
||
| #VU57967 - Improper input validation CVE-2021-3807 |
CWE-20 | Medium | 14.18.2-2, 16.13.1-3, 16.16.0-3 | 05.11.2021 |
SB2021110513 SB2021112603 SB2022042257 and 51 more |
||
| #VU57498 - Improper input validation CVE-2021-22931 |
CWE-20 | High | 12.22.5-1, 14.17.5-1 | 19.10.2021 |
SB2021101945 SB2022020113 SB2022031104 and 28 more |
||
| #VU56967 - Improper input validation CVE-2021-3672 |
CWE-20 | Medium | 12.22.5-1, 14.17.5-1 | 30.09.2021 |
SB2021093017 SB2021110508 SB2022031104 and 39 more |
||
| #VU55560 - Use After Free CVE-2021-22930 |
CWE-416 | High | 12.22.5-1, 14.17.5-1 | 03.08.2021 |
SB2021080320 SB2021080324 SB2021080325 and 35 more |
||
| #VU55315 - Incorrect Regular Expression CVE-2021-23343 |
CWE-185 | Medium | 12.22.5-1, 14.17.5-1 | 26.07.2021 |
SB2021072624 SB2021072625 SB2022060618 and 24 more |
||
| #VU54624 - Out-of-bounds read CVE-2021-22918 |
CWE-125 | Medium | 12.22.3-2, 12.22.5-1, 14.17.3-2 | 08.07.2021 |
SB2021070819 SB2021072009 SB2021081123 and 40 more |
||
| #VU52194 - Incorrect Regular Expression CVE-2021-27290 |
CWE-185 | Medium | 12.22.3-2, 12.22.5-1, 14.17.3-2 | 12.03.2021 |
SB2021041364 SB2021070819 SB2021101939 and 32 more |
Showing elements 101 - 120 out of 116