Known vulnerabilities in npm - page 5
Vendor:
OpenAnolis
Software:
npm
Software CPE:
cpe:2.3:o:openanolis:npm:*:*:*:*:*:anolis_os:*:*
Website:
https://openanolis.cn/
Total vulnerabilities:
96
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
10.8.2-1.20.20.2.1
10.8.2-1.20.20.0.1
10.8.2-1.20.19.2.1
10.8.2-1.20.19.1.1
10.8.1-1.20.16.0.1
8.19.3-1.16.19.1.2.0.2
9.5.0-1.18.14.2.3
6.14.17-1.14.21.1.2.0.1
6.14.15-1.14.18.2.2
6.14.14-1.14.17.5.1
6.14.14-1.12.22.5.1
10.8.2-1.18.20.6.1
10.8.2-1.20.18.2.1
10.7.0-1.18.20.4.1
10.5.0-1.18.20.2.1.0.1
8.19.4-1.16.20.2.4.0.1
10.2.4-1.18.19.1.1.0.1
8.19.4-1.16.20.2.3.0.2
9.8.1-1.18.18.2.1.0.1
9.6.7-1.18.17.1.1.0.2
8.19.4-1.16.20.2.2.0.2
9.5.1-1.18.16.1.1
8.19.4-1.16.20.1.1.0.1
8.19.3-1.16.19.1.1.0.2
6.14.18-1.14.21.3.1.0.1
8.19.1-1.18.9.1.1
8.15.0-1.16.17.1.1
8.11.0-1.16.16.0.3
6.14.17-1.14.20.0.2
6.14.16-1.12.22.12.1
8.1.2-1.16.13.1.3
6.14.13-1.12.22.3.2
6.14.13-1.14.17.3.2
Vulnerabilities (96)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU64034 - Improper Control of Generation of Code ('Code Injection') CVE-2021-3918 |
CWE-94 | High | 6.14.15-1.14.18.2.2, 8.1.2-1.16.13.1.3 | 07.06.2022 |
SB2021111302 SB2022060836 SB2022071504 and 45 more |
||
| #VU63698 - Incorrect Regular Expression CVE-2021-33502 |
CWE-185 | Medium | 6.14.15-1.14.18.2.2, 8.1.2-1.16.13.1.3 | 26.05.2022 |
SB2021052416 SB2022052615 SB2022060618 and 17 more |
||
| #VU61255 - Incorrect Regular Expression CVE-2021-23362 |
CWE-185 | Medium | 6.14.13-1.12.22.3.2, 6.14.13-1.14.17.3.2, 6.14.14-1.12.22.5.1 | 11.03.2022 |
SB2021032315 SB2022031104 SB2022060315 and 28 more |
||
| #VU61254 - Use After Free CVE-2021-22940 |
CWE-416 | Medium | 6.14.14-1.12.22.5.1, 6.14.14-1.14.17.5.1 | 11.03.2022 |
SB2021081615 SB2022031104 SB2022060618 and 23 more |
||
| #VU61253 - Improper Certificate Validation CVE-2021-22939 |
CWE-295 | Medium | 6.14.14-1.12.22.5.1, 6.14.14-1.14.17.5.1 | 11.03.2022 |
SB2021081614 SB2022031104 SB2022060618 and 25 more |
||
| #VU58206 - Absolute Path Traversal CVE-2021-32803 |
CWE-36 | Medium | 6.14.14-1.12.22.5.1, 6.14.14-1.14.17.5.1 | 17.11.2021 |
SB2021080329 SB2022031104 SB2022060618 and 26 more |
||
| #VU58205 - Absolute Path Traversal CVE-2021-32804 |
CWE-36 | Medium | 6.14.14-1.12.22.5.1, 6.14.14-1.14.17.5.1 | 17.11.2021 |
SB2021080328 SB2022031104 SB2022060618 and 27 more |
||
| #VU58203 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-37712 |
CWE-22 | Medium | 6.14.15-1.14.18.2.2 | 17.11.2021 |
SB2021111707 SB2021111710 SB2022031104 and 24 more |
||
| #VU58202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-37701 |
CWE-22 | Medium | 6.14.15-1.14.18.2.2 | 17.11.2021 |
SB2021111706 SB2021111710 SB2022031104 and 24 more |
||
| #VU57967 - Improper input validation CVE-2021-3807 |
CWE-20 | Medium | 6.14.15-1.14.18.2.2, 8.1.2-1.16.13.1.3, 8.11.0-1.16.16.0.3 | 05.11.2021 |
SB2021110513 SB2021112603 SB2022042257 and 51 more |
||
| #VU57498 - Improper input validation CVE-2021-22931 |
CWE-20 | High | 6.14.14-1.12.22.5.1, 6.14.14-1.14.17.5.1 | 19.10.2021 |
SB2021101945 SB2022020113 SB2022031104 and 28 more |
||
| #VU56967 - Improper input validation CVE-2021-3672 |
CWE-20 | Medium | 6.14.14-1.12.22.5.1, 6.14.14-1.14.17.5.1 | 30.09.2021 |
SB2021093017 SB2021110508 SB2022031104 and 39 more |
||
| #VU55560 - Use After Free CVE-2021-22930 |
CWE-416 | High | 6.14.14-1.12.22.5.1, 6.14.14-1.14.17.5.1 | 03.08.2021 |
SB2021080320 SB2021080324 SB2021080325 and 35 more |
||
| #VU55315 - Incorrect Regular Expression CVE-2021-23343 |
CWE-185 | Medium | 6.14.14-1.12.22.5.1, 6.14.14-1.14.17.5.1 | 26.07.2021 |
SB2021072624 SB2021072625 SB2022060618 and 24 more |
||
| #VU54624 - Out-of-bounds read CVE-2021-22918 |
CWE-125 | Medium | 6.14.13-1.12.22.3.2, 6.14.13-1.14.17.3.2, 6.14.14-1.12.22.5.1 | 08.07.2021 |
SB2021070819 SB2021072009 SB2021081123 and 40 more |
||
| #VU52194 - Incorrect Regular Expression CVE-2021-27290 |
CWE-185 | Medium | 6.14.13-1.12.22.3.2, 6.14.13-1.14.17.3.2, 6.14.14-1.12.22.5.1 | 12.03.2021 |
SB2021041364 SB2021070819 SB2021101939 and 32 more |
Showing elements 81 - 100 out of 96