Resource exhaustion in minimist - CVE-2021-44906

Vulnerability identifier: #VU64030

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-44906

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to application does not properly control consumption of internal resources. A remote attacker can trick the library into adding or modifying the properties of Object.prototype, using a constructor or __proto__ payload, resulting in prototype pollution and loss of confidentiality, availability, and integrity.

minimist
Oracle Linux
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Manager Proxy
SUSE Linux Enterprise Module for SUSE Manager Server
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
SUSE Linux Enterprise Module for Web Scripting
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server for SAP
openSUSE Leap
openEuler
eap7-jboss-jsf (Red Hat package)
eap7-wildfly-http-client (Red Hat package)
eap7-jberet (Red Hat package)
eap7-ironjacamar (Red Hat package)
eap7-jboss-server-migration (Red Hat package)
eap7-wildfly-elytron (Red Hat package)
eap7-netty-tcnative (Red Hat package)
eap7-wildfly-openssl (Red Hat package)
eap7-undertow (Red Hat package)
eap7-jackson-databind (Red Hat package)
eap7-hal-console (Red Hat package)
eap7-netty-transport-native-epoll (Red Hat package)
eap7-netty (Red Hat package)
eap7-jboss-remoting (Red Hat package)
eap7-hibernate (Red Hat package)
eap7-wildfly (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
rh-nodejs12-nodejs (Red Hat package)
rh-nodejs14-nodejs (Red Hat package)
eap7-wildfly-openssl-el7 (Red Hat package)
eap7-wildfly-openssl-el8 (Red Hat package)
inter-server-sync
inter-server-sync-debuginfo
prometheus-formula
salt-netapi-client
virtual-host-gatherer-Nutanix
virtual-host-gatherer-Kubernetes
virtual-host-gatherer
virtual-host-gatherer-VMware
virtual-host-gatherer-libcloud
supportutils-plugin-salt
nodejs-minimist
eap7-jettison (Red Hat package)
smdba
eap7 (Red Hat package)
eap7-snakeyaml (Red Hat package)
nodejs-nodemon
rh-nodejs14-nodejs-nodemon (Red Hat package)
nodejs-nodemon (Red Hat package)
eap7-glassfish-jsf (Red Hat package)
eap7-jandex (Red Hat package)
eap7-picketlink-federation (Red Hat package)
eap7-picketlink-bindings (Red Hat package)
eap7-gson (Red Hat package)
eap7-jackson-annotations (Red Hat package)
eap7-jackson-core (Red Hat package)
eap7-jackson-jaxrs-providers (Red Hat package)
eap7-jackson-modules-java8 (Red Hat package)
eap7-jackson-modules-base (Red Hat package)
eap7-apache-cxf (Red Hat package)
eap7-javapackages-tools (Red Hat package)
eap7-resteasy (Red Hat package)
release-notes-susemanager-proxy
release-notes-susemanager
susemanager-sync-data
spacewalk-utils-extras
spacewalk-utils
python3-spacewalk-certs-tools
spacewalk-certs-tools
spacecmd
susemanager-schema
spacewalk-backend-tools
spacewalk-backend-config-files-tool
spacewalk-backend-sql-postgresql
spacewalk-backend-sql
spacewalk-backend-server
spacewalk-backend-package-push-server
spacewalk-backend-iss-export
spacewalk-backend-iss
spacewalk-backend
spacewalk-backend-app
spacewalk-backend-applet
spacewalk-backend-config-files
spacewalk-backend-config-files-common
spacewalk-backend-xml-export-libs
spacewalk-backend-xmlrpc
uyuni-config-modules
susemanager-sls
spacewalk-html
spacewalk-base-minimal-config
spacewalk-base-minimal
spacewalk-base
susemanager
susemanager-tools
spacewalk-taskomatic
spacewalk-java-postgresql
spacewalk-java-lib
spacewalk-java-config
spacewalk-java
susemanager-docs_en
susemanager-docs_en-pdf
susemanager-doc-indexes
eap7-picketbox (Red Hat package)
npm
nodejs8-debuginfo
nodejs8
nodejs8-debugsource
nodejs8-devel
npm8
nodejs8-docs
nodejs12-devel
npm12
nodejs12-docs
nodejs12-debuginfo
nodejs12
nodejs12-debugsource
nodejs14-debugsource
nodejs14
nodejs14-debuginfo
nodejs14-devel
npm14
nodejs14-docs
corepack14
nodejs-docs
nodejs-full-i18n
nodejs-devel
nodejs
nodejs (Red Hat package)
rh-sso7-keycloak (Red Hat package)
nodejs-packaging
QRadar Pulse App
Red Hat Software Collections
IBM App Connect Enterprise
Cloud Pak for Security (CP4S)
IBM QRadar Data Synchronization App
IBM Watson Machine Learning Accelerator
Storage Fusion Data Foundation
DataStage on Cloud Pak for Data
IBM Business Automation Manager Open Editions
Cognos Analytics Mobile (iOS)
Cognos Analytics Mobile (Android)
IBM i Modernization Engine for Lifecycle Integration
IBM Planning Analytics Workspace
IBM Cloud Pak for Watson AIOps
Cognos Dashboards on Cloud Pak for Data
IBM Edge Application Manager
Red Hat OpenShift Container Platform
IBM Intelligent Operations Center
Confluence Data Center
IBM Integration Bus
IBM Cloud Pak for Business Automation
Netcool Operations Insight
Unified OSS Console Assurance Monitoring (UOCAM)
Red Hat Process Automation Manager (formerly JBoss BPM Suite)
JBoss Enterprise Application Platform
Fuse
Red Hat Single Sign-On
Splunk Enterprise
IBM Security QRadar Analyst Workflow
Voice Gateway
IBM Cognos Analytics

Install update from vendor's website.

minimist - update to 1.2.6
eap7-jboss-jsf (Red Hat package) - addressed in versions api_2.3_spec-3.0.0-5.SP06_redhat_00001.1.el7eap, api_2.3_spec-3.0.0-5.SP06_redhat_00001.1.el8eap
QRadar Pulse App - update to 2.2.9
eap7-wildfly-http-client (Red Hat package) - addressed in versions 1.1.12-1.SP1_redhat_00001.1.el7eap, 1.1.12-1.SP1_redhat_00001.1.el8eap
eap7-jberet (Red Hat package) - addressed in versions 1.3.9-2.SP2_redhat_00001.1.el7eap, 1.3.9-2.SP2_redhat_00001.1.el8eap
eap7-ironjacamar (Red Hat package) - addressed in versions 1.5.3-2.SP1_redhat_00001.1.el7eap, 1.5.3-2.SP1_redhat_00001.1.el8eap
Cloud Pak for Security (CP4S) - update to 1.10.15.0
eap7-jboss-server-migration (Red Hat package) - addressed in versions 1.10.0-18.Final_redhat_00017.1.el7eap, 1.10.0-18.Final_redhat_00017.1.el8eap
eap7-wildfly-elytron (Red Hat package) - addressed in versions 1.15.13-1.Final_redhat_00001.1.el7eap, 1.15.13-1.Final_redhat_00001.1.el8eap
eap7-netty-tcnative (Red Hat package) - addressed in versions 2.0.52-1.Final_redhat_00001.1.el7eap, 2.0.52-1.Final_redhat_00001.1.el8eap
eap7-wildfly-openssl (Red Hat package) - addressed in versions 2.2.3-1.Final_redhat_00001.1.el7eap, 2.2.3-1.Final_redhat_00001.1.el8eap
eap7-undertow (Red Hat package) - addressed in versions 2.2.18-2.SP2_redhat_00001.1.el7eap, 2.2.18-2.SP2_redhat_00001.1.el8eap
eap7-jackson-databind (Red Hat package) - addressed in versions 2.10.4-4.redhat_00004.1.el7eap, 2.12.6.1-2.redhat_00004.1.el7eap, 2.12.6.1-2.redhat_00004.1.el8eap
eap7-hal-console (Red Hat package) - addressed in versions 3.2.17-1.Final_redhat_00001.1.el7eap, 3.3.13-1.Final_redhat_00001.1.el7eap, 3.3.13-1.Final_redhat_00001.1.el8eap
eap7-netty-transport-native-epoll (Red Hat package) - addressed in versions 4.1.77-1.Final_redhat_00001.1.el7eap, 4.1.77-1.Final_redhat_00001.1.el8eap
eap7-netty (Red Hat package) - addressed in versions 4.1.63-4.Final_redhat_00002.1.el7eap, 4.1.77-1.Final_redhat_00001.1.el7eap, 4.1.77-1.Final_redhat_00001.1.el8eap
Storage Fusion Data Foundation - update to 4.18.3
eap7-jboss-remoting (Red Hat package) - addressed in versions 5.0.25-1.SP1_redhat_00001.1.el7eap, 5.0.25-1.SP1_redhat_00001.1.el8eap
IBM Intelligent Operations Center - update to 5.2.4
DataStage on Cloud Pak for Data - update to 5.2.1
eap7-hibernate (Red Hat package) - addressed in versions 5.3.27-1.Final_redhat_00001.1.el7eap, 5.3.27-1.Final_redhat_00001.1.el8eap
Red Hat Process Automation Manager (formerly JBoss BPM Suite) - update to 7.13.1
JBoss Enterprise Application Platform - addressed in versions 7.3.12, 7.4.6
eap7-wildfly (Red Hat package) - addressed in versions 7.3.12-3.GA_redhat_00002.1.el7eap, 7.4.6-5.GA_redhat_00002.1.el7eap, 7.4.6-5.GA_redhat_00002.1.el8eap
Red Hat Single Sign-On - update to 7.6.2
Fuse - update to 7.11.1
IBM Business Automation Manager Open Editions - update to 8.0.1
Confluence Data Center - update to 9.2.23
Splunk Enterprise - addressed in versions 9.2.8, 9.3.6, 9.4.4, 10.0.1
IBM App Connect Enterprise - addressed in versions 11.0.0.18, 12.0.4.0
rh-nodejs12-nodejs (Red Hat package) - update to 12.22.12-2.el7
rh-nodejs14-nodejs (Red Hat package) - addressed in versions 14.20.1-2.el7, 14.21.1-3.el7
eap7-wildfly-openssl-el7 (Red Hat package) - update to x86_64-2.2.2-1.Final_redhat_00002.1.el7eap
eap7-wildfly-openssl-el8 (Red Hat package) - update to x86_64-2.2.2-1.Final_redhat_00002.1.el8eap
inter-server-sync - update to 0.2.2-150300.8.17.1
inter-server-sync-debuginfo - update to 0.2.2-150300.8.17.1
prometheus-formula - update to 0.6.2-150300.3.14.1
salt-netapi-client - update to 0.19.0-150300.3.6.1
Voice Gateway - addressed in versions 1.0.8.2, 1.0.8.6
virtual-host-gatherer-Nutanix - update to 1.0.23-150300.3.3.1
virtual-host-gatherer-Kubernetes - update to 1.0.23-150300.3.3.1
virtual-host-gatherer - update to 1.0.23-150300.3.3.1
virtual-host-gatherer-VMware - update to 1.0.23-150300.3.3.1
virtual-host-gatherer-libcloud - update to 1.0.23-150300.3.3.1
Cognos Analytics Mobile (iOS) - update to 1.1.20
Cognos Analytics Mobile (Android) - update to 1.1.20
supportutils-plugin-salt - update to 1.2.0-150300.3.3.1
nodejs-minimist - update to 1.2.6-1
IBM i Modernization Engine for Lifecycle Integration - update to 1.4.7
eap7-jettison (Red Hat package) - update to 1.5.2-2.redhat_00002.1.el7eap
Netcool Operations Insight - update to 1.6.7
smdba - update to 1.7.10-0.150300.3.6.1
eap7 (Red Hat package) - update to 1-18.el9eap
eap7-snakeyaml (Red Hat package) - update to 1.33.0-1.SP1_redhat_00001.1.el7eap
nodejs-nodemon - update to 2.0.20-2
rh-nodejs14-nodejs-nodemon (Red Hat package) - update to 2.0.20-2.el7
nodejs-nodemon (Red Hat package) - update to 2.0.20-2.el9_1
IBM Planning Analytics Workspace - update to 2.0.93
eap7-glassfish-jsf (Red Hat package) - addressed in versions 2.3.14-4.SP05_redhat_00001.1.el7eap, 2.3.14-4.SP05_redhat_00001.1.el8eap
eap7-jandex (Red Hat package) - addressed in versions 2.4.2-1.Final_redhat_00001.1.el7eap, 2.4.2-1.Final_redhat_00001.1.el8eap
eap7-picketlink-federation (Red Hat package) - addressed in versions 2.5.5-21.SP12_redhat_00011.1.el7eap, 2.5.5-21.SP12_redhat_00011.1.el8eap
eap7-picketlink-bindings (Red Hat package) - addressed in versions 2.5.5-26.SP12_redhat_00014.1.el7eap, 2.5.5-26.SP12_redhat_00014.1.el8eap
eap7-gson (Red Hat package) - addressed in versions 2.8.9-1.redhat_00001.1.el7eap, 2.8.9-1.redhat_00001.1.el8eap
eap7-jackson-annotations (Red Hat package) - update to 2.10.4-2.redhat_00004.1.el7eap
eap7-jackson-core (Red Hat package) - update to 2.10.4-2.redhat_00004.1.el7eap
eap7-jackson-jaxrs-providers (Red Hat package) - update to 2.10.4-2.redhat_00004.1.el7eap
eap7-jackson-modules-java8 (Red Hat package) - update to 2.10.4-2.redhat_00004.1.el7eap
eap7-jackson-modules-base (Red Hat package) - update to 2.10.4-4.redhat_00004.1.el7eap
IBM Security QRadar Analyst Workflow - update to 2.31.4
IBM QRadar Data Synchronization App - update to 3.1.0
Unified OSS Console Assurance Monitoring (UOCAM) - update to 3.1.4
eap7-apache-cxf (Red Hat package) - addressed in versions 3.3.13-1.redhat_00001.1.el7eap, 3.3.13-1.redhat_00001.1.el8eap
eap7-javapackages-tools (Red Hat package) - update to 3.4.1-5.15.6.el9eap
IBM Cloud Pak for Watson AIOps - update to 3.6.1
eap7-resteasy (Red Hat package) - update to 3.11.6-1.Final_redhat_00001.1.el7eap
release-notes-susemanager-proxy - update to 4.2.7-150300.3.31.2
release-notes-susemanager - update to 4.2.7-150300.3.44.1
susemanager-sync-data - update to 4.2.12-150300.3.18.3
spacewalk-utils-extras - update to 4.2.16-150300.3.15.5
spacewalk-utils - update to 4.2.16-150300.3.15.5
python3-spacewalk-certs-tools - update to 4.2.16-150300.3.18.3
spacewalk-certs-tools - update to 4.2.16-150300.3.18.3
spacecmd - update to 4.2.17-150300.4.21.4
susemanager-schema - update to 4.2.22-150300.3.21.6
spacewalk-backend-tools - update to 4.2.22-150300.4.23.1
spacewalk-backend-config-files-tool - update to 4.2.22-150300.4.23.1
spacewalk-backend-sql-postgresql - update to 4.2.22-150300.4.23.1
spacewalk-backend-sql - update to 4.2.22-150300.4.23.1
spacewalk-backend-server - update to 4.2.22-150300.4.23.1
spacewalk-backend-package-push-server - update to 4.2.22-150300.4.23.1
spacewalk-backend-iss-export - update to 4.2.22-150300.4.23.1
spacewalk-backend-iss - update to 4.2.22-150300.4.23.1
spacewalk-backend - update to 4.2.22-150300.4.23.1
spacewalk-backend-app - update to 4.2.22-150300.4.23.1
spacewalk-backend-applet - update to 4.2.22-150300.4.23.1
spacewalk-backend-config-files - update to 4.2.22-150300.4.23.1
spacewalk-backend-config-files-common - update to 4.2.22-150300.4.23.1
spacewalk-backend-xml-export-libs - update to 4.2.22-150300.4.23.1
spacewalk-backend-xmlrpc - update to 4.2.22-150300.4.23.1
uyuni-config-modules - update to 4.2.23-150300.3.25.4
susemanager-sls - update to 4.2.23-150300.3.25.4
spacewalk-html - update to 4.2.27-150300.3.21.7
spacewalk-base-minimal-config - update to 4.2.27-150300.3.21.7
spacewalk-base-minimal - update to 4.2.27-150300.3.21.7
spacewalk-base - update to 4.2.27-150300.3.21.7
susemanager - update to 4.2.32-150300.3.31.1
susemanager-tools - update to 4.2.32-150300.3.31.1
spacewalk-taskomatic - update to 4.2.38-150300.3.35.1
spacewalk-java-postgresql - update to 4.2.38-150300.3.35.1
spacewalk-java-lib - update to 4.2.38-150300.3.35.1
spacewalk-java-config - update to 4.2.38-150300.3.35.1
spacewalk-java - update to 4.2.38-150300.3.35.1
susemanager-docs_en - update to 4.2-150300.12.27.1
susemanager-docs_en-pdf - update to 4.2-150300.12.27.1
susemanager-doc-indexes - update to 4.2-150300.12.27.6
Red Hat OpenShift Container Platform - update to 4.11.0
eap7-picketbox (Red Hat package) - addressed in versions 5.0.3-10.Final_redhat_00009.1.el7eap, 5.0.3-10.Final_redhat_00009.1.el8eap
Cognos Dashboards on Cloud Pak for Data - update to 5.1.1
npm - update to 6.14.17-1.14.21.1.2.0.1
nodejs8-debuginfo - update to 8.17.0-150200.10.22.1
nodejs8 - update to 8.17.0-150200.10.22.1
nodejs8-debugsource - update to 8.17.0-150200.10.22.1
nodejs8-devel - update to 8.17.0-150200.10.22.1
npm8 - update to 8.17.0-150200.10.22.1
nodejs8-docs - update to 8.17.0-150200.10.22.1
IBM Cognos Analytics - addressed in versions 11.1.7.6, 11.2.4.1 IF1
nodejs12-devel - addressed in versions 12.22.12-1.48.1, 12.22.12-150200.4.32.1
npm12 - addressed in versions 12.22.12-1.48.1, 12.22.12-150200.4.32.1
nodejs12-docs - addressed in versions 12.22.12-1.48.1, 12.22.12-150200.4.32.1
nodejs12-debuginfo - addressed in versions 12.22.12-1.48.1, 12.22.12-150200.4.32.1
nodejs12 - addressed in versions 12.22.12-1.48.1, 12.22.12-150200.4.32.1
nodejs12-debugsource - addressed in versions 12.22.12-1.48.1, 12.22.12-150200.4.32.1
nodejs14-debugsource - addressed in versions 14.19.1-6.28.1, 14.19.1-150200.15.31.1
nodejs14 - addressed in versions 14.19.1-6.28.1, 14.19.1-150200.15.31.1
nodejs14-debuginfo - addressed in versions 14.19.1-6.28.1, 14.19.1-150200.15.31.1
nodejs14-devel - addressed in versions 14.19.1-6.28.1, 14.19.1-150200.15.31.1
npm14 - addressed in versions 14.19.1-6.28.1, 14.19.1-150200.15.31.1
nodejs14-docs - addressed in versions 14.19.1-6.28.1, 14.19.1-150200.15.31.1
corepack14 - update to 14.19.1-150200.15.31.1
nodejs-docs - update to 14.21.1-2.0.1
nodejs-full-i18n - update to 14.21.1-2.0.1
nodejs-devel - update to 14.21.1-2.0.1
nodejs - update to 14.21.1-2.0.1
nodejs (Red Hat package) - update to 16.18.1-3.el9_1
rh-sso7-keycloak (Red Hat package) - addressed in versions 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso
nodejs-packaging - update to 23-3

• https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zip
• https://snyk.io/vuln/SNYK-JS-MINIMIST-559764
• https://stackoverflow.com/questions/8588563/adding-custom-properties-to-a-function/20278068#20278068
• https://github.com/substack/minimist/issues/164
• https://github.com/substack/minimist/blob/master/index.js#L69

• Red Hat Software Collections update for rh-nodejs12-nodejs
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• SUSE update for SUSE Manager Server 4.2
• SUSE update for release-notes-susemanager, release-notes-susemanager-proxy
• Multiple vulnerabilities in IBM App Connect Enterprise and IBM Integration Bus
• Multiple vulnerabilities in Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
• Multiple vulnerabilities in Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
• Multiple vulnerabilities in Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 7
• Multiple vulnerabilities in Red Hat JBoss Enterprise Application Platform 7.4
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in Red Hat Process Automation Manager
• Multiple vulnerabilities in IBM QRadar Pulse for QRadar SIEM
• Red Hat Software Collections update for rh-nodejs14-nodejs
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• Multiple vulnerabilities in Red Hat Fuse
• Red Hat Enterprise Linux 8 update for the nodejs:16 module
• Red Hat Enterprise Linux 8 update for the nodejs:14 module
• Multiple vulnerabilities in Oracle Linux
• Red Hat Enterprise Linux 9 update for nodejs and nodejs-nodemon
• Multiple vulnerabilities in IBM Voice Gateway
• Red Hat Software Collections update for rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6 for OpenShift
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6 for RHEL 9
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6 for RHEL 8
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6 for RHEL 7
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6
• Red Hat Enterprise Linux 8.4 Extended Update Support update for the nodejs:14 module
• Red Hat Enterprise Linux 8.6 Extended Update Support update for the nodejs:14 module
• Resource exhaustion in IBM Edge Application Manager
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in IBM Cognos Analytics
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in IBM Intelligent Operations Center
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in IBM QRadar Data Synchronization App
• Multiple vulnerabilities in IBM Watson Machine Learning Accelerator on Cloud Pak for Data
• openEuler update for nodejs-minimist
• Multiple vulnerabilities in IBM i Modernization Engine for Lifecycle Integration
• Multiple vulnerabilities in IBM Planning Analytics Workspace
• Multiple vulnerabilities in IBM Cognos Analytics Mobile (Android)
• Multiple vulnerabilities in IBM Cognos Analytics Mobile (iOS)
• SUSE update for nodejs14
• SUSE update for nodejs12
• SUSE update for nodejs14
• SUSE update for nodejs12
• SUSE update for nodejs8
• Multiple vulnerabilities in IBM Analyst Workflow
• Multiple vulnerabilities in IBM Cognos Dashboards on Cloud Pak for Data
• Multiple vulnerabilities in HPE Unified OSS Console Assurance Monitoring (UOCAM)
• Multiple vulnerabilities in Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
• Anolis OS update for nodejs:14 module
• IBM Storage Fusion Data Foundation update for Node.js Minimist
• IBM DataStage on Cloud Pak for Data update for Minimist
• Splunk Enterprise Security update for third-party components
• Multiple vulnerabilities in Confluence Data Center