Alpine/nodejs: critical 9.8

The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.

Action: Upgrade nodejs to 14.16.1-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2020-7774#Alpine:v3.14/nodejs
• https://security.alpinelinux.org/vuln/CVE-2020-7774

published 2020-11-17T13:15:12.633Z · modified 2026-09-11T10:17:51.448060993Z · JSON