Debian/nodejs: high 8.1
A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly
Action: Upgrade nodejs to 18.6.0+dfsg-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 18.6.0+dfsg-3 | - |
Fixed versions
| 18.6.0+dfsg-3 |
Sources
- osv: DEBIAN-CVE-2022-32212#Debian:14/nodejs
- https://security-tracker.debian.org/tracker/CVE-2022-32212
published · modified · JSON