{"kind": "product", "path": "vulns/ubuntu-22.04-lts/nodejs", "name": "nodejs", "product": "nodejs", "ecosystem": "Ubuntu:22.04:LTS", "items": [{"id": "CVE-2023-30590", "noindex": false, "published": "2023-11-28T19:15:19.447Z", "modified": "2026-10-08T21:13:52.073Z", "cvss": 7.5, "cvss_vector": "", "severity": "high", "epss": 0.01462, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-30590", "title": "CVE-2023-30590", "description": "The generateKeys() API function returned from crypto.createDiffieHellman() only generates missing (or outdated) keys, that is, it only generates a private key if none has been set yet, but the function is also needed to compute the corresponding public key after calling setPrivateKey(). However, the documentation says this API call: \"Generates private and public Diffie-Hellman key values\".\n\nThe documented behavior is very different from the actual behavior, and this difference could easily lead to security issues in applications that use these APIs as the DiffieHellman may be used as the basis for application-level security, implications are ", "references": ["https://nodejs.org/en/blog/vulnerability/june-2023-security-releases", "https://lists.debian.org/debian-lts-announce/2024/03/msg00029.html", "https://security.netapp.com/advisory/ntap-20241101-0011/"], "fixes": ["12.22.9~dfsg-1ubuntu3.5"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2023-32559", "noindex": false, "published": "2023-08-24T01:23:29.038Z", "modified": "2025-11-04T16:10:11.750Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.018, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-32559", "title": "CVE-2023-32559", "description": "A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. The use of the deprecated API `process.binding()` can bypass the policy mechanism by requiring internal modules and eventually take advantage of `process.binding('spawn_sync')` run arbitrary code, outside of the limits defined in a `policy.json` file. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.", "references": ["https://hackerone.com/reports/1946470", "https://security.netapp.com/advisory/ntap-20231006-0006/", "https://lists.debian.org/debian-lts-announce/2024/09/msg00029.html"], "fixes": ["12.22.9~dfsg-1ubuntu3.6"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2023-32002", "noindex": false, "published": "2023-08-21T16:52:42.147Z", "modified": "2025-07-02T14:48:45.647Z", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "critical", "epss": 0.0161, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-32002", "title": "CVE-2023-32002", "description": "The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module.\n\nThis vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x.\n\nPlease note that at the time this CVE was issued, the policy is an experimental feature of Node.js.", "references": ["https://hackerone.com/reports/1960870", "https://security.netapp.com/advisory/ntap-20230915-0009/", "https://nvd.nist.gov/vuln/detail/CVE-2023-32002"], "fixes": ["12.22.9~dfsg-1ubuntu3.6"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2023-32006", "noindex": false, "published": "2023-08-15T15:10:09.447Z", "modified": "2025-05-08T16:07:02.197Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.01544, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-32006", "title": "CVE-2023-32006", "description": "The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module.\n\nThis vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x.\n\nPlease note that at the time this CVE was issued, the policy is an experimental feature of Node.js.", "references": ["https://hackerone.com/reports/2043807", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PBOZE2QZIBLFFTYWYN23FGKN6HULZ6HX/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JQPELKG2LVTADSB7ME73AV4DXQK47PWK/"], "fixes": ["12.22.9~dfsg-1ubuntu3.6"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2023-2650", "noindex": false, "published": "2023-05-30T13:40:11.963Z", "modified": "2026-10-14T20:28:44.585Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.75358, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-2650", "title": "Possible DoS translating ASN.1 object identifiers", "description": "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canon", "references": ["https://www.openssl.org/news/secadv/20230530.txt", "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a", "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b"], "fixes": ["12.22.9~dfsg-1ubuntu3.4"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2023-23920", "noindex": false, "published": "2023-02-23T00:00:00.000Z", "modified": "2025-04-30T05:57:24.758Z", "cvss": 4.2, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N", "severity": "medium", "epss": 0.00452, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-23920", "title": "CVE-2023-23920", "description": "An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges.", "references": ["https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/", "https://lists.debian.org/debian-lts-announce/2023/02/msg00038.html", "https://security.netapp.com/advisory/ntap-20230316-0008/"], "fixes": ["12.22.9~dfsg-1ubuntu3.4"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2022-4304", "noindex": false, "published": "2023-02-08T19:04:28.890Z", "modified": "2026-10-14T14:17:49.943Z", "cvss": 5.9, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "medium", "epss": 0.23509, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-4304", "title": "Timing Oracle in RSA Decryption", "description": "A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the ser", "references": ["https://www.openssl.org/news/secadv/20230207.txt", "https://security.gentoo.org/glsa/202402-08", "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003"], "fixes": ["12.22.9~dfsg-1ubuntu3.3"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2022-4450", "noindex": false, "published": "2023-02-08T19:04:04.874Z", "modified": "2026-10-14T14:39:44.108Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.2859, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-4450", "title": "Double free after calling PEM_read_bio_ex", "description": "The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the \"name\" (e.g. \"CERTIFICATE\"), any header data and the payload data.\nIf the function succeeds then the \"name_out\", \"header\" and \"data\" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free wil", "references": ["https://www.openssl.org/news/secadv/20230207.txt", "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83", "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b"], "fixes": ["12.22.9~dfsg-1ubuntu3.3"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2023-0215", "noindex": false, "published": "2023-02-08T19:03:28.691Z", "modified": "2026-10-14T19:02:42.066Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.05024, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-0215", "title": "Use-after-free following BIO_new_NDEF", "description": "The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO cha", "references": ["https://www.openssl.org/news/secadv/20230207.txt", "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd", "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344"], "fixes": ["12.22.9~dfsg-1ubuntu3.3"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2023-0286", "noindex": false, "published": "2023-02-08T19:01:50.514Z", "modified": "2026-10-14T19:23:44.227Z", "cvss": 7.4, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H", "severity": "high", "epss": 0.69286, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-0286", "title": "X.400 address type confusion in X.509 GeneralName", "description": "There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most", "references": ["https://www.openssl.org/news/secadv/20230207.txt", "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658", "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9"], "fixes": ["12.22.9~dfsg-1ubuntu3.3"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2023-0401", "noindex": false, "published": "2023-02-08T19:00:53.435Z", "modified": "2025-11-04T19:14:37.338Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.01846, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-0401", "title": "NULL dereference during PKCS7 data verification", "description": "A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME l", "references": ["https://www.openssl.org/news/secadv/20230207.txt", "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674", "https://security.gentoo.org/glsa/202402-08"], "fixes": ["12.22.9~dfsg-1ubuntu3.3"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2022-43548", "noindex": false, "published": "2022-12-05T00:00:00.000Z", "modified": "2025-04-30T05:55:04.408Z", "cvss": 8.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.14839, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-43548", "title": "CVE-2022-43548", "description": "A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19.0.1 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.The fix for this issue in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32212 was incomplete and this new CVE is to complete the fix.", "references": ["https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/", "https://security.netapp.com/advisory/ntap-20230120-0004/", "https://www.debian.org/security/2023/dsa-5326"], "fixes": ["12.22.9~dfsg-1ubuntu3.2"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2022-35256", "noindex": false, "published": "2022-12-05T00:00:00.000Z", "modified": "2025-04-30T22:24:47.709Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "severity": "medium", "epss": 0.02764, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-35256", "title": "CVE-2022-35256", "description": "The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling.", "references": ["https://hackerone.com/reports/1675191", "https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf", "https://www.debian.org/security/2023/dsa-5326"], "fixes": ["12.22.9~dfsg-1ubuntu3.2"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2022-32215", "noindex": false, "published": "2022-07-14T00:00:00.000Z", "modified": "2025-04-30T22:24:42.485Z", "cvss": 6.5, "cvss_vector": "", "severity": "medium", "epss": 0.70244, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-32215", "title": "CVE-2022-32215", "description": "The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS).", "references": ["https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/", "https://hackerone.com/reports/1501679", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMQK5L5SBYD47QQZ67LEMHNQ662GH3OY/"], "fixes": ["12.22.9~dfsg-1ubuntu3.2"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2022-32214", "noindex": false, "published": "2022-07-14T00:00:00.000Z", "modified": "2025-04-30T22:24:43.342Z", "cvss": 9.1, "cvss_vector": "", "severity": "critical", "epss": 0.81832, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-32214", "title": "CVE-2022-32214", "description": "The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS).", "references": ["https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/", "https://hackerone.com/reports/1524692", "https://www.debian.org/security/2023/dsa-5326"], "fixes": ["12.22.9~dfsg-1ubuntu3.2"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2022-32213", "noindex": false, "published": "2022-07-14T00:00:00.000Z", "modified": "2025-04-30T22:24:45.103Z", "cvss": 9.1, "cvss_vector": "", "severity": "critical", "epss": 0.44843, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-32213", "title": "CVE-2022-32213", "description": "The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling (HRS).", "references": ["https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/", "https://hackerone.com/reports/1524555", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMQK5L5SBYD47QQZ67LEMHNQ662GH3OY/"], "fixes": ["12.22.9~dfsg-1ubuntu3.2"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2022-32212", "noindex": false, "published": "2022-07-14T00:00:00.000Z", "modified": "2025-04-30T22:24:44.217Z", "cvss": 8.1, "cvss_vector": "", "severity": "high", "epss": 0.06432, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-32212", "title": "CVE-2022-32212", "description": "A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.", "references": ["https://hackerone.com/reports/1632921", "https://nvd.nist.gov/vuln/detail/CVE-2022-32212"], "fixes": ["12.22.9~dfsg-1ubuntu3.2"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2022-2097", "noindex": false, "published": "2022-07-05T10:30:13.658Z", "modified": "2026-10-14T13:07:00.762Z", "cvss": 5.3, "cvss_vector": "", "severity": "medium", "epss": 0.04899, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-2097", "title": "AES OCB fails to encrypt some bytes", "description": "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).", "references": ["https://www.openssl.org/news/secadv/20220705.txt", "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93", "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431"], "fixes": ["12.22.9~dfsg-1ubuntu3.1"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2022-2068", "noindex": false, "published": "2022-06-21T14:45:20.597Z", "modified": "2026-10-14T12:57:37.880Z", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "critical", "epss": 0.96391, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-2068", "title": "The c_rehash script allows command injection", "description": "In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. ", "references": ["https://www.openssl.org/news/secadv/20220621.txt", "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa", "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7"], "fixes": ["12.22.9~dfsg-1ubuntu3.1"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}, {"id": "CVE-2022-1292", "noindex": false, "published": "2022-05-03T15:15:19.758Z", "modified": "2026-10-14T12:34:52.675Z", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "critical", "epss": 0.82612, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-1292", "title": "The c_rehash script allows command injection", "description": "The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).", "references": ["https://www.openssl.org/news/secadv/20220503.txt", "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23"], "fixes": ["12.22.9~dfsg-1ubuntu3.1"], "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}]}], "total": 21, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "nodejs", "path": "vulns/ubuntu-22.04-lts/nodejs", "ecosystem": "Ubuntu:22.04:LTS"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 0, "kev": 0}, "lastmod": "2026-10-14T20:28:44.585Z", "early_advisories": [], "license": "Подборку PatchFirst и наши дополнения (приоритеты, ранние предупреждения, тексты, сводки и агрегаты) можно свободно использовать для собственных целей, включая внутренние задачи бизнеса. Перепродажа, коммерческое распространение и массовое зеркалирование этой подборки или дополнений допускаются только по письменному соглашению с оператором. При любом использовании или публикации подборки или наших дополнений указывайте PatchFirst (https://ru.patchfirst.dev/vulns/) с этой ссылкой на страницу ленты своего региона. Исходные записи открытых источников остаются под их лицензиями и условиями. Эти условия не ограничивают ваши права на исходные данные, которые можно получить у источников напрямую.", "terms_url": "https://ru.patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://ru.patchfirst.dev/vulns/"}, "source_changes": "PatchFirst отбирает, нормализует и объединяет записи; могут добавляться сводки и переводы. Новости указываются ссылкой на первоисточник в самой записи.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Лицензии исходных баз различаются; см. каталог источников."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Оценки доступны свободно; запрашивается указание источника (FIRST EPSS, оценки подготовлены Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}