Red Hat Security Advisory

RHSA-2024:6147

nodejs:18 security update

Released 2024-09-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64::nodejs:18, nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le::nodejs:18, nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x::nodejs:18 +20

TI-2024-19062 CVE-2024-28863 · GHSA-f5x3-32g6-xq36

MEDIUM 62

node-tar is a Tar for Node.js.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00929 Published 2024-03-21 Partial fix · 6.2.1 CWE-400

TI-2024-14641 CVE-2024-22020 · GHSA-ch4x-f5c4-36gv

LOW 33

A security flaw in Node.js allows a bypass of network import restrictions.

CVSS 3.0MEDIUM 6.5 Local No auth User interaction EPSS 0.01104 Published 2024-07-09 Partial fix · 18.20.4, 20.15.1 +1 CWE-94