OESA-2021-1409

    Dashboard / Vulnerabilities / OESA-2021-1409

    OESA-2021-1409

    Published: 30 Oct 2021Last Modified: 18 Aug 2026
    Upstream:
    CVE-2021-22930

    Summary: nodejs security update

    Details: Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices. Security Fix(es): Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.(CVE-2021-22930)

    References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1409, https://nvd.nist.gov/vuln/detail/CVE-2021-22930

    Affected packages

    Package

    Name: nodejs

    Purl: pkg:rpm/openEuler/nodejs&distro=openEuler-20.03-LTS-SP1

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -10.21.0-10.oe1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OESA-2021-1409 | CVE-DB