kritik
CVE-2022-35255
nodejs: weak randomness in WebCrypto keygen
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Red Hat8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Bitnami9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Bitnami, Photon OS. Daha düşük diyenler: Red Hat (yüksek), AlmaLinux (yüksek), Amazon (yüksek), Oracle (yüksek), Rocky Linux (yüksek).
Açıklama
A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource() in SecretKeyGenTraits::DoKeyGen() in src/crypto/crypto_keygen.cc. There are two problems with this: 1) It does not check the return value, it assumes EntropySource() always succeeds, but it can (and sometimes will) fail. 2) The random data returned byEntropySource() may not be cryptographically strong and therefore not suitable as keying material.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | node, node-min | 15.14.1, 16.12.1, 16.17.1, 18.9.1 |
| Photon OS 4.0 | nodejs, nodejs-devel | 18.20.8-1.ph4 |
| alma 8 | nodejs:16::nodejs, nodejs:16::nodejs-devel, nodejs:16::nodejs-docs ve 12 tane daha | 1:16.17.1-1.module_el8.6.0+3328+2e4711d7 ve 7 tane daha |
| alma 9 | nodejs, nodejs-docs, nodejs-full-i18n ve 2 tane daha | 1:16.17.1-1.el9_0 ve 1 tane daha |
| alpine 3.15 | nodejs | 16.17.1-r0 |
| alpine 3.16 | nodejs, nodejs-current | 16.17.1-r0 ve 1 tane daha |
| alpine 3.17 | nodejs, nodejs-current | 16.17.1-r0 ve 1 tane daha |
| alpine 3.18 | nodejs, nodejs-current | 16.17.1-r0 ve 1 tane daha |
| alpine 3.19 | nodejs, nodejs-current | 16.17.1-r0 ve 1 tane daha |
| alpine 3.20 | nodejs, nodejs-current | 16.17.1-r0 ve 1 tane daha |
| alpine 3.21 | nodejs, nodejs-current | 16.17.1-r0 ve 1 tane daha |
| alpine 3.22 | nodejs, nodejs-current | 16.17.1-r0 ve 1 tane daha |
30 kaynaktaki 234 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | node | 15.14.1, 16.12.1, 16.17.1, 18.9.1 |
| bitnami::Bitnami Vulnerability Database | node-min | 15.14.1, 16.12.1, 16.17.1, 18.9.1 |
| Photon OS 4.0 | nodejs | 18.20.8-1.ph4 |
| Photon OS 4.0 | nodejs-devel | 18.20.8-1.ph4 |
| alma 8 | nodejs:16::nodejs | 1:16.17.1-1.module_el8.6.0+3328+2e4711d7 |
| alma 8 | nodejs:16::nodejs-devel | 1:16.17.1-1.module_el8.6.0+3328+2e4711d7 |
| alma 8 | nodejs:16::nodejs-docs | 1:16.17.1-1.module_el8.6.0+3328+2e4711d7 |
| alma 8 | nodejs:16::nodejs-full-i18n | 1:16.17.1-1.module_el8.6.0+3328+2e4711d7 |
| alma 8 | nodejs:16::nodejs-nodemon | 2.0.19-2.module_el8.6.0+3261+490666b3 |
| alma 8 | nodejs:16::nodejs-packaging | 25-1.module_el8.5.0+2605+45d748af |
| alma 8 | nodejs:16::npm | 1:8.15.0-1.16.17.1.1.module_el8.6.0+3328+2e4711d7 |
| alma 8 | nodejs:18::nodejs | 1:18.9.1-1.module_el8.7.0+3343+ea2b7901 |
| alma 8 | nodejs:18::nodejs-devel | 1:18.9.1-1.module_el8.7.0+3343+ea2b7901 |
| alma 8 | nodejs:18::nodejs-docs | 1:18.9.1-1.module_el8.7.0+3343+ea2b7901 |
| alma 8 | nodejs:18::nodejs-full-i18n | 1:18.9.1-1.module_el8.7.0+3343+ea2b7901 |
| alma 8 | nodejs:18::nodejs-nodemon | 2.0.19-1.module_el8.7.0+3343+ea2b7901 |
| alma 8 | nodejs:18::nodejs-packaging | 2021.06-4.module_el8.7.0+3343+ea2b7901 |
| alma 8 | nodejs:18::nodejs-packaging-bundler | 2021.06-4.module_el8.7.0+3343+ea2b7901 |
| alma 8 | nodejs:18::npm | 1:8.19.1-1.18.9.1.1.module_el8.7.0+3343+ea2b7901 |
| alma 9 | nodejs | 1:16.17.1-1.el9_0 |
| alma 9 | nodejs-docs | 1:16.17.1-1.el9_0 |
| alma 9 | nodejs-full-i18n | 1:16.17.1-1.el9_0 |
| alma 9 | nodejs-libs | 1:16.17.1-1.el9_0 |
| alma 9 | npm | 1:8.15.0-1.16.17.1.1.el9_0 |
| alpine 3.15 | nodejs | 16.17.1-r0 |
| alpine 3.16 | nodejs | 16.17.1-r0 |
| alpine 3.16 | nodejs-current | 18.9.1-r0 |
| alpine 3.17 | nodejs | 16.17.1-r0 |
| alpine 3.17 | nodejs-current | 18.9.1-r0 |
| alpine 3.18 | nodejs | 16.17.1-r0 |
| alpine 3.18 | nodejs-current | 18.9.1-r0 |
| alpine 3.19 | nodejs | 16.17.1-r0 |
| alpine 3.19 | nodejs-current | 18.9.1-r0 |
| alpine 3.20 | nodejs | 16.17.1-r0 |
| alpine 3.20 | nodejs-current | 18.9.1-r0 |
| alpine 3.21 | nodejs | 16.17.1-r0 |
| alpine 3.21 | nodejs-current | 18.9.1-r0 |
| alpine 3.22 | nodejs | 16.17.1-r0 |
| alpine 3.22 | nodejs-current | 18.9.1-r0 |
| alpine 3.23 | nodejs | 16.17.1-r0 |
| alpine 3.23 | nodejs-current | 18.9.1-r0 |
| alpine 3.24 | nodejs | 16.17.1-r0 |
| alpine 3.24 | nodejs-current | 18.9.1-r0 |
| alpine edge | nodejs | 16.17.1-r0 |
| alpine edge | nodejs-current | 18.9.1-r0 |
| amazon linux 2023 | nodejs | 1:18.12.1-1.amzn2023.0.2 |
| amazon linux 2023 | nodejs-debuginfo | 1:18.12.1-1.amzn2023.0.2 |
| amazon linux 2023 | nodejs-debugsource | 1:18.12.1-1.amzn2023.0.2 |
| amazon linux 2023 | nodejs-devel | 1:18.12.1-1.amzn2023.0.2 |
| amazon linux 2023 | nodejs-docs | 1:18.12.1-1.amzn2023.0.2 |
| amazon linux 2023 | nodejs-full-i18n | 1:18.12.1-1.amzn2023.0.2 |
| amazon linux 2023 | nodejs-libs | 1:18.12.1-1.amzn2023.0.2 |
| amazon linux 2023 | nodejs-libs-debuginfo | 1:18.12.1-1.amzn2023.0.2 |
| amazon linux 2023 | npm | 1:8.19.2-1.18.12.1.1.amzn2023.0.2 |
| amazon linux 2023 | v8-devel | 2:10.2.154.15-1.18.12.1.1.amzn2023.0.2 |
| debian 11 | nodejs | 12.22.12~dfsg-1~deb11u3 |
| debian 12 | nodejs | 18.10.0+dfsg-1 |
| debian 13 | nodejs | 18.10.0+dfsg-1 |
| debian 14 | nodejs | 18.10.0+dfsg-1 |
| echo | nodejs | 18.10.0+dfsg-1 |
| Oracle Linux 7 | graalvm22-ce-11 | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-devel | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-espresso | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-espresso-llvm | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-fastr | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-javascript | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-jdk | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-libpolyglot | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-llvm | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-llvm-toolchain | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-native-image | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-native-image-llvm-backend | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-nodejs | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-nodejs-devel | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-polyglot | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-python | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-python-devel | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-ruby | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-ruby-devel | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-tools | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-11-wasm | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17 | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-devel | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-espresso | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-espresso-llvm | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-fastr | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-javascript | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-jdk | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-libpolyglot | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-llvm | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-llvm-toolchain | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-native-image | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-native-image-llvm-backend | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-nodejs | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-nodejs-devel | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-polyglot | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-python | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-python-devel | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-ruby | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-ruby-devel | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-tools | 22.3.0-1.el7 |
| Oracle Linux 7 | graalvm22-ce-17-wasm | 22.3.0-1.el7 |
| Oracle Linux 8 | graalvm22-ce-11 | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-devel | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-espresso | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-espresso-llvm | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-fastr | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-javascript | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-jdk | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-libpolyglot | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-llvm | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-llvm-toolchain | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-native-image | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-native-image-llvm-backend | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-nodejs | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-nodejs-devel | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-polyglot | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-python | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-python-devel | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-ruby | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-ruby-devel | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-tools | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-11-wasm | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17 | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-devel | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-espresso | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-espresso-llvm | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-fastr | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-javascript | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-jdk | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-libpolyglot | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-llvm | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-llvm-toolchain | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-native-image | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-native-image-llvm-backend | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-nodejs | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-nodejs-devel | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-polyglot | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-python | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-python-devel | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-ruby | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-ruby-devel | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-tools | 22.3.0-1.el8 |
| Oracle Linux 8 | graalvm22-ce-17-wasm | 22.3.0-1.el8 |
| Oracle Linux 8 | nodejs | 1:18.8.0-1.module+el8.7.0+20871+e727ae93 |
| Oracle Linux 8 | nodejs-devel | 1:18.8.0-1.module+el8.7.0+20871+e727ae93 |
| Oracle Linux 8 | nodejs-docs | 1:18.8.0-1.module+el8.7.0+20871+e727ae93 |
| Oracle Linux 8 | nodejs-full-i18n | 1:18.8.0-1.module+el8.7.0+20871+e727ae93 |
| Oracle Linux 8 | nodejs-nodemon | 2.0.19-2.module+el8.6.0+20846+72f1269d |
| Oracle Linux 8 | nodejs-packaging | 2021.06-4.module+el8.7.0+20766+0a247725 |
| Oracle Linux 8 | nodejs-packaging-bundler | 2021.06-4.module+el8.7.0+20766+0a247725 |
| Oracle Linux 8 | npm | 1:8.18.0-1.18.8.0.1.module+el8.7.0+20871+e727ae93 |
| Oracle Linux 9 | graalvm22-ce-11 | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-devel | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-espresso | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-espresso-llvm | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-fastr | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-javascript | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-jdk | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-libpolyglot | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-llvm | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-llvm-toolchain | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-native-image | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-native-image-llvm-backend | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-nodejs | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-nodejs-devel | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-polyglot | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-python | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-python-devel | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-ruby | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-ruby-devel | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-tools | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-11-wasm | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17 | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-devel | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-espresso | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-espresso-llvm | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-fastr | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-javascript | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-jdk | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-libpolyglot | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-llvm | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-llvm-toolchain | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-native-image | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-native-image-llvm-backend | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-nodejs | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-nodejs-devel | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-polyglot | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-python | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-python-devel | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-ruby | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-ruby-devel | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-tools | 22.3.0-1.el9 |
| Oracle Linux 9 | graalvm22-ce-17-wasm | 22.3.0-1.el9 |
| Oracle Linux 9 | nodejs | 1:16.17.1-1.el9_0 |
| Oracle Linux 9 | nodejs-docs | 1:16.17.1-1.el9_0 |
| Oracle Linux 9 | nodejs-full-i18n | 1:16.17.1-1.el9_0 |
| Oracle Linux 9 | nodejs-libs | 1:16.17.1-1.el9_0 |
| Oracle Linux 9 | npm | 1:8.15.0-1.16.17.1.1.el9_0 |
| rapidfort amazon linux 2023 | nodejs | 1:18.12.1-1.amzn2023.0.2 |
| rapidfort Oracle Linux 9 | nodejs | 1:16.17.1-1.el9_0 |
| rapidfort Oracle Linux 9 | nodejs-docs | 1:16.17.1-1.el9_0 |
| rapidfort Oracle Linux 9 | nodejs-full-i18n | 1:16.17.1-1.el9_0 |
| rapidfort Oracle Linux 9 | nodejs-libs | 1:16.17.1-1.el9_0 |
| rapidfort Oracle Linux 9 | npm | 1:8.15.0-1.16.17.1.1.el9_0 |
| rapidfort rocky 9 | nodejs | 1:16.17.1-1.el9_0 |
| rocky 8 | nodejs | 1:16.17.1-1.module+el8.6.0+1046+80feca58 |
| rocky 8 | nodejs-devel | 1:16.17.1-1.module+el8.6.0+1046+80feca58 |
| rocky 8 | nodejs-docs | 1:16.17.1-1.module+el8.6.0+1046+80feca58 |
| rocky 8 | nodejs-full-i18n | 1:16.17.1-1.module+el8.6.0+1046+80feca58 |
| rocky 8 | nodejs-nodemon | 2.0.19-2.module+el8.6.0+1046+80feca58 |
| rocky 8 | nodejs-packaging | 25-1.module+el8.6.0+1046+80feca58 |
| rocky 8 | nodejs:16::nodejs | 1:16.17.1-1.module+el8.6.0+1046+80feca58 |
| rocky 8 | nodejs:16::nodejs-devel | 1:16.17.1-1.module+el8.6.0+1046+80feca58 |
| rocky 8 | nodejs:16::nodejs-docs | 1:16.17.1-1.module+el8.6.0+1046+80feca58 |
| rocky 8 | nodejs:16::nodejs-full-i18n | 1:16.17.1-1.module+el8.6.0+1046+80feca58 |
| rocky 8 | nodejs:16::nodejs-nodemon | 2.0.19-2.module+el8.6.0+1046+80feca58 |
| rocky 8 | nodejs:16::nodejs-packaging | 25-1.module+el8.6.0+1046+80feca58 |
| rocky 8 | nodejs:16::npm | 1:8.15.0-1.16.17.1.1.module+el8.6.0+1046+80feca58 |
| rocky 8 | nodejs:18::nodejs | 1:18.9.1-1.module+el8.7.0+1072+5b168780 |
| rocky 8 | nodejs:18::nodejs-devel | 1:18.9.1-1.module+el8.7.0+1072+5b168780 |
| rocky 8 | nodejs:18::nodejs-docs | 1:18.9.1-1.module+el8.7.0+1072+5b168780 |
| rocky 8 | nodejs:18::nodejs-full-i18n | 1:18.9.1-1.module+el8.7.0+1072+5b168780 |
| rocky 8 | nodejs:18::nodejs-nodemon | 2.0.19-1.module+el8.7.0+1072+5b168780 |
| rocky 8 | nodejs:18::nodejs-packaging | 2021.06-4.module+el8.7.0+1072+5b168780 |
| rocky 8 | nodejs:18::nodejs-packaging-bundler | 2021.06-4.module+el8.7.0+1072+5b168780 |
| rocky 8 | nodejs:18::npm | 1:8.19.1-1.18.9.1.1.module+el8.7.0+1072+5b168780 |
| rocky 8 | npm | 1:8.15.0-1.16.17.1.1.module+el8.6.0+1046+80feca58 |
| rocky 9 | nodejs | 1:16.17.1-1.el9_0 |
| rocky 9 | nodejs-docs | 1:16.17.1-1.el9_0 |
| rocky 9 | nodejs-full-i18n | 1:16.17.1-1.el9_0 |
| rocky 9 | nodejs-libs | 1:16.17.1-1.el9_0 |
| rocky 9 | npm | 1:8.15.0-1.16.17.1.1.el9_0 |
| root.io debian 12 | rootio-nodejs | 18.10.0+dfsg-1 |
Referanslar
- https://access.redhat.com/errata/RHSA-2022:6963
- https://access.redhat.com/security/cve/CVE-2022-35255
- https://bugzilla.redhat.com/2130517
- https://bugzilla.redhat.com/2130518
- https://bugzilla.redhat.com/show_bug.cgi?id=2130517
- https://bugzilla.redhat.com/show_bug.cgi?id=2130518
- https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf
- https://creativecommons.org/licenses/by/4.0/
21 referansın hepsi
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35255
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35256
- https://errata.almalinux.org/9/ALSA-2022-6963.html
- https://errata.rockylinux.org/RLSA-2022:6963
- https://hackerone.com/bugs?report_id=1690000
- https://hackerone.com/reports/1690000
- https://linux.oracle.com/cve/CVE-2022-35255.html
- https://linux.oracle.com/errata/ELSA-2022-9955.html
- https://nodejs.org/en/blog/vulnerability/september-2022-security-releases/#weak-randomness-in-webcrypto-keygen-high-cve-2022-35255
- https://nvd.nist.gov/vuln/detail/CVE-2022-35255
- https://security.netapp.com/advisory/ntap-20230113-0002/
- https://www.cve.org/CVERecord?id=CVE-2022-35255
- https://www.debian.org/security/2023/dsa-5326