Fluid Attacks Database

Description

napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 11	nodejs	>=0 <10.21.0~dfsg-1	10.21.0~dfsg-1
alpine v3.14	nodejs	>=0 <12.18.0-r0	12.18.0-r0
alpine v3.20	nodejs	>=0 <12.18.0-r0	12.18.0-r0
debian 12	nodejs	>=0 <10.21.0~dfsg-1	10.21.0~dfsg-1
alpine v3.22	nodejs	>=0 <12.18.0-r0	12.18.0-r0
alpine v3.11	nodejs	>=0 <12.20.1-r0	12.20.1-r0
alpine v3.12	nodejs	>=0 <12.18.3-r0	12.18.3-r0
alpine v3.13	nodejs	>=0 <12.18.0-r0	12.18.0-r0
alpine v3.15	nodejs	>=0 <12.18.0-r0	12.18.0-r0
alpine v3.16	nodejs	>=0 <12.18.0-r0	12.18.0-r0

1-10 of 21

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.