OPENSUSE-SU-2021:2618-1
Not scored
Security update for nodejs8
This update for nodejs8 fixes the following issues: - update to npm 6.14.13 - CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. (bsc#1187976) - CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service. (bsc#1187977) - CVE-2020-7774: fixes y18n Prototype Pollution. (bsc#1184450)
Exploit probability
Not scored
Published
August 5, 2021
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
openSUSE-SU-2021:2618-1
View original source
This update for nodejs8 fixes the following issues: - update to npm 6.14.13 - CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. (bsc#1187976) - CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service. (bsc#1187977) - CVE-2020-7774: fixes y18n Prototype Pollution. (bsc#1184450)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1184450
- https://bugzilla.suse.com/1187976
- https://bugzilla.suse.com/1187977
- https://lists.opensuse.org/archives/list/[email protected]/thread/KZHYVND24KFSRRA7YPSSI2T72HICGJ3Z/
- https://www.suse.com/security/cve/CVE-2020-7774
- https://www.suse.com/security/cve/CVE-2021-23362
- https://www.suse.com/security/cve/CVE-2021-27290