Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2021-44906: Fixed a prototype pollution in node-minimist (bsc#1198247). - CVE-2021-44907: Fixed a potential Denial of Service vulnerability in node-qs (bsc#1197283). - CVE-2022-0235: Fixed an exposure of sensitive information to an unauthorized actor in node-fetch (bsc#1194819).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for nodejs12 fixes the following issues: - CVE-2021-44906: Fixed a prototype pollution in node-minimist (bsc#1198247). - CVE-2021-44907: Fixed a potential Denial of Service vulnerability in node-qs (bsc#1197283). - CVE-2022-0235: Fixed an exposure of sensitive information to an unauthorized actor in node-fetch (bsc#1194819).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1194819
- https://bugzilla.suse.com/1197283
- https://bugzilla.suse.com/1198247
- https://www.suse.com/security/cve/CVE-2021-44906
- https://www.suse.com/security/cve/CVE-2021-44907
- https://www.suse.com/security/cve/CVE-2022-0235
- https://www.suse.com/support/update/announcement/2022/suse-su-20221466-1/