| Package | Affected versions | Patched versions |
|---|---|---|
| node.js | ≥ 12.0.0, < 12.22.5≥ 14.0.0, < 14.17.5≥ 16.0.0, < 16.6.2 | 12.22.514.17.516.6.2 |
| graalvm | = 20.3.3= 21.2.0 | |
| jd edwards enterpriseone tools | ≤ 9.2.6.1 | |
| peoplesoft enterprise peopletools | = 8.57= 8.58= 8.59 | |
| sinec infrastructure network services | < 1.0.1.1 | 1.0.1.1 |
Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free