| Package | Affected versions | Patched versions |
|---|---|---|
| node.js | ≥ 12.0.0, < 12.18.0≥ 14.0.0, < 14.4.0< 10.21.0 | 12.18.014.4.010.21.0 |
| banking extensibility workbench | = 14.3.0= 14.4.0 | |
| blockchain platform | < 21.1.2 | 21.1.2 |
| mysql cluster | ≥ 7.4.0, ≤ 7.4.29≥ 7.5.0, ≤ 7.5.19≥ 7.6.0, ≤ 7.6.15≥ 8.0.0, ≤ 8.0.21≤ 7.3.30 | |
| retail xstore point of service | = 16.0.6= 17.0.4= 18.0.3= 19.0.2= 20.0.1 |
napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free