CVE-2021-22931

Mô tả

Tham khảo

• cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf · Patch
• hackerone.com/reports/1178337 · Exploit
• nodejs.org/en/blog/vulnerability/aug-2021-security-releases · Patch
• security.gentoo.org/glsa/202401-02
• security.netapp.com/advisory/ntap-20210923-0001 · Third Party Advisory
• security.netapp.com/advisory/ntap-20211022-0003 · Third Party Advisory
• oracle.com/security-alerts/cpujan2022.html · Patch
• oracle.com/security-alerts/cpujul2022.html · Third Party Advisory
• oracle.com/security-alerts/cpuoct2021.html · Patch

Lỗ hổng khác của node.js

• CVE-2026-111497NGHIÊM TRỌNG 9.8ĐANG BỊ KHAI THÁC (CISA KEV)A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows…
• CVE-2026-58043CAO 8.4A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under `--permission`…
• CVE-2026-56850TRUNG BÌNH 4.4A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be…
• CVE-2026-56847TRUNG BÌNH 6.1A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. …
• CVE-2026-48936THẤP 3.3A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permissio…