CVE-2021-35065

medium
Published 2023-05-09 · Modified 2023-05-11
CVSS v3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
VIR risk
5.5

Description

Moderate: nodejs:18 security, bug fix, and enhancement update

Predictions

Exploit likelihood
30%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

OS impact

OSVersionStatusFixed in
redhat rhel9fixed
rockylinux rocky8fixed
rockylinux rocky9fixed
debian debianbookwormfixed6.0.2+~5.1.1-1
debian debianbullseyeaffected
debian debianforkyfixed6.0.2+~5.1.1-1
debian debiansidfixed6.0.2+~5.1.1-1
debian debiantrixiefixed6.0.2+~5.1.1-1
almalinux almalinux9fixednodejs-docs-18.14.2-2.module_el9.2.0+29+de583a0b.noarch.rpm

Package impact

EcosystemPackageVulnerableFixed
npm npmglob-parent>=6.0.0,<6.0.16.0.1

References

💬 Discuss CVE-2021-35065 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.