VDB
RLSA-2022%3A7830
RLSA-2022%3A7830
PUBLISHED
CVSS 8.199999809265137 HIGH
Record from OSV · Published November 8, 2022
Moderate: nodejs:14 security update
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| nodejs-nodemon | Rocky Linux:8 | 2.0.19-2.module, 0:2.0.19-2.module+el8.6.0+1046+80feca58, 0:2.0.19-2.module+el8.6.0+1003+ae94235a |
| nodejs | Rocky Linux:8 | 14.20.1-2.module, 1:14.20.1-2.module+el8.7.0+1071+4bdda2a8 |
| nodejs-packaging | Rocky Linux:8 | 8.7.0+1071, 8.5.0+733, 8.3.0+100, 0:23-3.module+el8.7.0+1071+4bdda2a8, 0:23-3.module+el8.5.0+733+de4fee6c, 0:23-3.module+el8.3.0+100+234774f7 |
Risk scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Rocky Linux:8 | nodejs-nodemon | 0, 0, 0 |
| Rocky Linux:8 | nodejs | 0, 0 |
| Rocky Linux:8 | nodejs-packaging | 0, 0, 0 |
Timeline
- Nov 8, 2022 CVE Published
- Feb 5, 2026 CVE Updated
- May 19, 2026 Distribution Patch
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln RLSA-2022%3A7830
vulnetix vdb fixes RLSA-2022%3A7830
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/RLSA-2022%253A7830/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2130518 report
- https://errata.rockylinux.org/RLSA-2022:7830 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2040839 report
- https://bugzilla.redhat.com/show_bug.cgi?id=2040846 report
- https://bugzilla.redhat.com/show_bug.cgi?id=2040856 report
- https://bugzilla.redhat.com/show_bug.cgi?id=2040862 report