p PatchFirst

ALPINE-CVE-2021-22939

ALPINE-CVE-2021-22939

This page contains facts from public vulnerability sources. Check the original advisory before updating.

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted.

CVSS 5.3 · Medium · Fix available

Published
Updated

Stack: system

Affected products and versions

  • nodejs Alpine:v3.11

    Affected ranges
    • ECOSYSTEM: < 12.22.5-r0

    Update to 12.22.5-r0

  • nodejs Alpine:v3.12

    Affected ranges
    • ECOSYSTEM: < 12.22.5-r0

    Update to 12.22.5-r0

  • nodejs Alpine:v3.13

    Affected ranges
    • ECOSYSTEM: < 14.17.5-r0

    Update to 14.17.5-r0

  • nodejs Alpine:v3.14

    Affected ranges
    • ECOSYSTEM: < 14.17.5-r0

    Update to 14.17.5-r0

  • nodejs Alpine:v3.15

    Affected ranges
    • ECOSYSTEM: < 14.17.5-r0

    Update to 14.17.5-r0

  • nodejs Alpine:v3.16

    Affected ranges
    • ECOSYSTEM: < 14.17.5-r0

    Update to 14.17.5-r0

  • nodejs Alpine:v3.17

    Affected ranges
    • ECOSYSTEM: < 14.17.5-r0

    Update to 14.17.5-r0

  • nodejs Alpine:v3.18

    Affected ranges
    • ECOSYSTEM: < 14.17.5-r0

    Update to 14.17.5-r0

  • nodejs Alpine:v3.19

    Affected ranges
    • ECOSYSTEM: < 14.17.5-r0

    Update to 14.17.5-r0

  • nodejs Alpine:v3.20

    Affected ranges
    • ECOSYSTEM: < 14.17.5-r0

    Update to 14.17.5-r0

  • nodejs Alpine:v3.21

    Affected ranges
    • ECOSYSTEM: < 14.17.5-r0

    Update to 14.17.5-r0

  • nodejs Alpine:v3.22

    Affected ranges
    • ECOSYSTEM: < 14.17.5-r0

    Update to 14.17.5-r0

  • nodejs Alpine:v3.23

    Affected ranges
    • ECOSYSTEM: < 14.17.5-r0

    Update to 14.17.5-r0

  • nodejs Alpine:v3.24

    Affected ranges
    • ECOSYSTEM: < 14.17.5-r0

    Update to 14.17.5-r0

Original sources

Check your server →