Home Latest vulnerabilities nodejs12 PatchFirst · Latest vulnerabilities
nodejs12 vulnerabilities Vulnerabilities published for nodejs12 in the last 30 days: 0. Listed in the KEV catalogue: 0.
Do you use nodejs12? The list contains 7 vulnerabilities. Find out in a minute whether anything on this list affects your server — the check is free.
Check your server for free Security update for nodejs12 This update for nodejs12 fixes the following issues:
- CVE-2023-23918: Fixed permissions policies bypass via process.mainModule (bsc#1208481).
- CVE-2023-32002: Fixed permissions policies bypass via Module._load (bsc#1214150).
- CVE-2023-32006: Fixed permissions policies impersonation using module.constructor.createRequire() (bsc#1214156).
- CVE-2023-32559: Fixed permissions policies bypass via process.binding (bsc#1214154).
- CVE-2023-30581: Fixed mainModule.proto bypass (bsc#1212574).
- CVE-2023-30590: Fixed missing DiffieHellman key generation (bsc#1212583).
- CVE-2023-30589: Fixed HTTP Request Smuggling via Empty headers separated by CR
Update to 12.22.12-150200.4.50.1 Published August 28, 2023 Updated February 4, 2026
Security update for nodejs12 This update for nodejs12 fixes the following issues:
- CVE-2022-25881: Fixed regular expression denial of service vulnerability (bsc#1208744).
Update to 12.22.12-150200.4.47.1 Published April 18, 2023 Updated February 4, 2026
Security update for nodejs12 This update for nodejs12 fixes the following issues:
- CVE-2023-23920: Fixed insecure loading of ICU data through ICU_DATA environment (bsc#1208487).
Update to 12.22.12-150200.4.44.1 Published March 8, 2023 Updated February 4, 2026
Security update for nodejs12 This update for nodejs12 fixes the following issues:
- CVE-2022-43548: Fixed DNS rebinding in --inspect via invalid octal IP address (bsc#1205119).
Update to 12.22.12-150200.4.41.2 Published November 28, 2022 Updated February 4, 2026
Security update for nodejs12 This update for nodejs12 fixes the following issues:
- CVE-2022-32212: Fixed DNS rebinding in --inspect via invalid IP addresses (bsc#1201328).
- CVE-2022-32213: Fixed HTTP request smuggling due to flawed parsing of Transfer-Encoding (bsc#1201325).
- CVE-2022-32214: Fixed HTTP request smuggling due to improper delimiting of header fields (bsc#1201326).
- CVE-2022-32215: Fixed HTTP request smuggling due to incorrect parsing of multi-line Transfer-Encoding (bsc#1201327).
Update to 12.22.12-150200.4.35.1 Published July 18, 2022 Updated February 4, 2026
Security update for nodejs12 This update for nodejs12 fixes the following issues:
- CVE-2022-0778: Fixed a infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
- CVE-2021-44906: Fixed a prototype pollution in node-minimist (bsc#1198247).
- CVE-2021-44907: Fixed a potential Denial of Service vulnerability in node-qs (bsc#1197283).
- CVE-2022-0235: Fixed an exposure of sensitive information to an unauthorized actor in node-fetch (bsc#1194819).
Update to 12.22.12-150200.4.32.1 Published April 28, 2022 Updated May 2, 2025
Security update for nodejs12 This update for nodejs12 fixes the following issues:
- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).
- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).
- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).
- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).
- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (b
Update to 12.22.10-4.29.3 Published March 2, 2022 Updated February 4, 2026
Check your server Check your installed stack and versions against the current vulnerability feeds.
Check your server →