Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2021-22930 — CRITICAL severity vulnerability | Release Alert

CVE-2021-22930

9.8

CRITICALCVSS v3

Published

October 7, 2021

CVSS v2

7.5 HIGH

Affected

10 projects

Assigned by

[email protected]

Severity scale

010

Description

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

@externs/nodejs

NPMThe Closure Compiler Externs For Node.JS.

>= 16.0.0, < 16.6.0, >= 14.0.0, < 14.17.4, >= 12.0.0, < 12.22.4NVD

GitHubThe Externs For Node.JS.

>= 16.0.0, < 16.6.0, >= 14.0.0, < 14.17.4, >= 12.0.0, < 12.22.4NVD

NPM

More on this CVE

NVD↗GitHub Advisory↗

Mocks Of Built-In Node.JS Modules To Use For Compilation.

>= 16.0.0, < 16.6.0, >= 14.0.0, < 14.17.4, >= 12.0.0, < 12.22.4NVD

@opencensus/nodejs

NPMOpenCensus is a toolkit for collecting application performance and behavior data.

>= 16.0.0, < 16.6.0, >= 14.0.0, < 14.17.4, >= 12.0.0, < 12.22.4NVD

GitHubMocks Of Built-In Node.JS Modules To Use For Compilation.

>= 16.0.0, < 16.6.0, >= 14.0.0, < 14.17.4, >= 12.0.0, < 12.22.4NVD

Python Package IndexPython bindings and utils for Node.js and io.js

>= 16.0.0, < 16.6.0, >= 14.0.0, < 14.17.4, >= 12.0.0, < 12.22.4NVD

NPM

>= 16.0.0, < 16.6.0, >= 14.0.0, < 14.17.4, >= 12.0.0, < 12.22.4NVD

Crates.ioEmbedding Node.js in Rust

>= 16.0.0, < 16.6.0, >= 14.0.0, < 14.17.4, >= 12.0.0, < 12.22.4NVD

NPMsecurity holding package

>= 16.0.0, < 16.6.0, >= 14.0.0, < 14.17.4, >= 12.0.0, < 12.22.4NVD

NuGet GalleryNode.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient. Node.js' package ecosystem, npm, is the largest ecosystem of open source libraries in the world.

>= 16.0.0, < 16.6.0, >= 14.0.0, < 14.17.4, >= 12.0.0, < 12.22.4NVD