Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

releasealert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2021-3672 — MEDIUM severity vulnerability | Release Alert

CVE-2021-3672

5.6

MEDIUMCVSS v3

Published

November 23, 2021

CVSS v2

6.8 MEDIUM

Affected

21 projects

Assigned by

Red Hat

Severity scale

010

Description

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.

@externs/nodejs

NPMThe Closure Compiler Externs For Node.JS.

>= 16.0.0, < 16.6.2, >= 14.0.0, <= 14.14.0, >= 12.13.0, < 12.22.5, >= 12.0.0, <= 12.12.0, >= 14.15.0, < 14.17.5NVD

externs/nodejs

GitHubThe Externs For Node.JS.

>= 16.0.0, < 16.6.2, >= 14.0.0, <= 14.14.0, >= 12.13.0, < 12.22.5, >= 12.0.0, <= 12.12.0, >= 14.15.0, < 14.17.5NVD

@depack/nodejs

More on this CVE

NVD↗GitHub Advisory↗

NPM

Mocks Of Built-In Node.JS Modules To Use For Compilation.

>= 16.0.0, < 16.6.2, >= 14.0.0, <= 14.14.0, >= 12.13.0, < 12.22.5, >= 12.0.0, <= 12.12.0, >= 14.15.0, < 14.17.5NVD

@opencensus/nodejs

NPMOpenCensus is a toolkit for collecting application performance and behavior data.

>= 16.0.0, < 16.6.2, >= 14.0.0, <= 14.14.0, >= 12.13.0, < 12.22.5, >= 12.0.0, <= 12.12.0, >= 14.15.0, < 14.17.5NVD

dpck/nodejs

GitHubMocks Of Built-In Node.JS Modules To Use For Compilation.

>= 16.0.0, < 16.6.2, >= 14.0.0, <= 14.14.0, >= 12.13.0, < 12.22.5, >= 12.0.0, <= 12.12.0, >= 14.15.0, < 14.17.5NVD

c-ares/c-ares

GitHubA C library for asynchronous DNS requests

>= 1.0.0, < 1.17.2NVD

pgbouncer/pgbouncer

GitHublightweight connection pooler for PostgreSQL

<= 1.17.0NVD

nodejs

Python Package IndexPython bindings and utils for Node.js and io.js

>= 16.0.0, < 16.6.2, >= 14.0.0, <= 14.14.0, >= 12.13.0, < 12.22.5, >= 12.0.0, <= 12.12.0, >= 14.15.0, < 14.17.5NVD

nodejs

NPM

>= 16.0.0, < 16.6.2, >= 14.0.0, <= 14.14.0, >= 12.13.0, < 12.22.5, >= 12.0.0, <= 12.12.0, >= 14.15.0, < 14.17.5NVD

nodejs

Crates.ioEmbedding Node.js in Rust

>= 16.0.0, < 16.6.2, >= 14.0.0, <= 14.14.0, >= 12.13.0, < 12.22.5, >= 12.0.0, <= 12.12.0, >= 14.15.0, < 14.17.5NVD

node.js

NPMsecurity holding package

>= 16.0.0, < 16.6.2, >= 14.0.0, <= 14.14.0, >= 12.13.0, < 12.22.5, >= 12.0.0, <= 12.12.0, >= 14.15.0, < 14.17.5NVD

Node.js

NuGet GalleryNode.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient. Node.js' package ecosystem, npm, is the largest ecosystem of open source libraries in the world.

>= 16.0.0, < 16.6.2, >= 14.0.0, <= 14.14.0, >= 12.13.0, < 12.22.5, >= 12.0.0, <= 12.12.0, >= 14.15.0, < 14.17.5NVD

pgbouncer

Python Package IndexFixture to bring up temporary pgbouncer instance.

<= 1.17.0NVD

pgbouncer

NPMWrapper of pgbouncer service

<= 1.17.0NVD

Tabcorp/pgbouncer

GitHubNode wrapper for pgbouncer

<= 1.17.0NVD