Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2022-32212 — HIGH severity vulnerability | Release Alert

CVE-2022-32212

8.1

HIGHCVSS v3

Published

July 14, 2022

Affected

15 projects

Assigned by

[email protected]

Severity scale

010

Description

A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.

@externs/nodejs

NPMThe Closure Compiler Externs For Node.JS.

>= 18.0.0, < 18.5.0, >= 14.0.0, <= 14.14.0, >= 16.0.0, <= 16.12.0, >= 14.15.0, < 14.20.1, >= 16.13.0, < 16.17.1NVD

GitHubThe Externs For Node.JS.

>= 18.0.0, < 18.5.0, >= 14.0.0, <= 14.14.0, >= 16.0.0, <= 16.12.0, >= 14.15.0, < 14.20.1, >= 16.13.0, < 16.17.1NVD

More on this CVE

NVD↗GitHub Advisory↗

NPM

Mocks Of Built-In Node.JS Modules To Use For Compilation.

>= 18.0.0, < 18.5.0, >= 14.0.0, <= 14.14.0, >= 16.0.0, <= 16.12.0, >= 14.15.0, < 14.20.1, >= 16.13.0, < 16.17.1NVD

@opencensus/nodejs

NPMOpenCensus is a toolkit for collecting application performance and behavior data.

>= 18.0.0, < 18.5.0, >= 14.0.0, <= 14.14.0, >= 16.0.0, <= 16.12.0, >= 14.15.0, < 14.20.1, >= 16.13.0, < 16.17.1NVD

GitHubMocks Of Built-In Node.JS Modules To Use For Compilation.

>= 18.0.0, < 18.5.0, >= 14.0.0, <= 14.14.0, >= 16.0.0, <= 16.12.0, >= 14.15.0, < 14.20.1, >= 16.13.0, < 16.17.1NVD

Python Package IndexPython bindings and utils for Node.js and io.js

>= 18.0.0, < 18.5.0, >= 14.0.0, <= 14.14.0, >= 16.0.0, <= 16.12.0, >= 14.15.0, < 14.20.1, >= 16.13.0, < 16.17.1NVD

NPM

>= 18.0.0, < 18.5.0, >= 14.0.0, <= 14.14.0, >= 16.0.0, <= 16.12.0, >= 14.15.0, < 14.20.1, >= 16.13.0, < 16.17.1NVD

Crates.ioEmbedding Node.js in Rust

>= 18.0.0, < 18.5.0, >= 14.0.0, <= 14.14.0, >= 16.0.0, <= 16.12.0, >= 14.15.0, < 14.20.1, >= 16.13.0, < 16.17.1NVD

NPMsecurity holding package

>= 18.0.0, < 18.5.0, >= 14.0.0, <= 14.14.0, >= 16.0.0, <= 16.12.0, >= 14.15.0, < 14.20.1, >= 16.13.0, < 16.17.1NVD

NuGet GalleryNode.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient. Node.js' package ecosystem, npm, is the largest ecosystem of open source libraries in the world.

>= 18.0.0, < 18.5.0, >= 14.0.0, <= 14.14.0, >= 16.0.0, <= 16.12.0, >= 14.15.0, < 14.20.1, >= 16.13.0, < 16.17.1NVD

Crates.ioBase library for interacting with Fedora web services

= 35, = 36, = 37NVD

Python Package IndexPlaceholder for the fedora name

= 35, = 36, = 37NVD

Docker HubOfficial Docker builds of Fedora

= 35, = 36, = 37NVD

NPMDigital Repository Ireland - fedora backend operations

= 35, = 36, = 37NVD

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 35, = 36, = 37NVD