{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated images are now available for Red Hat Advanced Cluster Security for\nKubernetes (RHACS).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The release of RHACS 3.67 provides the following new features, bug fixes, security patches and system changes:\n\nOpenShift Dedicated support\n\nRHACS 3.67 is thoroughly tested and supported on OpenShift Dedicated on Amazon Web Services and Google Cloud Platform.\n\n1. Use OpenShift OAuth server as an identity provider\nIf you are using RHACS with OpenShift, you can now configure the built-in OpenShift OAuth server as an identity provider for RHACS. \n\n2. Enhancements for CI outputs\nRed Hat has improved the usability of RHACS CI integrations. CI outputs now show additional detailed information about the vulnerabilities and the security policies responsible for broken builds.\n\n3. Runtime Class policy criteria\nUsers can now use RHACS to define the container runtime configuration that may be used to run a pod\u2019s containers using the Runtime Class policy criteria.\n\nSecurity Fix(es):\n\n* civetweb: directory traversal when using the built-in example HTTP form-based file upload mechanism via the mg_handle_form_request API (CVE-2020-27304)\n\n* nodejs-axios: Regular expression denial of service in trim function (CVE-2021-3749)\n\n* nodejs-prismjs: ReDoS vulnerability (CVE-2021-3801)\n\n* golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet (CVE-2021-29923)\n\n* helm: information disclosure vulnerability (CVE-2021-32690)\n\n* golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196) (CVE-2021-39293)\n\n* nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe (CVE-2021-23343)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fixes\nThe release of RHACS 3.67 includes the following bug fixes:\n\n1. Previously, when using RHACS with the Compliance Operator integration, RHACS did not respect or populate Compliance Operator TailoredProfiles. This has been fixed.\n\n2. Previously, the Alpine Linux package manager (APK) in Image policy looked for the presence of apk package in the image rather than the apk-tools package. This issue has been fixed.\n\nSystem changes\nThe release of RHACS 3.67 includes the following system changes:\n\n1. Scanner now identifies vulnerabilities in Ubuntu 21.10 images.\n2. The Port exposure method policy criteria now include route as an exposure method.\n3. The OpenShift: Kubeadmin Secret Accessed security policy now allows the OpenShift Compliance Operator to check for the existence of the Kubeadmin secret without creating a violation.\n4. The OpenShift Compliance Operator integration now supports using TailoredProfiles.\n5. The RHACS Jenkins plugin now provides additional security information.\n6. When you enable the environment variable ROX_NETWORK_ACCESS_LOG for Central, the logs contain the Request URI and X-Forwarded-For header values.\n7. The default uid:gid pair for the Scanner image is now 65534:65534.\n8. RHACS adds a new default Scope Manager role that includes minimum permissions to create and modify access scopes.\n9. If microdnf is part of an image or shows up in process execution, RHACS reports it as a security violation for the Red Hat Package Manager in Image or the Red Hat Package Manager Execution security policies.\n10. In addition to manually uploading vulnerability definitions in offline mode, you can now upload definitions in online mode. \n11. You can now format the output of the following roxctl CLI commands in table, csv, or JSON format: image scan, image check \u0026 deployment check\n12. You can now use a regular expression for the deployment name while specifying policy exclusions",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2021:4902",
        "url": "https://access.redhat.com/errata/RHSA-2021:4902"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "1956818",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1956818"
      },
      {
        "category": "external",
        "summary": "1978144",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1978144"
      },
      {
        "category": "external",
        "summary": "1992006",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1992006"
      },
      {
        "category": "external",
        "summary": "1999784",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1999784"
      },
      {
        "category": "external",
        "summary": "2005445",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005445"
      },
      {
        "category": "external",
        "summary": "2006044",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2006044"
      },
      {
        "category": "external",
        "summary": "2016640",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2016640"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4902.json"
      }
    ],
    "title": "Red Hat Security Advisory: ACS 3.67 security and enhancement update",
    "tracking": {
      "current_release_date": "2026-05-14T22:31:51+00:00",
      "generator": {
        "date": "2026-05-14T22:31:51+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.0"
        }
      },
      "id": "RHSA-2021:4902",
      "initial_release_date": "2021-12-01T17:22:46+00:00",
      "revision_history": [
        {
          "date": "2021-12-01T17:22:46+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2021-12-01T17:22:46+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-14T22:31:51+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "RHACS 3.67 for RHEL 8",
                "product": {
                  "name": "RHACS 3.67 for RHEL 8",
                  "product_id": "8Base-RHACS-3.67",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:advanced_cluster_security:3.67::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Advanced Cluster Security for Kubernetes"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64",
                  "product_id": "advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=3.67.0-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64",
                  "product_id": "advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=3.67.0-3"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64 as a component of RHACS 3.67 for RHEL 8",
          "product_id": "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64",
        "relates_to_product_reference": "8Base-RHACS-3.67"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64 as a component of RHACS 3.67 for RHEL 8",
          "product_id": "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64",
        "relates_to_product_reference": "8Base-RHACS-3.67"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-27304",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2021-10-21T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2016640"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A remote code execution vulnerability was found in CivetWeb (embeddable web server/library). Due to a directory traversal issue, an attacker is able to add or overwrite files that are subsequently executed which lead to impact to confidentiality, integrity, and availability of the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "civetweb: directory traversal when using the built-in example HTTP form-based file upload mechanism via the mg_handle_form_request API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue only impacts CivetWeb-based web applications that use the built-in file upload form handler (full working example in the \u201cembedded_c\u201d example in the CivetWeb sources).\n\nRed Hat Advanced Cluster Security includes code from CivetWeb in the Collector component, however it does not use the file upload form handler, hence is not impacted by this vulnerability. This vulnerability is rated Low for Red Hat Advanced Cluster Security.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
        ],
        "known_not_affected": [
          "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-27304"
        },
        {
          "category": "external",
          "summary": "RHBZ#2016640",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2016640"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-27304",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-27304"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-27304",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-27304"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/civetweb/c/yPBxNXdGgJQ",
          "url": "https://groups.google.com/g/civetweb/c/yPBxNXdGgJQ"
        },
        {
          "category": "external",
          "summary": "https://jfrog.com/blog/cve-2020-27304-rce-via-directory-traversal-in-civetweb-http-server/",
          "url": "https://jfrog.com/blog/cve-2020-27304-rce-via-directory-traversal-in-civetweb-http-server/"
        }
      ],
      "release_date": "2021-10-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-12-01T17:22:46+00:00",
          "details": "To take advantage of these new features, fixes and changes, please upgrade Red Hat Advanced Cluster Security for Kubernetes to version 3.67.",
          "product_ids": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:4902"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64",
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "civetweb: directory traversal when using the built-in example HTTP form-based file upload mechanism via the mg_handle_form_request API"
    },
    {
      "cve": "CVE-2021-3749",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2021-08-31T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1999784"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Regular Expression Denial of Service (ReDoS) vulnerability was found in the nodejs axios. This flaw allows an attacker to provide crafted input to the trim function, which might cause high resources consumption and as a consequence lead to denial of service. The highest threat from this vulnerability is system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs-axios: Regular expression denial of service in trim function",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "* OpenShift Container Platform (OCP) grafana-container does package a vulnerable version of nodejs axios. However, due to the instance being read only and behind OpenShift OAuth, the impact of this vulnerability is Low.\n\n* Red Hat Advanced Cluster Management for Kubernetes (RHACM) 2.1 and previous versions does contain a vulnerable version of nodejs axios, RHACM 2.2 on towards are not affected versions. For RHACM 2.1, due to the instance being read only and behind OAuth, the impact of this vulnerability is Low.\n\n* Because Service Telemetry Framework 1.2 will be retiring soon and the flaw\u0027s impact is lower, no update will be provided at this time for STF\u0027s service-telemetry-operator-container and smart-gateway-operator-container.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
        ],
        "known_not_affected": [
          "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-3749"
        },
        {
          "category": "external",
          "summary": "RHBZ#1999784",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1999784"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3749",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-3749"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3749",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3749"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/commit/5b457116e31db0e88fede6c428e969e87f290929",
          "url": "https://github.com/axios/axios/commit/5b457116e31db0e88fede6c428e969e87f290929"
        },
        {
          "category": "external",
          "summary": "https://huntr.dev/bounties/1e8f07fc-c384-4ff9-8498-0690de2e8c31",
          "url": "https://huntr.dev/bounties/1e8f07fc-c384-4ff9-8498-0690de2e8c31"
        }
      ],
      "release_date": "2021-08-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-12-01T17:22:46+00:00",
          "details": "To take advantage of these new features, fixes and changes, please upgrade Red Hat Advanced Cluster Security for Kubernetes to version 3.67.",
          "product_ids": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:4902"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64",
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "nodejs-axios: Regular expression denial of service in trim function"
    },
    {
      "cve": "CVE-2021-3801",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2021-09-15T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2005445"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient Regular Expression Complexity in prismjs leads to a Regular Expression Denial of Service (ReDoS) attack. An unauthenticated attacker can exploit this flaw to cause an application to consume an excess amount of CPU by providing a crafted HTML comment as input. This can result in a denial of service attack.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs-prismjs: ReDoS vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform (OCP) grafana-container does package a vulnerable verison of prismjs. However due to the instance being read only and behind OpenShift OAuth, it has been given a Low impact. Additionally it has been marked as wont-fix at this time and may be fixed in a future release.\n\nJust as OCP, OpenShift ServiceMesh (OSSM) components are behind OpenShift OAuth what reducing impact to Low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
        ],
        "known_not_affected": [
          "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-3801"
        },
        {
          "category": "external",
          "summary": "RHBZ#2005445",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005445"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3801",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-3801"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3801",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3801"
        }
      ],
      "release_date": "2021-09-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-12-01T17:22:46+00:00",
          "details": "To take advantage of these new features, fixes and changes, please upgrade Red Hat Advanced Cluster Security for Kubernetes to version 3.67.",
          "product_ids": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:4902"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64",
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "nodejs-prismjs: ReDoS vulnerability"
    },
    {
      "cve": "CVE-2021-23343",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2021-05-04T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1956818"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in nodejs-path-parse. All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In Red Had Quay , whilst a vulnerable version of `path-parse` is included in the quay-rhel8 container it is a development dependency only, hence the impact by this vulnerability is low.\n\nIn OpenShift Container Platform (OCP), the hadoop component which is a part of the OCP metering stack, ships the vulnerable version of \u0027path-parse\u0027.\nSince the release of OCP 4.6, the metering product has been deprecated [1], hence the affected component is marked as wontfix.\nThis may be fixed in the future.\n\nIn Red Hat OpenShift Container Storage 4 the noobaa-core container includes the affected version of `path-parse`, however the vulnerable functionality is currently not used in any part of the product.\n\nIn Red Hat Virtualization cockpit-ovirt, ovirt-engine-ui-extensions and ovirt-web-ui use vulnerable version of `path-parse`, however for cockpit-ovirt it is a development time dependency only, and for ovirt-engine-ui-extensions and ovirt-web-ui the vulnerable functions are never used.\n\n[1] https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html#ocp-4-6-metering-operator-deprecated",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
        ],
        "known_not_affected": [
          "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-23343"
        },
        {
          "category": "external",
          "summary": "RHBZ#1956818",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1956818"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-23343",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-23343"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-23343",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23343"
        },
        {
          "category": "external",
          "summary": "https://snyk.io/vuln/SNYK-JS-PATHPARSE-1077067",
          "url": "https://snyk.io/vuln/SNYK-JS-PATHPARSE-1077067"
        }
      ],
      "release_date": "2021-05-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-12-01T17:22:46+00:00",
          "details": "To take advantage of these new features, fixes and changes, please upgrade Red Hat Advanced Cluster Security for Kubernetes to version 3.67.",
          "product_ids": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:4902"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64",
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe"
    },
    {
      "cve": "CVE-2021-29923",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2021-08-07T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1992006"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang. Extraneous zero characters at the beginning of an IP address octet are not properly considered which could allow an attacker to bypass IP-based access controls. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability potentially affects any component written in Go that uses the net standard library and ParseIP / ParseCIDR functions. There are components which might not use these functions or might use them to parse IP addresses and not manage them in any way (only store information about the ip address) . This reduces the severity of this vulnerability to Low for the following offerings:\n* OpenShift distributed tracing (formerly OpenShift Jaeger)\n* OpenShift Migration Toolkit for Containers\n* OpenShift Container Platform",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
        ],
        "known_not_affected": [
          "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-29923"
        },
        {
          "category": "external",
          "summary": "RHBZ#1992006",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1992006"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-29923",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-29923"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-29923",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-29923"
        },
        {
          "category": "external",
          "summary": "https://sick.codes/sick-2021-016/",
          "url": "https://sick.codes/sick-2021-016/"
        }
      ],
      "release_date": "2021-03-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-12-01T17:22:46+00:00",
          "details": "To take advantage of these new features, fixes and changes, please upgrade Red Hat Advanced Cluster Security for Kubernetes to version 3.67.",
          "product_ids": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:4902"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64",
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64",
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet"
    },
    {
      "cve": "CVE-2021-32690",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2021-06-17T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1978144"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was discovered in Helm, which could allow credentials associated with one Helm repository to be leaked to another repository referenced by the first one.  In order to exploit this vulnerability, an attacker would need to control a repository trusted by the configuration of the target Helm instance.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "helm: information disclosure vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Advanced Cluster Management for Kubernetes:\n\nIn Red Hat Advanced Cluster Management for Kubernetes (RHACM) the affected components are using helm chart provided by the installer, so components are not using untrusted charts except in the application-lifecycle area. For this reason we marked the impact as low. For RHACM, the credentials could be leaked only when a helm chart is stored in a domain other than the helm repository itself. In practice, this rarely happens as the chart is stored in the same helm repository. For example, this chart in the helm repo https://charts.helm.sh/stable/index.yaml references only charts stored in the same domain (charts.heml.sh). From version, 2.2 onwards, multicloud-operators-placementrule and multicloud-operators-deployable do not use helm at all.\n\nOpenShift Developer Tools and Services:\n\nThe OpenShift Helm team has analyzed this CVE and we have come to the conclusion that this only affects OpenShift Helm customers that use the CLI to install and update charts. It does not affect customers that use the OpenShift Console to install and update charts. To mitigate this issue, customers can refresh their Helm cli by following the Red Had official Helm install guide here: https://docs.openshift.com/container-platform/4.7/cli_reference/helm_cli/getting-started-with-helm-on-openshift-container-platform.html#installing-helm_getting-started-with-helm-on-openshift. The mirror (https://mirror.openshift.com/pub/openshift-v4/clients/helm/latest/) have already been updated with helm 3.6.2 which contains the fix for this CVE.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
        ],
        "known_not_affected": [
          "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-32690"
        },
        {
          "category": "external",
          "summary": "RHBZ#1978144",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1978144"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-32690",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-32690"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-32690",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32690"
        },
        {
          "category": "external",
          "summary": "https://github.com/helm/helm/security/advisories/GHSA-56hp-xqp3-w2jf",
          "url": "https://github.com/helm/helm/security/advisories/GHSA-56hp-xqp3-w2jf"
        }
      ],
      "release_date": "2021-06-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-12-01T17:22:46+00:00",
          "details": "To take advantage of these new features, fixes and changes, please upgrade Red Hat Advanced Cluster Security for Kubernetes to version 3.67.",
          "product_ids": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:4902"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64",
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "helm: information disclosure vulnerability"
    },
    {
      "cve": "CVE-2021-39293",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2021-09-17T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2006044"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in archive/zip of the Go standard library. Applications written in Go can panic or potentially exhaust system memory when parsing malformed ZIP files. An attacker capable of submitting a crafted ZIP file to a Go application using archive/zip to process that file could cause a denial of service via memory exhaustion or panic. This particular flaw is an incomplete fix for a previous flaw.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "* In OpenShift Container Platform, multiple components are written in Go and use archive/zip from the standard library. However, all such components are short lived client side tools, not long lived server side executables. As the maximum impact of this vulnerability is a denial of service in client utilities, this vulnerability is rated Low for OpenShift Container Platform.\n\n* This flaw is out of support scope for Red Hat Enterprise Linux 7. For more information about Red Hat Enterprise Linux support scope, please see https://access.redhat.com/support/policy/updates/errata\n\n* Because Service Telemetry Framework1.2 will be retiring soon and the flaw\u0027s impact is lower, no update will be provided at this time for STF1.2\u0027s smart-gateway-container and sg-core-container.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
        ],
        "known_not_affected": [
          "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-39293"
        },
        {
          "category": "external",
          "summary": "RHBZ#2006044",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2006044"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-39293",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39293"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-39293",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39293"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/dx9d7IOseHw",
          "url": "https://groups.google.com/g/golang-announce/c/dx9d7IOseHw"
        }
      ],
      "release_date": "2021-08-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-12-01T17:22:46+00:00",
          "details": "To take advantage of these new features, fixes and changes, please upgrade Red Hat Advanced Cluster Security for Kubernetes to version 3.67.",
          "product_ids": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:4902"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-operator-bundle@sha256:9629a16f4009d48e580bc389d632a43c698ffd53c74364293fcf035a4c944382_amd64",
            "8Base-RHACS-3.67:advanced-cluster-security/rhacs-rhel8-operator@sha256:bf785fa6b8f22a473d1cc58aa9877f41f1161fef360883fee385c4ae421840e2_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196)"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for nodejs12",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for nodejs12 fixes the following issues:\n\n- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).                                                                                                                                                 \n- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).                                                                                                           \n- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).                                                                                                   \n- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).                                                                                                                        \n- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2022-531,SUSE-SLE-Module-Web-Scripting-12-2022-531",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_0531-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2022:0531-1",
        "url": "https://www.suse.com/support/update/announcement/2022/suse-su-20220531-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2022:0531-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-February/010279.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191962",
        "url": "https://bugzilla.suse.com/1191962"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191963",
        "url": "https://bugzilla.suse.com/1191963"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1192153",
        "url": "https://bugzilla.suse.com/1192153"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1192154",
        "url": "https://bugzilla.suse.com/1192154"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1192696",
        "url": "https://bugzilla.suse.com/1192696"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-23343 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-23343/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32803 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32803/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32804 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32804/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-3807 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-3807/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-3918 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-3918/"
      }
    ],
    "title": "Security update for nodejs12",
    "tracking": {
      "current_release_date": "2022-02-21T08:23:42Z",
      "generator": {
        "date": "2022-02-21T08:23:42Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2022:0531-1",
      "initial_release_date": "2022-02-21T08:23:42Z",
      "revision_history": [
        {
          "date": "2022-02-21T08:23:42Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs12-12.22.10-1.42.2.aarch64",
                "product": {
                  "name": "nodejs12-12.22.10-1.42.2.aarch64",
                  "product_id": "nodejs12-12.22.10-1.42.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs12-devel-12.22.10-1.42.2.aarch64",
                "product": {
                  "name": "nodejs12-devel-12.22.10-1.42.2.aarch64",
                  "product_id": "nodejs12-devel-12.22.10-1.42.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "npm12-12.22.10-1.42.2.aarch64",
                "product": {
                  "name": "npm12-12.22.10-1.42.2.aarch64",
                  "product_id": "npm12-12.22.10-1.42.2.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs12-12.22.10-1.42.2.i586",
                "product": {
                  "name": "nodejs12-12.22.10-1.42.2.i586",
                  "product_id": "nodejs12-12.22.10-1.42.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs12-devel-12.22.10-1.42.2.i586",
                "product": {
                  "name": "nodejs12-devel-12.22.10-1.42.2.i586",
                  "product_id": "nodejs12-devel-12.22.10-1.42.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "npm12-12.22.10-1.42.2.i586",
                "product": {
                  "name": "npm12-12.22.10-1.42.2.i586",
                  "product_id": "npm12-12.22.10-1.42.2.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs12-docs-12.22.10-1.42.2.noarch",
                "product": {
                  "name": "nodejs12-docs-12.22.10-1.42.2.noarch",
                  "product_id": "nodejs12-docs-12.22.10-1.42.2.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs12-12.22.10-1.42.2.ppc64le",
                "product": {
                  "name": "nodejs12-12.22.10-1.42.2.ppc64le",
                  "product_id": "nodejs12-12.22.10-1.42.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs12-devel-12.22.10-1.42.2.ppc64le",
                "product": {
                  "name": "nodejs12-devel-12.22.10-1.42.2.ppc64le",
                  "product_id": "nodejs12-devel-12.22.10-1.42.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "npm12-12.22.10-1.42.2.ppc64le",
                "product": {
                  "name": "npm12-12.22.10-1.42.2.ppc64le",
                  "product_id": "npm12-12.22.10-1.42.2.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs12-12.22.10-1.42.2.s390x",
                "product": {
                  "name": "nodejs12-12.22.10-1.42.2.s390x",
                  "product_id": "nodejs12-12.22.10-1.42.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs12-devel-12.22.10-1.42.2.s390x",
                "product": {
                  "name": "nodejs12-devel-12.22.10-1.42.2.s390x",
                  "product_id": "nodejs12-devel-12.22.10-1.42.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "npm12-12.22.10-1.42.2.s390x",
                "product": {
                  "name": "npm12-12.22.10-1.42.2.s390x",
                  "product_id": "npm12-12.22.10-1.42.2.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs12-12.22.10-1.42.2.x86_64",
                "product": {
                  "name": "nodejs12-12.22.10-1.42.2.x86_64",
                  "product_id": "nodejs12-12.22.10-1.42.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs12-devel-12.22.10-1.42.2.x86_64",
                "product": {
                  "name": "nodejs12-devel-12.22.10-1.42.2.x86_64",
                  "product_id": "nodejs12-devel-12.22.10-1.42.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "npm12-12.22.10-1.42.2.x86_64",
                "product": {
                  "name": "npm12-12.22.10-1.42.2.x86_64",
                  "product_id": "npm12-12.22.10-1.42.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Web and Scripting 12",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Web and Scripting 12",
                  "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-web-scripting:12"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs12-12.22.10-1.42.2.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64"
        },
        "product_reference": "nodejs12-12.22.10-1.42.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs12-12.22.10-1.42.2.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le"
        },
        "product_reference": "nodejs12-12.22.10-1.42.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs12-12.22.10-1.42.2.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x"
        },
        "product_reference": "nodejs12-12.22.10-1.42.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs12-12.22.10-1.42.2.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64"
        },
        "product_reference": "nodejs12-12.22.10-1.42.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs12-devel-12.22.10-1.42.2.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64"
        },
        "product_reference": "nodejs12-devel-12.22.10-1.42.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs12-devel-12.22.10-1.42.2.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le"
        },
        "product_reference": "nodejs12-devel-12.22.10-1.42.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs12-devel-12.22.10-1.42.2.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x"
        },
        "product_reference": "nodejs12-devel-12.22.10-1.42.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs12-devel-12.22.10-1.42.2.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64"
        },
        "product_reference": "nodejs12-devel-12.22.10-1.42.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs12-docs-12.22.10-1.42.2.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch"
        },
        "product_reference": "nodejs12-docs-12.22.10-1.42.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm12-12.22.10-1.42.2.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64"
        },
        "product_reference": "npm12-12.22.10-1.42.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm12-12.22.10-1.42.2.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le"
        },
        "product_reference": "npm12-12.22.10-1.42.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm12-12.22.10-1.42.2.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x"
        },
        "product_reference": "npm12-12.22.10-1.42.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm12-12.22.10-1.42.2.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
        },
        "product_reference": "npm12-12.22.10-1.42.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-23343",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-23343"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-23343",
          "url": "https://www.suse.com/security/cve/CVE-2021-23343"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1192153 for CVE-2021-23343",
          "url": "https://bugzilla.suse.com/1192153"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-21T08:23:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-23343"
    },
    {
      "cve": "CVE-2021-32803",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32803"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The npm package \"tar\" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection. `node-tar` aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted directories are not symlinks. Additionally, in order to prevent unnecessary `stat` calls to determine whether a given path is a directory, paths are cached when directories are created. This logic was insufficient when extracting tar files that contained both a directory and a symlink with the same name as the directory. This order of operations resulted in the directory being created and added to the `node-tar` directory cache. When a directory is present in the directory cache, subsequent calls to mkdir for that directory are skipped. However, this is also where `node-tar` checks for symlinks occur. By first creating a directory, and then replacing that directory with a symlink, it was thus possible to bypass `node-tar` symlink checks on directories, essentially allowing an untrusted tar file to symlink into an arbitrary location and subsequently extracting arbitrary files into that location, thus allowing arbitrary file creation and overwrite. This issue was addressed in releases 3.2.3, 4.4.15, 5.0.7 and 6.1.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32803",
          "url": "https://www.suse.com/security/cve/CVE-2021-32803"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191962 for CVE-2021-32803",
          "url": "https://bugzilla.suse.com/1191962"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191963 for CVE-2021-32803",
          "url": "https://bugzilla.suse.com/1191963"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-21T08:23:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-32803"
    },
    {
      "cve": "CVE-2021-32804",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32804"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The npm package \"tar\" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization. node-tar aims to prevent extraction of absolute file paths by turning absolute paths into relative paths when the `preservePaths` flag is not set to `true`. This is achieved by stripping the absolute path root from any absolute file paths contained in a tar file. For example `/home/user/.bashrc` would turn into `home/user/.bashrc`. This logic was insufficient when file paths contained repeated path roots such as `////home/user/.bashrc`. `node-tar` would only strip a single path root from such paths. When given an absolute file path with repeating path roots, the resulting path (e.g. `///home/user/.bashrc`) would still resolve to an absolute path, thus allowing arbitrary file creation and overwrite. This issue was addressed in releases 3.2.2, 4.4.14, 5.0.6 and 6.1.1. Users may work around this vulnerability without upgrading by creating a custom `onentry` method which sanitizes the `entry.path` or a `filter` method which removes entries with absolute paths. See referenced GitHub Advisory for details. Be aware of CVE-2021-32803 which fixes a similar bug in later versions of tar.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32804",
          "url": "https://www.suse.com/security/cve/CVE-2021-32804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191962 for CVE-2021-32804",
          "url": "https://bugzilla.suse.com/1191962"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-21T08:23:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-32804"
    },
    {
      "cve": "CVE-2021-3807",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-3807"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ansi-regex is vulnerable to Inefficient Regular Expression Complexity",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-3807",
          "url": "https://www.suse.com/security/cve/CVE-2021-3807"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1192154 for CVE-2021-3807",
          "url": "https://bugzilla.suse.com/1192154"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-21T08:23:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-3807"
    },
    {
      "cve": "CVE-2021-3918",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-3918"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-3918",
          "url": "https://www.suse.com/security/cve/CVE-2021-3918"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1192696 for CVE-2021-3918",
          "url": "https://bugzilla.suse.com/1192696"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.22.10-1.42.2.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.22.10-1.42.2.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.22.10-1.42.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-21T08:23:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-3918"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for nodejs8",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for nodejs8 fixes the following issues:\n\t  \n- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).\n- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).\n- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).\n- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).\n- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2022-563,SUSE-SLE-Product-HPC-15-2022-563,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-563,SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-563,SUSE-SLE-Product-SLES-15-2022-563,SUSE-SLE-Product-SLES-15-SP1-BCL-2022-563,SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-563,SUSE-SLE-Product-SLES_SAP-15-2022-563,SUSE-SLE-Product-SLES_SAP-15-SP1-2022-563,SUSE-Storage-6-2022-563",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_0563-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2022:0563-1",
        "url": "https://www.suse.com/support/update/announcement/2022/suse-su-20220563-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2022:0563-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-February/010304.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191962",
        "url": "https://bugzilla.suse.com/1191962"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191963",
        "url": "https://bugzilla.suse.com/1191963"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1192153",
        "url": "https://bugzilla.suse.com/1192153"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1192154",
        "url": "https://bugzilla.suse.com/1192154"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1192696",
        "url": "https://bugzilla.suse.com/1192696"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-23343 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-23343/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32803 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32803/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32804 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32804/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-3807 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-3807/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-3918 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-3918/"
      }
    ],
    "title": "Security update for nodejs8",
    "tracking": {
      "current_release_date": "2022-02-24T07:38:40Z",
      "generator": {
        "date": "2022-02-24T07:38:40Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2022:0563-1",
      "initial_release_date": "2022-02-24T07:38:40Z",
      "revision_history": [
        {
          "date": "2022-02-24T07:38:40Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs8-8.17.0-3.54.2.aarch64",
                "product": {
                  "name": "nodejs8-8.17.0-3.54.2.aarch64",
                  "product_id": "nodejs8-8.17.0-3.54.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs8-devel-8.17.0-3.54.2.aarch64",
                "product": {
                  "name": "nodejs8-devel-8.17.0-3.54.2.aarch64",
                  "product_id": "nodejs8-devel-8.17.0-3.54.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "npm8-8.17.0-3.54.2.aarch64",
                "product": {
                  "name": "npm8-8.17.0-3.54.2.aarch64",
                  "product_id": "npm8-8.17.0-3.54.2.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs8-8.17.0-3.54.2.i586",
                "product": {
                  "name": "nodejs8-8.17.0-3.54.2.i586",
                  "product_id": "nodejs8-8.17.0-3.54.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs8-devel-8.17.0-3.54.2.i586",
                "product": {
                  "name": "nodejs8-devel-8.17.0-3.54.2.i586",
                  "product_id": "nodejs8-devel-8.17.0-3.54.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "npm8-8.17.0-3.54.2.i586",
                "product": {
                  "name": "npm8-8.17.0-3.54.2.i586",
                  "product_id": "npm8-8.17.0-3.54.2.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs8-docs-8.17.0-3.54.2.noarch",
                "product": {
                  "name": "nodejs8-docs-8.17.0-3.54.2.noarch",
                  "product_id": "nodejs8-docs-8.17.0-3.54.2.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs8-8.17.0-3.54.2.ppc64le",
                "product": {
                  "name": "nodejs8-8.17.0-3.54.2.ppc64le",
                  "product_id": "nodejs8-8.17.0-3.54.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs8-devel-8.17.0-3.54.2.ppc64le",
                "product": {
                  "name": "nodejs8-devel-8.17.0-3.54.2.ppc64le",
                  "product_id": "nodejs8-devel-8.17.0-3.54.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "npm8-8.17.0-3.54.2.ppc64le",
                "product": {
                  "name": "npm8-8.17.0-3.54.2.ppc64le",
                  "product_id": "npm8-8.17.0-3.54.2.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs8-8.17.0-3.54.2.s390x",
                "product": {
                  "name": "nodejs8-8.17.0-3.54.2.s390x",
                  "product_id": "nodejs8-8.17.0-3.54.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs8-devel-8.17.0-3.54.2.s390x",
                "product": {
                  "name": "nodejs8-devel-8.17.0-3.54.2.s390x",
                  "product_id": "nodejs8-devel-8.17.0-3.54.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "npm8-8.17.0-3.54.2.s390x",
                "product": {
                  "name": "npm8-8.17.0-3.54.2.s390x",
                  "product_id": "npm8-8.17.0-3.54.2.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs8-8.17.0-3.54.2.x86_64",
                "product": {
                  "name": "nodejs8-8.17.0-3.54.2.x86_64",
                  "product_id": "nodejs8-8.17.0-3.54.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs8-devel-8.17.0-3.54.2.x86_64",
                "product": {
                  "name": "nodejs8-devel-8.17.0-3.54.2.x86_64",
                  "product_id": "nodejs8-devel-8.17.0-3.54.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "npm8-8.17.0-3.54.2.x86_64",
                "product": {
                  "name": "npm8-8.17.0-3.54.2.x86_64",
                  "product_id": "npm8-8.17.0-3.54.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15-ESPOS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15-ESPOS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15-ESPOS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-espos:15"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-espos:15:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP1-BCL",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP1-BCL",
                  "product_id": "SUSE Linux Enterprise Server 15 SP1-BCL",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_bcl:15:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP1-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP1-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Enterprise Storage 6",
                "product": {
                  "name": "SUSE Enterprise Storage 6",
                  "product_id": "SUSE Enterprise Storage 6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:ses:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-docs-8.17.0-3.54.2.noarch as component of SUSE Linux Enterprise High Performance Computing 15-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch"
        },
        "product_reference": "nodejs8-docs-8.17.0-3.54.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-docs-8.17.0-3.54.2.noarch as component of SUSE Linux Enterprise High Performance Computing 15-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch"
        },
        "product_reference": "nodejs8-docs-8.17.0-3.54.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-docs-8.17.0-3.54.2.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch"
        },
        "product_reference": "nodejs8-docs-8.17.0-3.54.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-docs-8.17.0-3.54.2.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch"
        },
        "product_reference": "nodejs8-docs-8.17.0-3.54.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.ppc64le as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.s390x as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.ppc64le as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.s390x as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-docs-8.17.0-3.54.2.noarch as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch"
        },
        "product_reference": "nodejs8-docs-8.17.0-3.54.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.ppc64le as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le"
        },
        "product_reference": "npm8-8.17.0-3.54.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.s390x as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x"
        },
        "product_reference": "npm8-8.17.0-3.54.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-BCL",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-BCL",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-docs-8.17.0-3.54.2.noarch as component of SUSE Linux Enterprise Server 15 SP1-BCL",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch"
        },
        "product_reference": "nodejs8-docs-8.17.0-3.54.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-BCL",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.ppc64le as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.s390x as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.ppc64le as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.s390x as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-docs-8.17.0-3.54.2.noarch as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch"
        },
        "product_reference": "nodejs8-docs-8.17.0-3.54.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.aarch64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.ppc64le as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le"
        },
        "product_reference": "npm8-8.17.0-3.54.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.s390x as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x"
        },
        "product_reference": "npm8-8.17.0-3.54.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-docs-8.17.0-3.54.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch"
        },
        "product_reference": "nodejs8-docs-8.17.0-3.54.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le"
        },
        "product_reference": "npm8-8.17.0-3.54.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-docs-8.17.0-3.54.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch"
        },
        "product_reference": "nodejs8-docs-8.17.0-3.54.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le"
        },
        "product_reference": "npm8-8.17.0-3.54.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.aarch64 as component of SUSE Enterprise Storage 6",
          "product_id": "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.17.0-3.54.2.x86_64 as component of SUSE Enterprise Storage 6",
          "product_id": "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.aarch64 as component of SUSE Enterprise Storage 6",
          "product_id": "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.17.0-3.54.2.x86_64 as component of SUSE Enterprise Storage 6",
          "product_id": "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "nodejs8-devel-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-docs-8.17.0-3.54.2.noarch as component of SUSE Enterprise Storage 6",
          "product_id": "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch"
        },
        "product_reference": "nodejs8-docs-8.17.0-3.54.2.noarch",
        "relates_to_product_reference": "SUSE Enterprise Storage 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.aarch64 as component of SUSE Enterprise Storage 6",
          "product_id": "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.17.0-3.54.2.x86_64 as component of SUSE Enterprise Storage 6",
          "product_id": "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64"
        },
        "product_reference": "npm8-8.17.0-3.54.2.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-23343",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-23343"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-23343",
          "url": "https://www.suse.com/security/cve/CVE-2021-23343"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1192153 for CVE-2021-23343",
          "url": "https://bugzilla.suse.com/1192153"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-24T07:38:40Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-23343"
    },
    {
      "cve": "CVE-2021-32803",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32803"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The npm package \"tar\" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection. `node-tar` aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted directories are not symlinks. Additionally, in order to prevent unnecessary `stat` calls to determine whether a given path is a directory, paths are cached when directories are created. This logic was insufficient when extracting tar files that contained both a directory and a symlink with the same name as the directory. This order of operations resulted in the directory being created and added to the `node-tar` directory cache. When a directory is present in the directory cache, subsequent calls to mkdir for that directory are skipped. However, this is also where `node-tar` checks for symlinks occur. By first creating a directory, and then replacing that directory with a symlink, it was thus possible to bypass `node-tar` symlink checks on directories, essentially allowing an untrusted tar file to symlink into an arbitrary location and subsequently extracting arbitrary files into that location, thus allowing arbitrary file creation and overwrite. This issue was addressed in releases 3.2.3, 4.4.15, 5.0.7 and 6.1.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32803",
          "url": "https://www.suse.com/security/cve/CVE-2021-32803"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191962 for CVE-2021-32803",
          "url": "https://bugzilla.suse.com/1191962"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191963 for CVE-2021-32803",
          "url": "https://bugzilla.suse.com/1191963"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-24T07:38:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-32803"
    },
    {
      "cve": "CVE-2021-32804",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32804"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The npm package \"tar\" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization. node-tar aims to prevent extraction of absolute file paths by turning absolute paths into relative paths when the `preservePaths` flag is not set to `true`. This is achieved by stripping the absolute path root from any absolute file paths contained in a tar file. For example `/home/user/.bashrc` would turn into `home/user/.bashrc`. This logic was insufficient when file paths contained repeated path roots such as `////home/user/.bashrc`. `node-tar` would only strip a single path root from such paths. When given an absolute file path with repeating path roots, the resulting path (e.g. `///home/user/.bashrc`) would still resolve to an absolute path, thus allowing arbitrary file creation and overwrite. This issue was addressed in releases 3.2.2, 4.4.14, 5.0.6 and 6.1.1. Users may work around this vulnerability without upgrading by creating a custom `onentry` method which sanitizes the `entry.path` or a `filter` method which removes entries with absolute paths. See referenced GitHub Advisory for details. Be aware of CVE-2021-32803 which fixes a similar bug in later versions of tar.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32804",
          "url": "https://www.suse.com/security/cve/CVE-2021-32804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191962 for CVE-2021-32804",
          "url": "https://bugzilla.suse.com/1191962"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-24T07:38:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-32804"
    },
    {
      "cve": "CVE-2021-3807",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-3807"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ansi-regex is vulnerable to Inefficient Regular Expression Complexity",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-3807",
          "url": "https://www.suse.com/security/cve/CVE-2021-3807"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1192154 for CVE-2021-3807",
          "url": "https://bugzilla.suse.com/1192154"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-24T07:38:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-3807"
    },
    {
      "cve": "CVE-2021-3918",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-3918"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-3918",
          "url": "https://www.suse.com/security/cve/CVE-2021-3918"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1192696 for CVE-2021-3918",
          "url": "https://bugzilla.suse.com/1192696"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Enterprise Storage 6:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.54.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.54.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.54.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-24T07:38:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-3918"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for nodejs14",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for nodejs14 fixes the following issues:\n\n- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).\n- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).\n- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).\n- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).\n- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2022-569,SUSE-SLE-Module-Web-Scripting-12-2022-569",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_0569-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2022:0569-1",
        "url": "https://www.suse.com/support/update/announcement/2022/suse-su-20220569-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2022:0569-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-February/010307.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191962",
        "url": "https://bugzilla.suse.com/1191962"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191963",
        "url": "https://bugzilla.suse.com/1191963"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1192153",
        "url": "https://bugzilla.suse.com/1192153"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1192154",
        "url": "https://bugzilla.suse.com/1192154"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1192696",
        "url": "https://bugzilla.suse.com/1192696"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-23343 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-23343/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32803 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32803/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32804 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32804/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-3807 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-3807/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-3918 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-3918/"
      }
    ],
    "title": "Security update for nodejs14",
    "tracking": {
      "current_release_date": "2022-02-24T09:35:23Z",
      "generator": {
        "date": "2022-02-24T09:35:23Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2022:0569-1",
      "initial_release_date": "2022-02-24T09:35:23Z",
      "revision_history": [
        {
          "date": "2022-02-24T09:35:23Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack14-14.19.0-6.24.1.aarch64",
                "product": {
                  "name": "corepack14-14.19.0-6.24.1.aarch64",
                  "product_id": "corepack14-14.19.0-6.24.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs14-14.19.0-6.24.1.aarch64",
                "product": {
                  "name": "nodejs14-14.19.0-6.24.1.aarch64",
                  "product_id": "nodejs14-14.19.0-6.24.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs14-devel-14.19.0-6.24.1.aarch64",
                "product": {
                  "name": "nodejs14-devel-14.19.0-6.24.1.aarch64",
                  "product_id": "nodejs14-devel-14.19.0-6.24.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "npm14-14.19.0-6.24.1.aarch64",
                "product": {
                  "name": "npm14-14.19.0-6.24.1.aarch64",
                  "product_id": "npm14-14.19.0-6.24.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack14-14.19.0-6.24.1.i586",
                "product": {
                  "name": "corepack14-14.19.0-6.24.1.i586",
                  "product_id": "corepack14-14.19.0-6.24.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs14-14.19.0-6.24.1.i586",
                "product": {
                  "name": "nodejs14-14.19.0-6.24.1.i586",
                  "product_id": "nodejs14-14.19.0-6.24.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs14-devel-14.19.0-6.24.1.i586",
                "product": {
                  "name": "nodejs14-devel-14.19.0-6.24.1.i586",
                  "product_id": "nodejs14-devel-14.19.0-6.24.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "npm14-14.19.0-6.24.1.i586",
                "product": {
                  "name": "npm14-14.19.0-6.24.1.i586",
                  "product_id": "npm14-14.19.0-6.24.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs14-docs-14.19.0-6.24.1.noarch",
                "product": {
                  "name": "nodejs14-docs-14.19.0-6.24.1.noarch",
                  "product_id": "nodejs14-docs-14.19.0-6.24.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack14-14.19.0-6.24.1.ppc64le",
                "product": {
                  "name": "corepack14-14.19.0-6.24.1.ppc64le",
                  "product_id": "corepack14-14.19.0-6.24.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs14-14.19.0-6.24.1.ppc64le",
                "product": {
                  "name": "nodejs14-14.19.0-6.24.1.ppc64le",
                  "product_id": "nodejs14-14.19.0-6.24.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs14-devel-14.19.0-6.24.1.ppc64le",
                "product": {
                  "name": "nodejs14-devel-14.19.0-6.24.1.ppc64le",
                  "product_id": "nodejs14-devel-14.19.0-6.24.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "npm14-14.19.0-6.24.1.ppc64le",
                "product": {
                  "name": "npm14-14.19.0-6.24.1.ppc64le",
                  "product_id": "npm14-14.19.0-6.24.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack14-14.19.0-6.24.1.s390x",
                "product": {
                  "name": "corepack14-14.19.0-6.24.1.s390x",
                  "product_id": "corepack14-14.19.0-6.24.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs14-14.19.0-6.24.1.s390x",
                "product": {
                  "name": "nodejs14-14.19.0-6.24.1.s390x",
                  "product_id": "nodejs14-14.19.0-6.24.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs14-devel-14.19.0-6.24.1.s390x",
                "product": {
                  "name": "nodejs14-devel-14.19.0-6.24.1.s390x",
                  "product_id": "nodejs14-devel-14.19.0-6.24.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "npm14-14.19.0-6.24.1.s390x",
                "product": {
                  "name": "npm14-14.19.0-6.24.1.s390x",
                  "product_id": "npm14-14.19.0-6.24.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack14-14.19.0-6.24.1.x86_64",
                "product": {
                  "name": "corepack14-14.19.0-6.24.1.x86_64",
                  "product_id": "corepack14-14.19.0-6.24.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs14-14.19.0-6.24.1.x86_64",
                "product": {
                  "name": "nodejs14-14.19.0-6.24.1.x86_64",
                  "product_id": "nodejs14-14.19.0-6.24.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs14-devel-14.19.0-6.24.1.x86_64",
                "product": {
                  "name": "nodejs14-devel-14.19.0-6.24.1.x86_64",
                  "product_id": "nodejs14-devel-14.19.0-6.24.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "npm14-14.19.0-6.24.1.x86_64",
                "product": {
                  "name": "npm14-14.19.0-6.24.1.x86_64",
                  "product_id": "npm14-14.19.0-6.24.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Web and Scripting 12",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Web and Scripting 12",
                  "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-web-scripting:12"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs14-14.19.0-6.24.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64"
        },
        "product_reference": "nodejs14-14.19.0-6.24.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs14-14.19.0-6.24.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le"
        },
        "product_reference": "nodejs14-14.19.0-6.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs14-14.19.0-6.24.1.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x"
        },
        "product_reference": "nodejs14-14.19.0-6.24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs14-14.19.0-6.24.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64"
        },
        "product_reference": "nodejs14-14.19.0-6.24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs14-devel-14.19.0-6.24.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64"
        },
        "product_reference": "nodejs14-devel-14.19.0-6.24.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs14-devel-14.19.0-6.24.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le"
        },
        "product_reference": "nodejs14-devel-14.19.0-6.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs14-devel-14.19.0-6.24.1.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x"
        },
        "product_reference": "nodejs14-devel-14.19.0-6.24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs14-devel-14.19.0-6.24.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64"
        },
        "product_reference": "nodejs14-devel-14.19.0-6.24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs14-docs-14.19.0-6.24.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch"
        },
        "product_reference": "nodejs14-docs-14.19.0-6.24.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm14-14.19.0-6.24.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64"
        },
        "product_reference": "npm14-14.19.0-6.24.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm14-14.19.0-6.24.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le"
        },
        "product_reference": "npm14-14.19.0-6.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm14-14.19.0-6.24.1.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x"
        },
        "product_reference": "npm14-14.19.0-6.24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm14-14.19.0-6.24.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
        },
        "product_reference": "npm14-14.19.0-6.24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-23343",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-23343"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-23343",
          "url": "https://www.suse.com/security/cve/CVE-2021-23343"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1192153 for CVE-2021-23343",
          "url": "https://bugzilla.suse.com/1192153"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-24T09:35:23Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-23343"
    },
    {
      "cve": "CVE-2021-32803",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32803"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The npm package \"tar\" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection. `node-tar` aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted directories are not symlinks. Additionally, in order to prevent unnecessary `stat` calls to determine whether a given path is a directory, paths are cached when directories are created. This logic was insufficient when extracting tar files that contained both a directory and a symlink with the same name as the directory. This order of operations resulted in the directory being created and added to the `node-tar` directory cache. When a directory is present in the directory cache, subsequent calls to mkdir for that directory are skipped. However, this is also where `node-tar` checks for symlinks occur. By first creating a directory, and then replacing that directory with a symlink, it was thus possible to bypass `node-tar` symlink checks on directories, essentially allowing an untrusted tar file to symlink into an arbitrary location and subsequently extracting arbitrary files into that location, thus allowing arbitrary file creation and overwrite. This issue was addressed in releases 3.2.3, 4.4.15, 5.0.7 and 6.1.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32803",
          "url": "https://www.suse.com/security/cve/CVE-2021-32803"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191962 for CVE-2021-32803",
          "url": "https://bugzilla.suse.com/1191962"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191963 for CVE-2021-32803",
          "url": "https://bugzilla.suse.com/1191963"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-24T09:35:23Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-32803"
    },
    {
      "cve": "CVE-2021-32804",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32804"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The npm package \"tar\" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization. node-tar aims to prevent extraction of absolute file paths by turning absolute paths into relative paths when the `preservePaths` flag is not set to `true`. This is achieved by stripping the absolute path root from any absolute file paths contained in a tar file. For example `/home/user/.bashrc` would turn into `home/user/.bashrc`. This logic was insufficient when file paths contained repeated path roots such as `////home/user/.bashrc`. `node-tar` would only strip a single path root from such paths. When given an absolute file path with repeating path roots, the resulting path (e.g. `///home/user/.bashrc`) would still resolve to an absolute path, thus allowing arbitrary file creation and overwrite. This issue was addressed in releases 3.2.2, 4.4.14, 5.0.6 and 6.1.1. Users may work around this vulnerability without upgrading by creating a custom `onentry` method which sanitizes the `entry.path` or a `filter` method which removes entries with absolute paths. See referenced GitHub Advisory for details. Be aware of CVE-2021-32803 which fixes a similar bug in later versions of tar.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32804",
          "url": "https://www.suse.com/security/cve/CVE-2021-32804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191962 for CVE-2021-32804",
          "url": "https://bugzilla.suse.com/1191962"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-24T09:35:23Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-32804"
    },
    {
      "cve": "CVE-2021-3807",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-3807"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ansi-regex is vulnerable to Inefficient Regular Expression Complexity",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-3807",
          "url": "https://www.suse.com/security/cve/CVE-2021-3807"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1192154 for CVE-2021-3807",
          "url": "https://bugzilla.suse.com/1192154"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-24T09:35:23Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-3807"
    },
    {
      "cve": "CVE-2021-3918",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-3918"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-3918",
          "url": "https://www.suse.com/security/cve/CVE-2021-3918"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1192696 for CVE-2021-3918",
          "url": "https://bugzilla.suse.com/1192696"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel-14.19.0-6.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs-14.19.0-6.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm14-14.19.0-6.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-24T09:35:23Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-3918"
    }
  ]
}