{"schema_version":"1","data":[{"id":31124,"advisory_id":"2d348030-ed25-461a-a53b-c35896a0f336","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/september-2022-security-releases","source_published_at":"2022-09-15T16:00:00+00:00","published_at":"2026-10-25T08:27:25.851266+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2018-7160","CVE-2022-32212","CVE-2022-32213","CVE-2022-32222","CVE-2022-35255","CVE-2022-35256"],"event_types":["patch"],"payload":{"kind":"patch","title":"September 23rd 2022 Security Releases","summary":"Node.js released security updates for the 18.x, 16.x, and 14.x release lines addressing DNS rebinding, HTTP request smuggling, and other vulnerabilities.","evidence":"Updates are now available for the v18.x, v16.x, and v14.x Node.js release lines for the following issues.","products":[{"name":{"value":"Node.js","evidence":"Node.js v14.20.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"Node.js v14.20.1 (LTS)","evidence":"Node.js v14.20.1 (LTS)"},{"value":"Node.js v16.17.1 (LTS)","evidence":"Node.js v16.17.1 (LTS)"},{"value":"Node.js v18.9.1 (Current)","evidence":"Node.js v18.9.1 (Current)"}],"affected_versions":[{"value":"All versions of the 18.x, 16.x, and 14.x release lines","evidence":"Impacts: All versions of the 18.x, 16.x, and 14.x release lines."}]}],"severity":"unknown","related_cves":[{"value":"CVE-2022-32212","evidence":"DNS rebinding in --inspect (insufficient fix of CVE-2022-32212 affecting macOS devices)"},{"value":"CVE-2018-7160","evidence":"DNS rebinding in --inspect (insufficient fix of CVE-2022-32212 affecting macOS devices) (High) (CVE-2022-32212, CVE-2018-7160)"},{"value":"CVE-2022-32213","evidence":"CVE-2022-32213 bypass via obs-fold mechanic (Medium) (CVE-2022-32213)"},{"value":"CVE-2022-35256","evidence":"HTTP Request Smuggling Due to Incorrect Parsing of Header Fields (Medium) (CVE-2022-35256)"},{"value":"CVE-2022-32222","evidence":"Node 18 reads openssl.cnf from /home/iojs/build/... upon startup on macOS (Medium) (CVE-2022-32222)"},{"value":"CVE-2022-35255","evidence":"Weak randomness in WebCrypto keygen (High) (CVE-2022-35255)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":31124,"next_before":31124}