{"schema_version":"1","data":[{"id":33699,"advisory_id":"8e056d34-8760-4c46-8d0f-886c6122aa8d","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v12.22.11","source_published_at":"2022-03-18T01:10:50+00:00","published_at":"2026-10-25T09:10:21.570097+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2022-0778"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 12.22.11 (LTS)","summary":"Node.js 12.22.11 updates OpenSSL to version 1.1.1n, addressing an infinite-loop vulnerability reachable when parsing certificates.","evidence":"Update to OpenSSL 1.1.1n, which addresses the following vulnerability: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (High)(CVE-2022-0778)","products":[{"name":{"value":"Node.js","evidence":"Node.js 12.22.11 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"12.22.11","evidence":"Node.js 12.22.11 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2022-0778","evidence":"CVE-2022-0778"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":33187,"advisory_id":"b9db791b-4a2b-4269-8a41-50ca0cc69f20","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/mar-2022-security-releases","source_published_at":"2022-03-18T01:52:00+00:00","published_at":"2026-10-25T09:01:30.031691+00:00","extraction_method":"llm","technologies":["node-js","nodejs","openssl"],"cve_ids":["CVE-2022-0778"],"event_types":["patch"],"payload":{"kind":"patch","title":"OpenSSL security releases require Node.js security releases","summary":"Node.js updates for the 12.x, 14.x, 16.x, and 17.x release lines incorporate upstream OpenSSL security patches, including a fix for CVE-2022-0778.","evidence":"Updates are now available for v17.x, v16.x, v14.x, and v12.x Node.js release lines to incorporate upstream patches from OpenSSL.","products":[{"name":{"value":"Node.js","evidence":"Node.js v12.22.11 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"v12.22.11","evidence":"Node.js v12.22.11 (LTS)"},{"value":"v14.19.1","evidence":"Node.js v14.19.1 (LTS)"},{"value":"v16.14.2","evidence":"Node.js v16.14.2 (LTS)"},{"value":"v17.7.2","evidence":"Node.js v17.7.2 (Current)"}],"affected_versions":[{"value":"17.x","evidence":"Impacts: All versions of the 17.x, 16.x, 14.x, and 12.x releases lines."},{"value":"16.x","evidence":"Impacts: All versions of the 17.x, 16.x, 14.x, and 12.x releases lines."},{"value":"14.x","evidence":"Impacts: All versions of the 17.x, 16.x, 14.x, and 12.x releases lines."},{"value":"12.x","evidence":"Impacts: All versions of the 17.x, 16.x, 14.x, and 12.x releases lines."}]},{"name":{"value":"OpenSSL","evidence":"Update to OpenSSL 3.0.2n and 1.1.1n"},"prerequisites":[],"fixed_versions":[{"value":"3.0.2n","evidence":"Update to OpenSSL 3.0.2n and 1.1.1n"},{"value":"1.1.1n","evidence":"Update to OpenSSL 3.0.2n and 1.1.1n"}],"affected_versions":[]}],"severity":"high","related_cves":[{"value":"CVE-2022-0778","evidence":"(High) (CVE-2022-0778) Infinite loop in BN_mod_sqrt() reachable when parsing certificates."}],"security_relevant":true,"severity_evidence":"The 17.x release line of Node.js is vulnerable to one High severity issue."},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false}],"next_after":33699,"next_before":33187}