{"schema_version":"1","data":[{"id":33187,"advisory_id":"b9db791b-4a2b-4269-8a41-50ca0cc69f20","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/mar-2022-security-releases","source_published_at":"2022-03-18T01:52:00+00:00","published_at":"2026-10-25T09:01:30.031691+00:00","extraction_method":"llm","technologies":["node-js","nodejs","openssl"],"cve_ids":["CVE-2022-0778"],"event_types":["patch"],"payload":{"kind":"patch","title":"OpenSSL security releases require Node.js security releases","summary":"Node.js updates for the 12.x, 14.x, 16.x, and 17.x release lines incorporate upstream OpenSSL security patches, including a fix for CVE-2022-0778.","evidence":"Updates are now available for v17.x, v16.x, v14.x, and v12.x Node.js release lines to incorporate upstream patches from OpenSSL.","products":[{"name":{"value":"Node.js","evidence":"Node.js v12.22.11 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"v12.22.11","evidence":"Node.js v12.22.11 (LTS)"},{"value":"v14.19.1","evidence":"Node.js v14.19.1 (LTS)"},{"value":"v16.14.2","evidence":"Node.js v16.14.2 (LTS)"},{"value":"v17.7.2","evidence":"Node.js v17.7.2 (Current)"}],"affected_versions":[{"value":"17.x","evidence":"Impacts: All versions of the 17.x, 16.x, 14.x, and 12.x releases lines."},{"value":"16.x","evidence":"Impacts: All versions of the 17.x, 16.x, 14.x, and 12.x releases lines."},{"value":"14.x","evidence":"Impacts: All versions of the 17.x, 16.x, 14.x, and 12.x releases lines."},{"value":"12.x","evidence":"Impacts: All versions of the 17.x, 16.x, 14.x, and 12.x releases lines."}]},{"name":{"value":"OpenSSL","evidence":"Update to OpenSSL 3.0.2n and 1.1.1n"},"prerequisites":[],"fixed_versions":[{"value":"3.0.2n","evidence":"Update to OpenSSL 3.0.2n and 1.1.1n"},{"value":"1.1.1n","evidence":"Update to OpenSSL 3.0.2n and 1.1.1n"}],"affected_versions":[]}],"severity":"high","related_cves":[{"value":"CVE-2022-0778","evidence":"(High) (CVE-2022-0778) Infinite loop in BN_mod_sqrt() reachable when parsing certificates."}],"security_relevant":true,"severity_evidence":"The 17.x release line of Node.js is vulnerable to one High severity issue."},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false}],"next_after":33187,"next_before":33187}