{"schema_version":"1","data":[{"id":30005,"advisory_id":"48003997-d647-4fcc-a8e5-5c3846de9df7","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/november-2022-security-releases","source_published_at":"2022-11-01T21:00:00+00:00","published_at":"2026-10-25T08:08:22.454517+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2022-3602","CVE-2022-3786","CVE-2022-43548"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js security releases for November 2022","summary":"Node.js security updates address three vulnerabilities, including OpenSSL certificate buffer overflows and DNS rebinding through --inspect. Updates are available in the listed release versions.","evidence":"Updates are now available for v14,x, v16.x, v18.x and v19.x Node.js release lines for the following issues.","products":[{"name":{"value":"Node.js","evidence":"Node.js v14.21.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"v14.21.1","evidence":"Node.js v14.21.1 (LTS)"},{"value":"v16.18.1","evidence":"Node.js v16.18.1 (LTS)"},{"value":"v18.12.1","evidence":"Node.js v18.12.1 (LTS)"},{"value":"v19.0.1","evidence":"Node.js v19.0.1 (Current)"}],"affected_versions":[{"value":"All versions of the v14.x, v16.x, v18.x, and v19.x releases lines","evidence":"Impacts: All versions of the v14.x, v16.x, v18.x, and v19.x releases lines."}]}],"severity":"unknown","related_cves":[{"value":"CVE-2022-3602","evidence":"X.509 Email Address 4-byte Buffer Overflow (High) (CVE-2022-3602)"},{"value":"CVE-2022-3786","evidence":"X.509 Email Address Variable Length Buffer Overflow (High) (CVE-2022-3786)"},{"value":"CVE-2022-43548","evidence":"DNS rebinding in --inspect via invalid octal IP address (Medium) (CVE-2022-43548)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":29781,"advisory_id":"65d43820-9183-4531-a5ce-9388add92596","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v18.12.1","source_published_at":"2022-11-04T22:34:29+00:00","published_at":"2026-10-25T08:04:32.096633+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2022-3602","CVE-2022-3786","CVE-2022-43548"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 18.12.1 (LTS)","summary":"Node.js 18.12.1 fixes three reported vulnerabilities, including X.509 buffer overflows and DNS rebinding through --inspect.","evidence":"The following CVEs are fixed in this release: CVE-2022-3602: X.509 Email Address 4-byte Buffer Overflow (High) CVE-2022-3786: X.509 Email Address Variable Length Buffer Overflow (High) CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)","products":[{"name":{"value":"Node.js","evidence":"Node.js 18.12.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"18.12.1","evidence":"Node.js 18.12.1 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2022-3602","evidence":"CVE-2022-3602: X.509 Email Address 4-byte Buffer Overflow (High)"},{"value":"CVE-2022-3786","evidence":"CVE-2022-3786: X.509 Email Address Variable Length Buffer Overflow (High)"},{"value":"CVE-2022-43548","evidence":"CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":29776,"advisory_id":"a79455d4-7491-4962-a4d5-48d0b6917b4f","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v19.0.1","source_published_at":"2022-11-04T18:05:19+00:00","published_at":"2026-10-25T08:04:26.029725+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2022-3602","CVE-2022-3786","CVE-2022-43548"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 19.0.1 (Current)","summary":"Node.js 19.0.1 fixes three listed vulnerabilities, including two rated High and one rated Medium.","evidence":"The following CVEs are fixed in this release: CVE-2022-3602: X.509 Email Address 4-byte Buffer Overflow (High) CVE-2022-3786: X.509 Email Address Variable Length Buffer Overflow (High) CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)","products":[{"name":{"value":"Node.js","evidence":"Node.js 19.0.1 (Current)"},"prerequisites":[],"fixed_versions":[{"value":"19.0.1","evidence":"Node.js 19.0.1 (Current)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2022-3602","evidence":"CVE-2022-3602: X.509 Email Address 4-byte Buffer Overflow (High)"},{"value":"CVE-2022-3786","evidence":"CVE-2022-3786: X.509 Email Address Variable Length Buffer Overflow (High)"},{"value":"CVE-2022-43548","evidence":"CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":30005,"next_before":29776}