OPENSUSE-SU-2021:1113-1
Advisory lineage Upstream: 3 Downstream: 0
Published: 09 Aug 2021, 22:41
Last modified:04 Feb 2026, 04:07
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
09 Aug 2021, 22:41
Published
Vulnerability first disclosed
04 Feb 2026, 04:07
Last Modified
Vulnerability information updated
Description
Security update for nodejs8 This update for nodejs8 fixes the following issues: - update to npm 6.14.13 - CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. (bsc#1187976) - CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service. (bsc#1187977) - CVE-2020-7774: fixes y18n Prototype Pollution. (bsc#1184450) This update was imported from the SUSE:SLE-15-SP2:Update update project.
Affected Systems
- opensuse•nodejs8&distro=openSUSE Leap 15.2
< 8.17.0-lp152.3.14.1
References (7)
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QQFKBXOTTNWYS2GOQXWGPFT7H3TPVQVC/
- https://bugzilla.suse.com/1184450
- https://bugzilla.suse.com/1187976
- https://bugzilla.suse.com/1187977
- https://www.suse.com/security/cve/CVE-2020-7774
- https://www.suse.com/security/cve/CVE-2021-23362
- https://www.suse.com/security/cve/CVE-2021-27290