1. Home
  2. Security Advisories
  3. FreeBSD
  4. FREEBSD:7062BCE0-1B17-11EC-9D9D-0022489AD614

[FREEBSD:7062BCE0-1B17-11EC-9D9D-0022489AD614] Node.js -- August 2021 Security Releases (2)

Severity High
Affected Packages 1
CVEs 7
Info Packages References Vulnerabilities

Node.js reports:

  npm 6 update - node-tar, arborist, npm cli modules
  These are vulnerabilities in the node-tar, arborist, and npm cli modules which are related to the initial reports and subsequent remediation of node-tar vulnerabilities CVE-2021-32803 and CVE-2021-32804. Subsequent internal security review of node-tar and additional external bounty reports have resulted in another 5 CVE being remediated in core npm CLI dependencies including node-tar, and npm arborist.
Package Affected Version
pkg:freebsd/node14 < 14.17.6
ID
FREEBSD:7062BCE0-1B17-11EC-9D9D-0022489AD614
Severity
high
Severity from
CVE-2021-37701
URL
http://vuxml.freebsd.org/freebsd/7062bce0-1b17-11ec-9d9d-0022489ad614.html
Published
2021-08-31T00:00:00
(3 years ago)
Modified
2021-09-21T00:00:00
(3 years ago)
Rights
FreeBSD VuXML Security Team
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:freebsd/node14 node14 < 14.17.6
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date