Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/nodejs@1:16.20.2-9?arch=el9_0
purl pkg:rpm/redhat/nodejs@1:16.20.2-9?arch=el9_0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-3hy7-94d4-kyev
Aliases:
CVE-2024-25629
c-ares: Out of bounds read in ares__read_line() There are no reported fixed by versions.
VCID-94sx-qnsn-5ucm
Aliases:
CVE-2024-28182
Multiple vulnerabilities have been discovered in nghttp2, the worst of which could lead to a denial of service. There are no reported fixed by versions.
VCID-bx67-aud6-b3fa
Aliases:
CVE-2024-22025
Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:49:37.582750+00:00 RedHat Importer Affected by VCID-3hy7-94d4-kyev https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-25629.json 38.0.0
2026-04-01T13:48:59.714313+00:00 RedHat Importer Affected by VCID-bx67-aud6-b3fa https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-22025.json 38.0.0
2026-04-01T13:48:36.378125+00:00 RedHat Importer Affected by VCID-94sx-qnsn-5ucm https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-28182.json 38.0.0