# CVE-2022-35255: Node.js 16 and 2 others: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) (CWE-338)

CVE-2022-35255 is fixed in 57 products on 2 platforms, first by Node.js 16 16.17.1, released September 23, 2022. 1 other affected product has no fix yet. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2022-35255
- Priority: High
- CVSS: 9.1 (Important)
- EPSS: 0.0209
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 17, 2022
- Weakness: CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) (CWE-338)
- Vendor advisory: https://nvd.nist.gov/vuln/detail/CVE-2022-35255

## Description

A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource() in SecretKeyGenTraits::DoKeyGen() in src/crypto/crypto_keygen.cc. There are two problems with this: 1) It does not check the return value, it assumes EntropySource() always succeeds, but it can (and sometimes will) fail. 2) The random data returned byEntropySource() may not be cryptographically strong and therefore not suitable as keying material.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Node.js 16 | 16.17.1 | [Node.js 16 16.17.1](https://patchblox.com/security/data/fix/windows-app/openjs.nodejs.16-16.17.1.md) | Sep 23, 2022 |
| Windows apps | Node.js 18 | 18.9.1 | [Node.js 18 18.9.1](https://patchblox.com/security/data/fix/windows-app/openjs.nodejs.18-18.9.1.md) | Sep 23, 2022 |
| Linux | graalvm22-ce-11 ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11 ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-devel ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-devel ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-espresso ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-espresso ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-espresso-llvm ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9949](https://patchblox.com/security/data/fix/linux/elsa-2022-9949.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-espresso-llvm ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9953](https://patchblox.com/security/data/fix/linux/elsa-2022-9953.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-fastr ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9949](https://patchblox.com/security/data/fix/linux/elsa-2022-9949.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-fastr ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9953](https://patchblox.com/security/data/fix/linux/elsa-2022-9953.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-javascript ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-javascript ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-jdk ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-jdk ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-libpolyglot ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-libpolyglot ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-llvm ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-llvm ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-llvm-toolchain ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-llvm-toolchain ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-native-image ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-native-image ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-native-image-llvm-backend ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-native-image-llvm-backend ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-nodejs ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-nodejs ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-nodejs-devel ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-nodejs-devel ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-polyglot ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-polyglot ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-python ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-python ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-python-devel ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-python-devel ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-ruby ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-ruby ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-ruby-devel ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-ruby-devel ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-tools ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-tools ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-wasm ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9948](https://patchblox.com/security/data/fix/linux/elsa-2022-9948.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-11-wasm ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9952](https://patchblox.com/security/data/fix/linux/elsa-2022-9952.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17 ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17 ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-devel ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-devel ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-espresso ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-espresso ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-espresso-llvm ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-espresso-llvm ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9955](https://patchblox.com/security/data/fix/linux/elsa-2022-9955.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-fastr ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-fastr ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9955](https://patchblox.com/security/data/fix/linux/elsa-2022-9955.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-javascript ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-javascript ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-jdk ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-jdk ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-libpolyglot ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-libpolyglot ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-llvm ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-llvm ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-llvm-toolchain ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-llvm-toolchain ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-native-image ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-native-image ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-native-image-llvm-backend ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-native-image-llvm-backend ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-nodejs ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-nodejs ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-nodejs-devel ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-nodejs-devel ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-polyglot ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-polyglot ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-python ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-python ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-python-devel ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-python-devel ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-ruby ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-ruby ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-ruby-devel ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-ruby-devel ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-tools ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-tools ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-wasm ol 8 | 0:22.3.0-1.el8 | [ELSA-2022-9951](https://patchblox.com/security/data/fix/linux/elsa-2022-9951.md) | Oct 25, 2022 |
| Linux | graalvm22-ce-17-wasm ol 9 | 0:22.3.0-1.el9 | [ELSA-2022-9954](https://patchblox.com/security/data/fix/linux/elsa-2022-9954.md) | Oct 25, 2022 |
| Linux | nodejs Debian 12.15 (bookworm) | 18.10.0+dfsg-1 | [DEBIAN-CVE-2022-35255](https://patchblox.com/security/data/fix/linux/debian-cve-2022-35255.md) | Dec 5, 2022 |
| Linux | nodejs Debian 13.5 (trixie) | 18.10.0+dfsg-1 | [DEBIAN-CVE-2022-35255](https://patchblox.com/security/data/fix/linux/debian-cve-2022-35255.md) | Dec 5, 2022 |
| Linux | nodejs Debian 14 | 18.10.0+dfsg-1 | [DEBIAN-CVE-2022-35255](https://patchblox.com/security/data/fix/linux/debian-cve-2022-35255.md) | Dec 5, 2022 |
| Linux | nodejs RHEL 8 | 1:18.9.1-1.module+el8.7.0+16806+4109802b | [RHSA-2022:7821](https://patchblox.com/security/data/fix/linux/rhsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs RHEL 9 | 1:16.17.1-1.el9_0 | [RHSA-2022:6963](https://patchblox.com/security/data/fix/linux/rhsa-2022-6963.md) | Oct 18, 2022 |
| Linux | nodejs almalinux 8 | 1:18.9.1-1.module_el8.7.0+3343+ea2b7901 | [ALSA-2022:7821](https://patchblox.com/security/data/fix/linux/alsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs almalinux 9 | 1:16.17.1-1.el9_0 | [ALSA-2022:6963](https://patchblox.com/security/data/fix/linux/alsa-2022-6963.md) | Oct 18, 2022 |
| Linux | nodejs amzn 2023 | 1:18.12.1-1.amzn2023.0.2 | [ALAS2023-2023-084](https://patchblox.com/security/data/fix/linux/alas2023-2023-084.md) | Feb 17, 2023 |
| Linux | nodejs ol 8 | 1:16.17.1-1.module+el8.6.0+20846+72f1269d | [ELSA-2022-6964](https://patchblox.com/security/data/fix/linux/elsa-2022-6964.md) | Oct 18, 2022 |
| Linux | nodejs ol 9 | 1:16.17.1-1.el9_0 | [ELSA-2022-6963](https://patchblox.com/security/data/fix/linux/elsa-2022-6963.md) | Oct 17, 2022 |
| Linux | nodejs rocky 8 | 1:18.9.1-1.module+el8.7.0+1072+5b168780 | [RLSA-2022:7821](https://patchblox.com/security/data/fix/linux/rlsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs rocky 9 | 1:16.17.1-1.el9_0 | [RLSA-2022:6963](https://patchblox.com/security/data/fix/linux/rlsa-2022-6963.md) | Oct 17, 2022 |
| Linux | nodejs-debuginfo amzn 2023 | 1:18.12.1-1.amzn2023.0.2 | [ALAS2023-2023-084](https://patchblox.com/security/data/fix/linux/alas2023-2023-084.md) | Feb 17, 2023 |
| Linux | nodejs-debugsource amzn 2023 | 1:18.12.1-1.amzn2023.0.2 | [ALAS2023-2023-084](https://patchblox.com/security/data/fix/linux/alas2023-2023-084.md) | Feb 17, 2023 |
| Linux | nodejs-devel RHEL 8 | 1:18.9.1-1.module+el8.7.0+16806+4109802b | [RHSA-2022:7821](https://patchblox.com/security/data/fix/linux/rhsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs-devel almalinux 8 | 1:18.9.1-1.module_el8.7.0+3343+ea2b7901 | [ALSA-2022:7821](https://patchblox.com/security/data/fix/linux/alsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs-devel amzn 2023 | 1:18.12.1-1.amzn2023.0.2 | [ALAS2023-2023-084](https://patchblox.com/security/data/fix/linux/alas2023-2023-084.md) | Feb 17, 2023 |
| Linux | nodejs-devel ol 8 | 1:16.17.1-1.module+el8.6.0+20846+72f1269d | [ELSA-2022-6964](https://patchblox.com/security/data/fix/linux/elsa-2022-6964.md) | Oct 18, 2022 |
| Linux | nodejs-docs RHEL 8 | 1:18.9.1-1.module+el8.7.0+16806+4109802b | [RHSA-2022:7821](https://patchblox.com/security/data/fix/linux/rhsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs-docs RHEL 9 | 1:16.17.1-1.el9_0 | [RHSA-2022:6963](https://patchblox.com/security/data/fix/linux/rhsa-2022-6963.md) | Oct 18, 2022 |
| Linux | nodejs-docs almalinux 8 | 1:18.9.1-1.module_el8.7.0+3343+ea2b7901 | [ALSA-2022:7821](https://patchblox.com/security/data/fix/linux/alsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs-docs almalinux 9 | 1:16.17.1-1.el9_0 | [ALSA-2022:6963](https://patchblox.com/security/data/fix/linux/alsa-2022-6963.md) | Oct 18, 2022 |
| Linux | nodejs-docs amzn 2023 | 1:18.12.1-1.amzn2023.0.2 | [ALAS2023-2023-084](https://patchblox.com/security/data/fix/linux/alas2023-2023-084.md) | Feb 17, 2023 |
| Linux | nodejs-docs ol 8 | 1:16.17.1-1.module+el8.6.0+20846+72f1269d | [ELSA-2022-6964](https://patchblox.com/security/data/fix/linux/elsa-2022-6964.md) | Oct 18, 2022 |
| Linux | nodejs-docs ol 9 | 1:16.17.1-1.el9_0 | [ELSA-2022-6963](https://patchblox.com/security/data/fix/linux/elsa-2022-6963.md) | Oct 17, 2022 |
| Linux | nodejs-full-i18n RHEL 8 | 1:18.9.1-1.module+el8.7.0+16806+4109802b | [RHSA-2022:7821](https://patchblox.com/security/data/fix/linux/rhsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs-full-i18n RHEL 9 | 1:16.17.1-1.el9_0 | [RHSA-2022:6963](https://patchblox.com/security/data/fix/linux/rhsa-2022-6963.md) | Oct 18, 2022 |
| Linux | nodejs-full-i18n almalinux 8 | 1:18.9.1-1.module_el8.7.0+3343+ea2b7901 | [ALSA-2022:7821](https://patchblox.com/security/data/fix/linux/alsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs-full-i18n almalinux 9 | 1:16.17.1-1.el9_0 | [ALSA-2022:6963](https://patchblox.com/security/data/fix/linux/alsa-2022-6963.md) | Oct 18, 2022 |
| Linux | nodejs-full-i18n amzn 2023 | 1:18.12.1-1.amzn2023.0.2 | [ALAS2023-2023-084](https://patchblox.com/security/data/fix/linux/alas2023-2023-084.md) | Feb 17, 2023 |
| Linux | nodejs-full-i18n ol 8 | 1:16.17.1-1.module+el8.6.0+20846+72f1269d | [ELSA-2022-6964](https://patchblox.com/security/data/fix/linux/elsa-2022-6964.md) | Oct 18, 2022 |
| Linux | nodejs-full-i18n ol 9 | 1:16.17.1-1.el9_0 | [ELSA-2022-6963](https://patchblox.com/security/data/fix/linux/elsa-2022-6963.md) | Oct 17, 2022 |
| Linux | nodejs-libs RHEL 9 | 1:16.17.1-1.el9_0 | [RHSA-2022:6963](https://patchblox.com/security/data/fix/linux/rhsa-2022-6963.md) | Oct 18, 2022 |
| Linux | nodejs-libs almalinux 9 | 1:16.17.1-1.el9_0 | [ALSA-2022:6963](https://patchblox.com/security/data/fix/linux/alsa-2022-6963.md) | Oct 18, 2022 |
| Linux | nodejs-libs amzn 2023 | 1:18.12.1-1.amzn2023.0.2 | [ALAS2023-2023-084](https://patchblox.com/security/data/fix/linux/alas2023-2023-084.md) | Feb 17, 2023 |
| Linux | nodejs-libs ol 9 | 1:16.17.1-1.el9_0 | [ELSA-2022-6963](https://patchblox.com/security/data/fix/linux/elsa-2022-6963.md) | Oct 17, 2022 |
| Linux | nodejs-libs-debuginfo amzn 2023 | 1:18.12.1-1.amzn2023.0.2 | [ALAS2023-2023-084](https://patchblox.com/security/data/fix/linux/alas2023-2023-084.md) | Feb 17, 2023 |
| Linux | nodejs-nodemon RHEL 8 | 0:2.0.19-1.module+el8.7.0+16061+0a247725 | [RHSA-2022:7821](https://patchblox.com/security/data/fix/linux/rhsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs-nodemon almalinux 8 | 2.0.19-1.module_el8.7.0+3343+ea2b7901 | [ALSA-2022:7821](https://patchblox.com/security/data/fix/linux/alsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs-nodemon ol 8 | 0:2.0.19-2.module+el8.6.0+20846+72f1269d | [ELSA-2022-6964](https://patchblox.com/security/data/fix/linux/elsa-2022-6964.md) | Oct 18, 2022 |
| Linux | nodejs-nodemon rocky 8 | 0:2.0.19-1.module+el8.7.0+1072+5b168780 | [RLSA-2022:7821](https://patchblox.com/security/data/fix/linux/rlsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs-packaging RHEL 8 | 0:2021.06-4.module+el8.7.0+15582+19c314fa | [RHSA-2022:7821](https://patchblox.com/security/data/fix/linux/rhsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs-packaging almalinux 8 | 2021.06-4.module_el8.7.0+3343+ea2b7901 | [ALSA-2022:7821](https://patchblox.com/security/data/fix/linux/alsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs-packaging ol 8 | 0:25-1.module+el8.5.0+20388+4b61e68d | [ELSA-2022-6964](https://patchblox.com/security/data/fix/linux/elsa-2022-6964.md) | Oct 18, 2022 |
| Linux | nodejs-packaging rocky 8 | 0:2021.06-4.module+el8.7.0+1072+5b168780 | [RLSA-2022:7821](https://patchblox.com/security/data/fix/linux/rlsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs-packaging-bundler RHEL 8 | 0:2021.06-4.module+el8.7.0+15582+19c314fa | [RHSA-2022:7821](https://patchblox.com/security/data/fix/linux/rhsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs-packaging-bundler almalinux 8 | 2021.06-4.module_el8.7.0+3343+ea2b7901 | [ALSA-2022:7821](https://patchblox.com/security/data/fix/linux/alsa-2022-7821.md) | Nov 8, 2022 |
| Linux | nodejs-packaging-bundler ol 8 | 0:2021.06-4.module+el8.7.0+20766+0a247725 | [ELSA-2022-7821](https://patchblox.com/security/data/fix/linux/elsa-2022-7821.md) | Nov 15, 2022 |
| Linux | npm RHEL 8 | 1:8.19.1-1.18.9.1.1.module+el8.7.0+16806+4109802b | [RHSA-2022:7821](https://patchblox.com/security/data/fix/linux/rhsa-2022-7821.md) | Nov 8, 2022 |
| Linux | npm RHEL 9 | 1:8.15.0-1.16.17.1.1.el9_0 | [RHSA-2022:6963](https://patchblox.com/security/data/fix/linux/rhsa-2022-6963.md) | Oct 18, 2022 |
| Linux | npm almalinux 8 | 1:8.19.1-1.18.9.1.1.module_el8.7.0+3343+ea2b7901 | [ALSA-2022:7821](https://patchblox.com/security/data/fix/linux/alsa-2022-7821.md) | Nov 8, 2022 |
| Linux | npm almalinux 9 | 1:8.15.0-1.16.17.1.1.el9_0 | [ALSA-2022:6963](https://patchblox.com/security/data/fix/linux/alsa-2022-6963.md) | Oct 18, 2022 |
| Linux | npm amzn 2023 | 1:8.19.2-1.18.12.1.1.amzn2023.0.2 | [ALAS2023-2023-084](https://patchblox.com/security/data/fix/linux/alas2023-2023-084.md) | Feb 17, 2023 |
| Linux | npm ol 8 | 1:8.15.0-1.16.17.1.1.module+el8.6.0+20846+72f1269d | [ELSA-2022-6964](https://patchblox.com/security/data/fix/linux/elsa-2022-6964.md) | Oct 18, 2022 |
| Linux | npm ol 9 | 1:8.15.0-1.16.17.1.1.el9_0 | [ELSA-2022-6963](https://patchblox.com/security/data/fix/linux/elsa-2022-6963.md) | Oct 17, 2022 |
| Linux | v8-devel amzn 2023 | 2:10.2.154.15-1.18.12.1.1.amzn2023.0.2 | [ALAS2023-2023-084](https://patchblox.com/security/data/fix/linux/alas2023-2023-084.md) | Feb 17, 2023 |

## No fix yet

| Platform | Product | Status |
|---|---|---|
| Windows apps | Node.js 15 | no-fix |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.