{
  "cveId": "CVE-2023-23920",
  "url": "https://patchblox.com/security/cve/CVE-2023-23920",
  "summary": "CVE-2023-23920 is fixed in 19 products on 2 platforms, first by Node.js 14 14.21.3, released February 16, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Node.js 14 and 3 others: Untrusted Search Path (CWE-426)",
  "description": "An untrusted search path vulnerability exists in Node.js. \u003C19.6.1, \u003C18.14.1, \u003C16.19.1, and \u003C14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges.",
  "published": "2023-02-23T12:15:00Z",
  "severity": "Important",
  "cvss": 8.6,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
  "cwe": "CWE-426: Untrusted Search Path (CWE-426)",
  "epss": 0.00452,
  "epssPercentile": 0.39475,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2023-23920",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Node.js 14",
      "fixedVersion": "14.21.3",
      "fix": "Node.js 14 14.21.3",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs.14-14.21.3",
      "released": "2023-02-16T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Node.js 16",
      "fixedVersion": "16.19.1",
      "fix": "Node.js 16 16.19.1",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs.16-16.19.1",
      "released": "2023-02-16T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Node.js 18",
      "fixedVersion": "18.14.1",
      "fix": "Node.js 18 18.14.1",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs.18-18.14.1",
      "released": "2023-02-16T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Node.js 19",
      "fixedVersion": "19.6.1",
      "fix": "Node.js 19 19.6.1",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs.19-19.6.1",
      "released": "2023-02-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libnode64",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "10.19.0~dfsg-3ubuntu1.5",
      "fix": "libnode64 10.19.0~dfsg-3ubuntu1.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libnode64-10.19.0-dfsg-3ubuntu1.5",
      "released": "2023-02-23T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libnode72",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "12.22.9~dfsg-1ubuntu3.4",
      "fix": "libnode72 12.22.9~dfsg-1ubuntu3.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libnode72-12.22.9-dfsg-1ubuntu3.4",
      "released": "2023-05-29T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 11.6 (bullseye)",
      "fixedVersion": "12.22.12~dfsg-1~deb11u4",
      "fix": "DSA-5395-1",
      "url": "https://patchblox.com/security/fix/linux/dsa-5395-1",
      "released": "2023-05-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "18.19.0\u002Bdfsg-6~deb12u1",
      "fix": "DEBIAN-CVE-2023-23920",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-23920",
      "released": "2023-02-23T20:15:14Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "18.13.0\u002Bdfsg1-1.1",
      "fix": "DEBIAN-CVE-2023-23920",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-23920",
      "released": "2023-02-23T20:15:14Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 14",
      "fixedVersion": "18.13.0\u002Bdfsg1-1.1",
      "fix": "DEBIAN-CVE-2023-23920",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-23920",
      "released": "2023-02-23T20:15:14Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 8",
      "fixedVersion": "1:14.21.3-1.module\u002Bel8.7.0\u002B18531\u002B81d21ca6",
      "fix": "RHSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 9",
      "fixedVersion": "1:16.19.1-1.el9_2",
      "fix": "RHSA-2023:2655",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2655",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "10.19.0~dfsg-3ubuntu1.5",
      "fix": "nodejs 10.19.0~dfsg-3ubuntu1.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nodejs-10.19.0-dfsg-3ubuntu1.5",
      "released": "2023-02-23T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "12.22.9~dfsg-1ubuntu3.4",
      "fix": "nodejs 12.22.9~dfsg-1ubuntu3.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-nodejs-12.22.9-dfsg-1ubuntu3.4",
      "released": "2023-05-29T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 8",
      "fixedVersion": "1:14.21.3-1.module_el8.7.0\u002B3551\u002B53700ee8",
      "fix": "ALSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 9",
      "fixedVersion": "1:16.19.1-1.el9_2",
      "fix": "ALSA-2023:2655",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-2655",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.4",
      "fix": "ALAS2023-2023-210",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-210",
      "released": "2023-06-07T23:52:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 8",
      "fixedVersion": "1:14.21.3-1.module\u002Bel8.7.0\u002B21031\u002B52889874",
      "fix": "ELSA-2023-1743",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 9",
      "fixedVersion": "1:18.14.2-2.module\u002Bel9.2.0\u002B21038\u002B115df6a2",
      "fix": "ELSA-2023-2654",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-2654",
      "released": "2023-05-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "rocky 8",
      "fixedVersion": "1:14.21.3-1.module\u002Bel8.7.0\u002B1183\u002Bc2c35f0a",
      "fix": "RLSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2023-1743",
      "released": "2023-04-26T15:28:13Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "rocky 9",
      "fixedVersion": "1:16.19.1-1.el9_2",
      "fix": "RLSA-2023:2655",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2023-2655",
      "released": "2023-05-25T19:53:09Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.4",
      "fix": "ALAS2023-2023-210",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-210",
      "released": "2023-06-07T23:52:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.4",
      "fix": "ALAS2023-2023-210",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-210",
      "released": "2023-06-07T23:52:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 8",
      "fixedVersion": "1:14.21.3-1.module\u002Bel8.7.0\u002B18531\u002B81d21ca6",
      "fix": "RHSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 9",
      "fixedVersion": "1:18.14.2-2.module\u002Bel9.2.0.z\u002B18497\u002Ba402347c",
      "fix": "RHSA-2023:2654",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2654",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 8",
      "fixedVersion": "1:14.21.3-1.module_el8.7.0\u002B3551\u002B53700ee8",
      "fix": "ALSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 9",
      "fixedVersion": "1:18.14.2-2.module_el9.2.0\u002B29\u002Bde583a0b",
      "fix": "ALSA-2023:2654",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-2654",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.4",
      "fix": "ALAS2023-2023-210",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-210",
      "released": "2023-06-07T23:52:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 8",
      "fixedVersion": "1:14.21.3-1.module\u002Bel8.7.0\u002B21031\u002B52889874",
      "fix": "ELSA-2023-1743",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 9",
      "fixedVersion": "1:18.14.2-2.module\u002Bel9.2.0\u002B21038\u002B115df6a2",
      "fix": "ELSA-2023-2654",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-2654",
      "released": "2023-05-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 8",
      "fixedVersion": "1:14.21.3-1.module\u002Bel8.7.0\u002B18531\u002B81d21ca6",
      "fix": "RHSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 9",
      "fixedVersion": "1:16.19.1-1.el9_2",
      "fix": "RHSA-2023:2655",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2655",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 8",
      "fixedVersion": "1:14.21.3-1.module_el8.7.0\u002B3551\u002B53700ee8",
      "fix": "ALSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 9",
      "fixedVersion": "1:16.19.1-1.el9_2",
      "fix": "ALSA-2023:2655",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-2655",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.4",
      "fix": "ALAS2023-2023-210",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-210",
      "released": "2023-06-07T23:52:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 8",
      "fixedVersion": "1:14.21.3-1.module\u002Bel8.7.0\u002B21031\u002B52889874",
      "fix": "ELSA-2023-1743",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 9",
      "fixedVersion": "1:18.14.2-2.module\u002Bel9.2.0\u002B21038\u002B115df6a2",
      "fix": "ELSA-2023-2654",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-2654",
      "released": "2023-05-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 8",
      "fixedVersion": "1:14.21.3-1.module\u002Bel8.7.0\u002B18531\u002B81d21ca6",
      "fix": "RHSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 9",
      "fixedVersion": "1:16.19.1-1.el9_2",
      "fix": "RHSA-2023:2655",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2655",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 8",
      "fixedVersion": "1:14.21.3-1.module_el8.7.0\u002B3551\u002B53700ee8",
      "fix": "ALSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 9",
      "fixedVersion": "1:16.19.1-1.el9_2",
      "fix": "ALSA-2023:2655",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-2655",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.4",
      "fix": "ALAS2023-2023-210",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-210",
      "released": "2023-06-07T23:52:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 8",
      "fixedVersion": "1:14.21.3-1.module\u002Bel8.7.0\u002B21031\u002B52889874",
      "fix": "ELSA-2023-1743",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 9",
      "fixedVersion": "1:18.14.2-2.module\u002Bel9.2.0\u002B21038\u002B115df6a2",
      "fix": "ELSA-2023-2654",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-2654",
      "released": "2023-05-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 9",
      "fixedVersion": "1:16.19.1-1.el9_2",
      "fix": "RHSA-2023:2655",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2655",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 9",
      "fixedVersion": "1:16.19.1-1.el9_2",
      "fix": "ALSA-2023:2655",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-2655",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.4",
      "fix": "ALAS2023-2023-210",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-210",
      "released": "2023-06-07T23:52:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 9",
      "fixedVersion": "1:16.19.1-1.el9_2",
      "fix": "ELSA-2023-2655",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-2655",
      "released": "2023-05-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.4",
      "fix": "ALAS2023-2023-210",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-210",
      "released": "2023-06-07T23:52:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.20-3.module\u002Bel8.7.0\u002B18531\u002B81d21ca6",
      "fix": "RHSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 9",
      "fixedVersion": "0:2.0.20-3.el9_2",
      "fix": "RHSA-2023:2655",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2655",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 8",
      "fixedVersion": "2.0.20-3.module_el8.7.0\u002B3551\u002B53700ee8",
      "fix": "ALSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 9",
      "fixedVersion": "2.0.20-2.module_el9.2.0\u002B29\u002Bde583a0b",
      "fix": "ALSA-2023:2654",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-2654",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 8",
      "fixedVersion": "0:2.0.20-3.module\u002Bel8.7.0\u002B21031\u002B52889874",
      "fix": "ELSA-2023-1743",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 9",
      "fixedVersion": "0:2.0.20-2.module\u002Bel9.2.0\u002B21038\u002B115df6a2",
      "fix": "ELSA-2023-2654",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-2654",
      "released": "2023-05-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 8",
      "fixedVersion": "0:2.0.20-3.module\u002Bel8.7.0\u002B1178\u002Bd52dba78",
      "fix": "RLSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2023-1743",
      "released": "2023-04-26T15:28:13Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 9",
      "fixedVersion": "0:2.0.20-3.el9_2",
      "fix": "RLSA-2023:2655",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2023-2655",
      "released": "2023-05-25T19:53:09Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 8",
      "fixedVersion": "0:23-3.module\u002Bel8.3.0\u002B6519\u002B9f98ed83",
      "fix": "RHSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.1.0\u002B15718\u002Be52ec601",
      "fix": "RHSA-2023:2654",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2654",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 8",
      "fixedVersion": "23-3.module_el8.4.0\u002B2522\u002B3bd42762",
      "fix": "ALSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-4.module_el9.1.0\u002B13\u002Bd9a595ea",
      "fix": "ALSA-2023:2654",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-2654",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 8",
      "fixedVersion": "0:23-3.module\u002Bel8.3.0\u002B7818\u002B6cd30d85",
      "fix": "ELSA-2023-1743",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.1.0\u002B20762\u002Bf52d7401",
      "fix": "ELSA-2023-2654",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-2654",
      "released": "2023-05-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 8",
      "fixedVersion": "0:23-3.module\u002Bel8.7.0\u002B1071\u002B4bdda2a8",
      "fix": "RLSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2023-1743",
      "released": "2023-04-26T15:28:13Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.7.0\u002B40025\u002B0e0cf6b2",
      "fix": "RLSA-2023:2654",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2023-2654",
      "released": "2025-12-03T09:05:37Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.7.0\u002B15582\u002B19c314fa",
      "fix": "RHSA-2023:1583",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-1583",
      "released": "2023-04-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.1.0\u002B15718\u002Be52ec601",
      "fix": "RHSA-2023:2654",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2654",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-4.module_el8.7.0\u002B3343\u002Bea2b7901",
      "fix": "ALSA-2023:1583",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-1583",
      "released": "2023-04-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-4.module_el9.1.0\u002B13\u002Bd9a595ea",
      "fix": "ALSA-2023:2654",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-2654",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.7.0\u002B20766\u002B0a247725",
      "fix": "ELSA-2023-1583",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-1583",
      "released": "2023-04-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.1.0\u002B20762\u002Bf52d7401",
      "fix": "ELSA-2023-2654",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-2654",
      "released": "2023-05-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 8",
      "fixedVersion": "1:6.14.18-1.14.21.3.1.module\u002Bel8.7.0\u002B18531\u002B81d21ca6",
      "fix": "RHSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 9",
      "fixedVersion": "1:8.19.3-1.16.19.1.1.el9_2",
      "fix": "RHSA-2023:2655",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2655",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 8",
      "fixedVersion": "1:6.14.18-1.14.21.3.1.module_el8.7.0\u002B3551\u002B53700ee8",
      "fix": "ALSA-2023:1743",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 9",
      "fixedVersion": "1:8.19.3-1.16.19.1.1.el9_2",
      "fix": "ALSA-2023:2655",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-2655",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "amzn 2023",
      "fixedVersion": "1:8.19.2-1.18.12.1.1.amzn2023.0.4",
      "fix": "ALAS2023-2023-210",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-210",
      "released": "2023-06-07T23:52:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 8",
      "fixedVersion": "1:6.14.18-1.14.21.3.1.module\u002Bel8.7.0\u002B21031\u002B52889874",
      "fix": "ELSA-2023-1743",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-1743",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 9",
      "fixedVersion": "1:9.5.0-1.18.14.2.2.module\u002Bel9.2.0\u002B21038\u002B115df6a2",
      "fix": "ELSA-2023-2654",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-2654",
      "released": "2023-05-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-devel",
      "release": "amzn 2023",
      "fixedVersion": "2:10.2.154.15-1.18.12.1.1.amzn2023.0.4",
      "fix": "ALAS2023-2023-210",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-210",
      "released": "2023-06-07T23:52:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}