{
  "cveId": "CVE-2023-30581",
  "url": "https://patchblox.com/security/cve/CVE-2023-30581",
  "summary": "CVE-2023-30581 is fixed in 16 products on 2 platforms, first by Node.js 16 16.20.1, released June 20, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Node.js 16 and 2 others: Missing Authorization",
  "description": "The use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism and require modules outside of the policy.json definition. This vulnerability affects all users using the experimental policy mechanism in all active release lines: v16, v18 and, v20.\n\nPlease note that at the time this CVE was issued, the policy is an experimental feature of Node.js",
  "published": "2023-07-05T20:13:00Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
  "cwe": "CWE-862: Missing Authorization",
  "epss": 0.0105,
  "epssPercentile": 0.64464,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2023-30581",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Node.js 16",
      "fixedVersion": "16.20.1",
      "fix": "Node.js 16 16.20.1",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs.16-16.20.1",
      "released": "2023-06-20T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Node.js 18",
      "fixedVersion": "18.16.1",
      "fix": "Node.js 18 18.16.1",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs.18-18.16.1",
      "released": "2023-06-20T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Node.js 20",
      "fixedVersion": "20.3.1",
      "fix": "Node.js 20 20.3.1",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs.20-20.3.1",
      "released": "2023-06-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "18.19.0\u002Bdfsg-6~deb12u1",
      "fix": "DEBIAN-CVE-2023-30581",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-30581",
      "released": "2023-11-23T00:15:07Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "18.13.0\u002Bdfsg1-1.1",
      "fix": "DEBIAN-CVE-2023-30581",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-30581",
      "released": "2023-11-23T00:15:07Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 14",
      "fixedVersion": "18.13.0\u002Bdfsg1-1.1",
      "fix": "DEBIAN-CVE-2023-30581",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-30581",
      "released": "2023-11-23T00:15:07Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 8",
      "fixedVersion": "1:16.20.1-1.module\u002Bel8.8.0\u002B19440\u002Bee8dbee5",
      "fix": "RHSA-2023:4537",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4537",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 9",
      "fixedVersion": "1:16.20.1-1.el9_2",
      "fix": "RHSA-2023:4331",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4331",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 8",
      "fixedVersion": "1:16.20.1-1.module_el8.8.0\u002B3594\u002Be74fe53f",
      "fix": "ALSA-2023:4537",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4537",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 9",
      "fixedVersion": "1:16.20.1-1.el9_2",
      "fix": "ALSA-2023:4331",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4331",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.7",
      "fix": "ALAS2023-2023-237",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-237",
      "released": "2023-07-05T20:13:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 8",
      "fixedVersion": "1:16.20.1-1.module\u002Bel8.8.0\u002B21143\u002B178952bb",
      "fix": "ELSA-2023-4537",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4537",
      "released": "2023-08-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 9",
      "fixedVersion": "1:18.16.1-1.module\u002Bel9.2.0\u002B21133\u002B486db26c",
      "fix": "ELSA-2023-4330",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4330",
      "released": "2023-08-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "rocky 8",
      "fixedVersion": "1:18.16.1-1.module\u002Bel8.8.0\u002B1413\u002Ba47876c7",
      "fix": "RLSA-2023:4536",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2023-4536",
      "released": "2023-10-06T23:10:12Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.7",
      "fix": "ALAS2023-2023-237",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-237",
      "released": "2023-07-05T20:13:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.7",
      "fix": "ALAS2023-2023-237",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-237",
      "released": "2023-07-05T20:13:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 8",
      "fixedVersion": "1:16.20.1-1.module\u002Bel8.8.0\u002B19440\u002Bee8dbee5",
      "fix": "RHSA-2023:4537",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4537",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 9",
      "fixedVersion": "1:18.16.1-1.module\u002Bel9.2.0.z\u002B19424\u002B78951f07",
      "fix": "RHSA-2023:4330",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4330",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 8",
      "fixedVersion": "1:16.20.1-1.module_el8.8.0\u002B3594\u002Be74fe53f",
      "fix": "ALSA-2023:4537",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4537",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 9",
      "fixedVersion": "1:18.16.1-1.module_el9.2.0\u002B31\u002Bcbae0c8e",
      "fix": "ALSA-2023:4330",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4330",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.7",
      "fix": "ALAS2023-2023-237",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-237",
      "released": "2023-07-05T20:13:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 8",
      "fixedVersion": "1:16.20.1-1.module\u002Bel8.8.0\u002B21143\u002B178952bb",
      "fix": "ELSA-2023-4537",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4537",
      "released": "2023-08-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 9",
      "fixedVersion": "1:18.16.1-1.module\u002Bel9.2.0\u002B21133\u002B486db26c",
      "fix": "ELSA-2023-4330",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4330",
      "released": "2023-08-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 8",
      "fixedVersion": "1:16.20.1-1.module\u002Bel8.8.0\u002B19440\u002Bee8dbee5",
      "fix": "RHSA-2023:4537",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4537",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 9",
      "fixedVersion": "1:16.20.1-1.el9_2",
      "fix": "RHSA-2023:4331",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4331",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 8",
      "fixedVersion": "1:16.20.1-1.module_el8.8.0\u002B3594\u002Be74fe53f",
      "fix": "ALSA-2023:4537",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4537",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 9",
      "fixedVersion": "1:16.20.1-1.el9_2",
      "fix": "ALSA-2023:4331",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4331",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.7",
      "fix": "ALAS2023-2023-237",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-237",
      "released": "2023-07-05T20:13:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 8",
      "fixedVersion": "1:16.20.1-1.module\u002Bel8.8.0\u002B21143\u002B178952bb",
      "fix": "ELSA-2023-4537",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4537",
      "released": "2023-08-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 9",
      "fixedVersion": "1:18.16.1-1.module\u002Bel9.2.0\u002B21133\u002B486db26c",
      "fix": "ELSA-2023-4330",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4330",
      "released": "2023-08-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 8",
      "fixedVersion": "1:16.20.1-1.module\u002Bel8.8.0\u002B19440\u002Bee8dbee5",
      "fix": "RHSA-2023:4537",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4537",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 9",
      "fixedVersion": "1:16.20.1-1.el9_2",
      "fix": "RHSA-2023:4331",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4331",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 8",
      "fixedVersion": "1:16.20.1-1.module_el8.8.0\u002B3594\u002Be74fe53f",
      "fix": "ALSA-2023:4537",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4537",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 9",
      "fixedVersion": "1:16.20.1-1.el9_2",
      "fix": "ALSA-2023:4331",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4331",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.7",
      "fix": "ALAS2023-2023-237",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-237",
      "released": "2023-07-05T20:13:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 8",
      "fixedVersion": "1:16.20.1-1.module\u002Bel8.8.0\u002B21143\u002B178952bb",
      "fix": "ELSA-2023-4537",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4537",
      "released": "2023-08-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 9",
      "fixedVersion": "1:18.16.1-1.module\u002Bel9.2.0\u002B21133\u002B486db26c",
      "fix": "ELSA-2023-4330",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4330",
      "released": "2023-08-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 9",
      "fixedVersion": "1:16.20.1-1.el9_2",
      "fix": "RHSA-2023:4331",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4331",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 9",
      "fixedVersion": "1:16.20.1-1.el9_2",
      "fix": "ALSA-2023:4331",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4331",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.7",
      "fix": "ALAS2023-2023-237",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-237",
      "released": "2023-07-05T20:13:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 9",
      "fixedVersion": "1:16.20.1-1.el9_2",
      "fix": "ELSA-2023-4331",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4331",
      "released": "2023-08-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:18.12.1-1.amzn2023.0.7",
      "fix": "ALAS2023-2023-237",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-237",
      "released": "2023-07-05T20:13:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.20-3.module\u002Bel8.8.0\u002B19038\u002B6f60344f",
      "fix": "RHSA-2023:4537",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4537",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 9",
      "fixedVersion": "0:2.0.20-2.module\u002Bel9.2.0.z\u002B18497\u002Ba402347c",
      "fix": "RHSA-2023:4330",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4330",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 8",
      "fixedVersion": "2.0.20-3.module_el8.8.0\u002B3586\u002Bd4fc0b72",
      "fix": "ALSA-2023:4537",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4537",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 9",
      "fixedVersion": "2.0.20-2.module_el9.2.0\u002B29\u002Bde583a0b",
      "fix": "ALSA-2023:4330",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4330",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 8",
      "fixedVersion": "0:2.0.20-3.module\u002Bel8.8.0\u002B21143\u002B178952bb",
      "fix": "ELSA-2023-4537",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4537",
      "released": "2023-08-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 9",
      "fixedVersion": "0:2.0.20-2.module\u002Bel9.2.0\u002B21038\u002B115df6a2",
      "fix": "ELSA-2023-4330",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4330",
      "released": "2023-08-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 8",
      "fixedVersion": "0:2.0.20-2.module\u002Bel8.7.0\u002B1177\u002B510ae886",
      "fix": "RLSA-2023:4536",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2023-4536",
      "released": "2023-10-06T23:10:12Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 8",
      "fixedVersion": "0:25-1.module\u002Bel8.5.0\u002B10992\u002Bfac5fe06",
      "fix": "RHSA-2023:4537",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4537",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.1.0\u002B15718\u002Be52ec601",
      "fix": "RHSA-2023:4330",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4330",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 8",
      "fixedVersion": "25-1.module_el8.5.0\u002B2605\u002B45d748af",
      "fix": "ALSA-2023:4537",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4537",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-4.module_el9.1.0\u002B13\u002Bd9a595ea",
      "fix": "ALSA-2023:4330",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4330",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 8",
      "fixedVersion": "0:25-1.module\u002Bel8.5.0\u002B20388\u002B4b61e68d",
      "fix": "ELSA-2023-4537",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4537",
      "released": "2023-08-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.1.0\u002B20762\u002Bf52d7401",
      "fix": "ELSA-2023-4330",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4330",
      "released": "2023-08-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.7.0\u002B1072\u002B5b168780",
      "fix": "RLSA-2023:4536",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2023-4536",
      "released": "2023-10-06T23:10:12Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.7.0\u002B40022\u002B9ecc286c",
      "fix": "RLSA-2023:4330",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2023-4330",
      "released": "2026-11-08T01:24:12Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.7.0\u002B15582\u002B19c314fa",
      "fix": "RHSA-2023:4536",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4536",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.1.0\u002B15718\u002Be52ec601",
      "fix": "RHSA-2023:4330",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4330",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-4.module_el8.7.0\u002B3343\u002Bea2b7901",
      "fix": "ALSA-2023:4536",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4536",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-4.module_el9.1.0\u002B13\u002Bd9a595ea",
      "fix": "ALSA-2023:4330",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4330",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.7.0\u002B20766\u002B0a247725",
      "fix": "ELSA-2023-4536",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4536",
      "released": "2023-08-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.1.0\u002B20762\u002Bf52d7401",
      "fix": "ELSA-2023-4330",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4330",
      "released": "2023-08-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 8",
      "fixedVersion": "1:8.19.4-1.16.20.1.1.module\u002Bel8.8.0\u002B19440\u002Bee8dbee5",
      "fix": "RHSA-2023:4537",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4537",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 9",
      "fixedVersion": "1:8.19.4-1.16.20.1.1.el9_2",
      "fix": "RHSA-2023:4331",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-4331",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 8",
      "fixedVersion": "1:8.19.4-1.16.20.1.1.module_el8.8.0\u002B3594\u002Be74fe53f",
      "fix": "ALSA-2023:4537",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4537",
      "released": "2023-08-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 9",
      "fixedVersion": "1:8.19.4-1.16.20.1.1.el9_2",
      "fix": "ALSA-2023:4331",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-4331",
      "released": "2023-07-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "amzn 2023",
      "fixedVersion": "1:8.19.2-1.18.12.1.1.amzn2023.0.7",
      "fix": "ALAS2023-2023-237",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-237",
      "released": "2023-07-05T20:13:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 8",
      "fixedVersion": "1:8.19.4-1.16.20.1.1.module\u002Bel8.8.0\u002B21143\u002B178952bb",
      "fix": "ELSA-2023-4537",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4537",
      "released": "2023-08-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 9",
      "fixedVersion": "1:9.5.1-1.18.16.1.1.module\u002Bel9.2.0\u002B21133\u002B486db26c",
      "fix": "ELSA-2023-4330",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-4330",
      "released": "2023-08-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-devel",
      "release": "amzn 2023",
      "fixedVersion": "2:10.2.154.15-1.18.12.1.1.amzn2023.0.7",
      "fix": "ALAS2023-2023-237",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-237",
      "released": "2023-07-05T20:13:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}