Msrc Cbl2 Nodejs 16.20.2-3 On Cbl Mariner 2.0 vulnerabilities

1 known vulnerability affecting msrc/cbl2_nodejs_16.20.2-3_on_cbl_mariner_2.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2023-42282CRITICALCVSS 9.82024-02-13

CVE-2023-42282 [CRITICAL] CWE-918 The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic. The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerabi