File _patchinfo of Package patchinfo.18412

<patchinfo incident="18412">
  <issue tracker="cve" id="2021-27290"/>
  <issue tracker="cve" id="2021-23362"/>
  <issue tracker="cve" id="2020-7774"/>
  <issue tracker="cve" id="2021-22884"/>
  <issue tracker="bnc" id="1187977">VUL-0: CVE-2021-23362: nodejs10,nodejs12,nodejs14,nodejs: npm upgrade - hosted-git-info Regular Expression Denial of Service (ReDoS)</issue>
  <issue tracker="bnc" id="1184450">VUL-0: CVE-2020-7774: nodejs8, nodejs10, nodejs12, nodejs14:  y18n Prototype Pollution</issue>
  <issue tracker="bnc" id="1187976">VUL-0: CVE-2021-27290: nodejs10,nodejs12,nodejs14,nodejs: npm upgrade - ssri Regular Expression Denial of Service (ReDoS)</issue>
  <issue tracker="bnc" id="1182620">VUL-0: CVE-2021-22884: nodejs10,nodejs12,nodejs14,nodejs: DNS rebinding in --inspect</issue>
  <packager>adamm</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for nodejs8</summary>
  <description>This update for nodejs8 fixes the following issues:

- update to npm 6.14.13
- CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. (bsc#1187976)
- CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service (bsc#1187977)
- CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
</description>
</patchinfo>
openSUSE Build Service is sponsored by