{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "npm ci succeeds when package-lock.json doesn't match package.json", "tracking": { "current_release_date": "2026-08-14T05:22:24+00:00", "generator": { "date": "2026-08-14T05:22:24+00:00", "engine": { "name": "CSAF Generator", "version": "3.3.0" } }, "id": "CVE-2021-43616", "initial_release_date": "2021-02-15T00:00:00+00:00", "revision_history": [ { "date": "2026-08-14T05:22:24+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat Quay v3.10.0", "product": { "name": "Red Hat Quay v3.10.0", "product_id": "quay-3.10", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3.10" } } }, { "category": "product_name", "name": "Red Hat Quay v3.12.0", "product": { "name": "Red Hat Quay v3.12.0", "product_id": "quay-3.12", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3.12" } } }, { "category": "product_name", "name": "Red Hat Quay v3.13.0", "product": { "name": "Red Hat Quay v3.13.0", "product_id": "quay-3.13", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3.13" } } }, { "category": "product_name", "name": "Red Hat Quay v3.14.0", "product": { "name": "Red Hat Quay v3.14.0", "product_id": "quay-3.14", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3.14" } } }, { "category": "product_name", "name": "Red Hat Quay v3.15.0", "product": { "name": "Red Hat Quay v3.15.0", "product_id": "quay-3.15", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3.15" } } }, { "category": "product_name", "name": "Red Hat Quay v3.9.18", "product": { "name": "Red Hat Quay v3.9.18", "product_id": "quay-3.9", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3.9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.10.z", "product": { "name": "Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.10.z", "product": { "name": "Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.2" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4.0.z", "product": { "name": "Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.6.0.z", "product": { "name": "Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.6.0.z", "product": { "name": "Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.6::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.7", "product": { "name": "Red Hat Enterprise Linux 8.7", "product_id": "rhel-8.7.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.8.0.z", "product": { "name": "Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.0", "product": { "name": "Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.1", "product": { "name": "Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.6.0.z", "product": { "name": "Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_name", "name": "Red Hat Software Collections", "product": { "name": "Red Hat Software Collections", "product_id": "rhscl-3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3" } } }, { "category": "product_version", "name": "nodejs", "product": { "name": "nodejs", "product_id": "nodejs", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs" } } }, { "category": "product_version", "name": "nodejs", "product": { "name": "nodejs", "product_id": "nodejs-0:16-8060020220519144917.ad008a3a.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@16-8060020220519144917.ad008a3a?arch=src&epoch=0" } } }, { "category": "product_version", "name": "nodejs", "product": { "name": "nodejs", "product_id": "nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2?epoch=0" } } }, { "category": "product_version", "name": "nodejs", "product": { "name": "nodejs", "product_id": "nodejs-0:16.14.0-4.module+el8.6.0+15294+54b291d2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2?arch=src&epoch=0" } } }, { "category": "product_version", "name": "nodejs-debuginfo", "product": { "name": "nodejs-debuginfo", "product_id": "nodejs-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo" } } }, { "category": "product_version", "name": "nodejs-debugsource", "product": { "name": "nodejs-debugsource", "product_id": "nodejs-debugsource", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource" } } }, { "category": "product_version", "name": "nodejs-devel", "product": { "name": "nodejs-devel", "product_id": "nodejs-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel" } } }, { "category": "product_version", "name": "nodejs-docs", "product": { "name": "nodejs-docs", "product_id": "nodejs-docs", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-docs" } } }, { "category": "product_version", "name": "nodejs-full-i18n", "product": { "name": "nodejs-full-i18n", "product_id": "nodejs-full-i18n", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n" } } }, { "category": "product_version", "name": "nodejs-libs", "product": { "name": "nodejs-libs", "product_id": "nodejs-libs", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-libs" } } }, { "category": "product_version", "name": "nodejs-libs-debuginfo", "product": { "name": "nodejs-libs-debuginfo", "product_id": "nodejs-libs-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-libs-debuginfo" } } }, { "category": "product_version", "name": "nodejs-nodemon", "product": { "name": "nodejs-nodemon", "product_id": "nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2?epoch=0" } } }, { "category": "product_version", "name": "nodejs-packaging", "product": { "name": "nodejs-packaging", "product_id": "nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06?epoch=0" } } }, { "category": "product_version", "name": "nodejs", "product": { "name": "nodejs", "product_id": "nodejs.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs?arch=src" } } }, { "category": "product_version", "name": "nodejs:12/nodejs", "product": { "name": "nodejs:12/nodejs", "product_id": "nodejs:12/nodejs.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs?arch=src&rpmmod=nodejs:12" } } }, { "category": "product_version", "name": "nodejs:14/nodejs", "product": { "name": "nodejs:14/nodejs", "product_id": "nodejs:14/nodejs.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs?arch=src&rpmmod=nodejs:14" } } }, { "category": "product_version", "name": "nodejs:16:8060020220519144917:ad008a3a/nodejs", "product": { "name": "nodejs:16:8060020220519144917:ad008a3a/nodejs", "product_id": "nodejs:16:8060020220519144917:ad008a3a/nodejs", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs?rpmmod=nodejs:16:8060020220519144917:ad008a3a" } } }, { "category": "product_version", "name": "npm", "product": { "name": "npm", "product_id": "npm", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm" } } }, { "category": "product_version", "name": "npm", "product": { "name": "npm", "product_id": "npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2?epoch=0" } } }, { "category": "product_version", "name": "rh-nodejs12-nodejs", "product": { "name": "rh-nodejs12-nodejs", "product_id": "rh-nodejs12-nodejs", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs12-nodejs" } } }, { "category": "product_version", "name": "rh-nodejs12-nodejs-devel", "product": { "name": "rh-nodejs12-nodejs-devel", "product_id": "rh-nodejs12-nodejs-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs12-nodejs-devel" } } }, { "category": "product_version", "name": "rh-nodejs12-nodejs-docs", "product": { "name": "rh-nodejs12-nodejs-docs", "product_id": "rh-nodejs12-nodejs-docs", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs12-nodejs-docs" } } }, { "category": "product_version", "name": "rh-nodejs12-nodejs", "product": { "name": "rh-nodejs12-nodejs", "product_id": "rh-nodejs12-nodejs.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs12-nodejs?arch=src" } } }, { "category": "product_version", "name": "rh-nodejs12-npm", "product": { "name": "rh-nodejs12-npm", "product_id": "rh-nodejs12-npm", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs12-npm" } } }, { "category": "product_version", "name": "rh-nodejs14-nodejs", "product": { "name": "rh-nodejs14-nodejs", "product_id": "rh-nodejs14-nodejs", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs14-nodejs" } } }, { "category": "product_version", "name": "rh-nodejs14-nodejs-devel", "product": { "name": "rh-nodejs14-nodejs-devel", "product_id": "rh-nodejs14-nodejs-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs14-nodejs-devel" } } }, { "category": "product_version", "name": "rh-nodejs14-nodejs-docs", "product": { "name": "rh-nodejs14-nodejs-docs", "product_id": "rh-nodejs14-nodejs-docs", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs14-nodejs-docs" } } }, { "category": "product_version", "name": "rh-nodejs14-nodejs-full-i18n", "product": { "name": "rh-nodejs14-nodejs-full-i18n", "product_id": "rh-nodejs14-nodejs-full-i18n", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs14-nodejs-full-i18n" } } }, { "category": "product_version", "name": "rh-nodejs14-nodejs", "product": { "name": "rh-nodejs14-nodejs", "product_id": "rh-nodejs14-nodejs.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs14-nodejs?arch=src" } } }, { "category": "product_version", "name": "rh-nodejs14-npm", "product": { "name": "rh-nodejs14-npm", "product_id": "rh-nodejs14-npm", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs14-npm" } } }, { "category": "product_version", "name": "v8-12.4-devel", "product": { "name": "v8-12.4-devel", "product_id": "v8-12.4-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/v8-12.4-devel" } } }, { "category": "product_version", "name": "v8-13.6-devel", "product": { "name": "v8-13.6-devel", "product_id": "v8-13.6-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/v8-13.6-devel" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:nodejs" }, "product_reference": "nodejs", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:nodejs" }, "product_reference": "nodejs", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:nodejs" }, "product_reference": "nodejs", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs as a component of Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0:nodejs" }, "product_reference": "nodejs", "relates_to_product_reference": "rhel-9.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:nodejs" }, "product_reference": "nodejs", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:nodejs" }, "product_reference": "nodejs", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:nodejs" }, "product_reference": "nodejs", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-0:16-8060020220519144917.ad008a3a.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:nodejs-0:16-8060020220519144917.ad008a3a.src" }, "product_reference": "nodejs-0:16-8060020220519144917.ad008a3a.src", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-0:16-8060020220519144917.ad008a3a.src as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:nodejs-0:16-8060020220519144917.ad008a3a.src" }, "product_reference": "nodejs-0:16-8060020220519144917.ad008a3a.src", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2 as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2" }, "product_reference": "nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2" }, "product_reference": "nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2 as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z::appstream:nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2" }, "product_reference": "nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "relates_to_product_reference": "rhel-br-8.6.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-0:16.14.0-4.module+el8.6.0+15294+54b291d2.src as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z::appstream:nodejs-0:16.14.0-4.module+el8.6.0+15294+54b291d2.src" }, "product_reference": "nodejs-0:16.14.0-4.module+el8.6.0+15294+54b291d2.src", "relates_to_product_reference": "rhel-br-8.6.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:nodejs-debuginfo" }, "product_reference": "nodejs-debuginfo", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:nodejs-debuginfo" }, "product_reference": "nodejs-debuginfo", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:nodejs-debuginfo" }, "product_reference": "nodejs-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z::appstream:nodejs-debuginfo" }, "product_reference": "nodejs-debuginfo", "relates_to_product_reference": "rhel-br-8.6.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:nodejs-debugsource" }, "product_reference": "nodejs-debugsource", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:nodejs-debugsource" }, "product_reference": "nodejs-debugsource", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:nodejs-debugsource" }, "product_reference": "nodejs-debugsource", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z::appstream:nodejs-debugsource" }, "product_reference": "nodejs-debugsource", "relates_to_product_reference": "rhel-br-8.6.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel as a component of Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0:nodejs-devel" }, "product_reference": "nodejs-devel", "relates_to_product_reference": "rhel-9.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:nodejs-devel" }, "product_reference": "nodejs-devel", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:nodejs-devel" }, "product_reference": "nodejs-devel", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:nodejs-devel" }, "product_reference": "nodejs-devel", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:nodejs-devel" }, "product_reference": "nodejs-devel", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:nodejs-devel" }, "product_reference": "nodejs-devel", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:nodejs-devel" }, "product_reference": "nodejs-devel", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z::appstream:nodejs-devel" }, "product_reference": "nodejs-devel", "relates_to_product_reference": "rhel-br-8.6.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:nodejs-devel" }, "product_reference": "nodejs-devel", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:nodejs-devel" }, "product_reference": "nodejs-devel", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:nodejs-docs" }, "product_reference": "nodejs-docs", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:nodejs-docs" }, "product_reference": "nodejs-docs", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:nodejs-docs" }, "product_reference": "nodejs-docs", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:nodejs-docs" }, "product_reference": "nodejs-docs", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:nodejs-docs" }, "product_reference": "nodejs-docs", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs as a component of Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0:nodejs-docs" }, "product_reference": "nodejs-docs", "relates_to_product_reference": "rhel-9.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:nodejs-docs" }, "product_reference": "nodejs-docs", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:nodejs-docs" }, "product_reference": "nodejs-docs", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z::appstream:nodejs-docs" }, "product_reference": "nodejs-docs", "relates_to_product_reference": "rhel-br-8.6.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:nodejs-docs" }, "product_reference": "nodejs-docs", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:nodejs-full-i18n" }, "product_reference": "nodejs-full-i18n", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:nodejs-full-i18n" }, "product_reference": "nodejs-full-i18n", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:nodejs-full-i18n" }, "product_reference": "nodejs-full-i18n", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n as a component of Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0:nodejs-full-i18n" }, "product_reference": "nodejs-full-i18n", "relates_to_product_reference": "rhel-9.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:nodejs-full-i18n" }, "product_reference": "nodejs-full-i18n", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z::appstream:nodejs-full-i18n" }, "product_reference": "nodejs-full-i18n", "relates_to_product_reference": "rhel-br-8.6.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:nodejs-full-i18n" }, "product_reference": "nodejs-full-i18n", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:nodejs-full-i18n" }, "product_reference": "nodejs-full-i18n", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:nodejs-full-i18n" }, "product_reference": "nodejs-full-i18n", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:nodejs-full-i18n" }, "product_reference": "nodejs-full-i18n", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-libs as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:nodejs-libs" }, "product_reference": "nodejs-libs", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-libs as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z::appstream:nodejs-libs" }, "product_reference": "nodejs-libs", "relates_to_product_reference": "rhel-br-8.6.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-libs as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:nodejs-libs" }, "product_reference": "nodejs-libs", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-libs as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:nodejs-libs" }, "product_reference": "nodejs-libs", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-libs as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:nodejs-libs" }, "product_reference": "nodejs-libs", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-libs as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:nodejs-libs" }, "product_reference": "nodejs-libs", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-libs as a component of Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0:nodejs-libs" }, "product_reference": "nodejs-libs", "relates_to_product_reference": "rhel-9.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-libs-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:nodejs-libs-debuginfo" }, "product_reference": "nodejs-libs-debuginfo", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-libs-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:nodejs-libs-debuginfo" }, "product_reference": "nodejs-libs-debuginfo", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2" }, "product_reference": "nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2 as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z::appstream:nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2" }, "product_reference": "nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "relates_to_product_reference": "rhel-br-8.6.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2 as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2" }, "product_reference": "nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06" }, "product_reference": "nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06 as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z::appstream:nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06" }, "product_reference": "nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "relates_to_product_reference": "rhel-br-8.6.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06 as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06" }, "product_reference": "nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs.src as a component of Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0:nodejs.src" }, "product_reference": "nodejs.src", "relates_to_product_reference": "rhel-9.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs.src as a component of Red Hat Quay v3.13.0", "product_id": "quay-3.13:nodejs.src" }, "product_reference": "nodejs.src", "relates_to_product_reference": "quay-3.13" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs.src as a component of Red Hat Quay v3.9.18", "product_id": "quay-3.9:nodejs.src" }, "product_reference": "nodejs.src", "relates_to_product_reference": "quay-3.9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs.src as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:nodejs.src" }, "product_reference": "nodejs.src", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs.src as a component of Red Hat Quay v3.12.0", "product_id": "quay-3.12:nodejs.src" }, "product_reference": "nodejs.src", "relates_to_product_reference": "quay-3.12" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs.src as a component of Red Hat Quay v3.10.0", "product_id": "quay-3.10:nodejs.src" }, "product_reference": "nodejs.src", "relates_to_product_reference": "quay-3.10" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs.src as a component of Red Hat Quay v3.15.0", "product_id": "quay-3.15:nodejs.src" }, "product_reference": "nodejs.src", "relates_to_product_reference": "quay-3.15" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs.src as a component of Red Hat Quay v3.14.0", "product_id": "quay-3.14:nodejs.src" }, "product_reference": "nodejs.src", "relates_to_product_reference": "quay-3.14" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs:12/nodejs.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:nodejs:12/nodejs.src" }, "product_reference": "nodejs:12/nodejs.src", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs:12/nodejs.src as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:nodejs:12/nodejs.src" }, "product_reference": "nodejs:12/nodejs.src", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs:12/nodejs.src as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:nodejs:12/nodejs.src" }, "product_reference": "nodejs:12/nodejs.src", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs:12/nodejs.src as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:nodejs:12/nodejs.src" }, "product_reference": "nodejs:12/nodejs.src", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs:12/nodejs.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:nodejs:12/nodejs.src" }, "product_reference": "nodejs:12/nodejs.src", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs:14/nodejs.src as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:nodejs:14/nodejs.src" }, "product_reference": "nodejs:14/nodejs.src", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs:14/nodejs.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:nodejs:14/nodejs.src" }, "product_reference": "nodejs:14/nodejs.src", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs:14/nodejs.src as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:nodejs:14/nodejs.src" }, "product_reference": "nodejs:14/nodejs.src", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs:14/nodejs.src as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:nodejs:14/nodejs.src" }, "product_reference": "nodejs:14/nodejs.src", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs:14/nodejs.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:nodejs:14/nodejs.src" }, "product_reference": "nodejs:14/nodejs.src", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs:16:8060020220519144917:ad008a3a/nodejs as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:nodejs:16:8060020220519144917:ad008a3a/nodejs" }, "product_reference": "nodejs:16:8060020220519144917:ad008a3a/nodejs", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs:16:8060020220519144917:ad008a3a/nodejs as a component of Red Hat Enterprise Linux 8.7", "product_id": "rhel-8.7.0:nodejs:16:8060020220519144917:ad008a3a/nodejs" }, "product_reference": "nodejs:16:8060020220519144917:ad008a3a/nodejs", "relates_to_product_reference": "rhel-8.7.0" }, { "category": "default_component_of", "full_product_name": { "name": "npm as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:npm" }, "product_reference": "npm", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "npm as a component of Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0:npm" }, "product_reference": "npm", "relates_to_product_reference": "rhel-9.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "npm as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:npm" }, "product_reference": "npm", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "npm as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:npm" }, "product_reference": "npm", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "npm as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:npm" }, "product_reference": "npm", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "npm as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:npm" }, "product_reference": "npm", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "npm as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:npm" }, "product_reference": "npm", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2" }, "product_reference": "npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2 as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2" }, "product_reference": "npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2 as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z::appstream:npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2" }, "product_reference": "npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2", "relates_to_product_reference": "rhel-br-8.6.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs12-nodejs as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-nodejs12-nodejs" }, "product_reference": "rh-nodejs12-nodejs", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs12-nodejs-devel as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-nodejs12-nodejs-devel" }, "product_reference": "rh-nodejs12-nodejs-devel", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs12-nodejs-docs as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-nodejs12-nodejs-docs" }, "product_reference": "rh-nodejs12-nodejs-docs", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs12-nodejs.src as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-nodejs12-nodejs.src" }, "product_reference": "rh-nodejs12-nodejs.src", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs12-npm as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-nodejs12-npm" }, "product_reference": "rh-nodejs12-npm", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs14-nodejs as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-nodejs14-nodejs" }, "product_reference": "rh-nodejs14-nodejs", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs14-nodejs-devel as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-nodejs14-nodejs-devel" }, "product_reference": "rh-nodejs14-nodejs-devel", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs14-nodejs-docs as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-nodejs14-nodejs-docs" }, "product_reference": "rh-nodejs14-nodejs-docs", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs14-nodejs-full-i18n as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-nodejs14-nodejs-full-i18n" }, "product_reference": "rh-nodejs14-nodejs-full-i18n", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs14-nodejs.src as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-nodejs14-nodejs.src" }, "product_reference": "rh-nodejs14-nodejs.src", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs14-npm as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-nodejs14-npm" }, "product_reference": "rh-nodejs14-npm", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "v8-12.4-devel as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:v8-12.4-devel" }, "product_reference": "v8-12.4-devel", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "v8-12.4-devel as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:v8-12.4-devel" }, "product_reference": "v8-12.4-devel", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "v8-12.4-devel as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:v8-12.4-devel" }, "product_reference": "v8-12.4-devel", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "v8-12.4-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:v8-12.4-devel" }, "product_reference": "v8-12.4-devel", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "v8-12.4-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:v8-12.4-devel" }, "product_reference": "v8-12.4-devel", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "v8-12.4-devel as a component of Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0:v8-12.4-devel" }, "product_reference": "v8-12.4-devel", "relates_to_product_reference": "rhel-9.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "v8-12.4-devel as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z::appstream:v8-12.4-devel" }, "product_reference": "v8-12.4-devel", "relates_to_product_reference": "rhel-br-8.6.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "v8-13.6-devel as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:v8-13.6-devel" }, "product_reference": "v8-13.6-devel", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "v8-13.6-devel as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z::appstream:v8-13.6-devel" }, "product_reference": "v8-13.6-devel", "relates_to_product_reference": "rhel-br-8.6.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "v8-13.6-devel as a component of Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0:v8-13.6-devel" }, "product_reference": "v8-13.6-devel", "relates_to_product_reference": "rhel-9.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "v8-13.6-devel as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:v8-13.6-devel" }, "product_reference": "v8-13.6-devel", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "v8-13.6-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:v8-13.6-devel" }, "product_reference": "v8-13.6-devel", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "v8-13.6-devel as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:v8-13.6-devel" }, "product_reference": "v8-13.6-devel", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "v8-13.6-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:v8-13.6-devel" }, "product_reference": "v8-13.6-devel", "relates_to_product_reference": "rhel-8.10.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-43616", "cwe": { "id": "CWE-345", "name": "Insufficient Verification of Data Authenticity" }, "discovery_date": "2021-11-13T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "quay-3.10:nodejs.src", "quay-3.12:nodejs.src", "quay-3.13:nodejs.src", "quay-3.14:nodejs.src", "quay-3.15:nodejs.src", "quay-3.9:nodejs.src", "rhel-8.10.z::appstream:nodejs-debuginfo", "rhel-8.10.z::appstream:nodejs-debugsource", "rhel-8.10.z::appstream:nodejs-devel", "rhel-8.10.z::appstream:nodejs-docs", "rhel-8.10.z::appstream:nodejs-full-i18n", "rhel-8.10.z::appstream:nodejs-libs-debuginfo", "rhel-8.10.z::appstream:v8-12.4-devel", "rhel-8.10.z::appstream:v8-13.6-devel", "rhel-8.10.z:nodejs", "rhel-8.10.z:nodejs-debuginfo", "rhel-8.10.z:nodejs-debugsource", "rhel-8.10.z:nodejs-devel", "rhel-8.10.z:nodejs-docs", "rhel-8.10.z:nodejs-full-i18n", "rhel-8.10.z:nodejs-libs", "rhel-8.10.z:nodejs-libs-debuginfo", "rhel-8.10.z:nodejs:12/nodejs.src", "rhel-8.10.z:nodejs:14/nodejs.src", "rhel-8.10.z:npm", "rhel-8.10.z:v8-12.4-devel", "rhel-8.10.z:v8-13.6-devel", "rhel-8.2.0.z.aus:nodejs", "rhel-8.2.0.z.aus:nodejs-devel", "rhel-8.2.0.z.aus:nodejs-docs", "rhel-8.2.0.z.aus:nodejs-full-i18n", "rhel-8.2.0.z.aus:nodejs-libs", "rhel-8.2.0.z.aus:nodejs:12/nodejs.src", "rhel-8.2.0.z.aus:nodejs:14/nodejs.src", "rhel-8.2.0.z.aus:npm", "rhel-8.2.0.z.aus:v8-12.4-devel", "rhel-8.2.0.z.aus:v8-13.6-devel", "rhel-8.4.0.z.eus:nodejs", "rhel-8.4.0.z.eus:nodejs-devel", "rhel-8.4.0.z.eus:nodejs-docs", "rhel-8.4.0.z.eus:nodejs-full-i18n", "rhel-8.4.0.z.eus:nodejs-libs", "rhel-8.4.0.z.eus:nodejs:12/nodejs.src", "rhel-8.4.0.z.eus:nodejs:14/nodejs.src", "rhel-8.4.0.z.eus:npm", "rhel-8.4.0.z.eus:v8-12.4-devel", "rhel-8.4.0.z.eus:v8-13.6-devel", "rhel-8.6.0.z.aus:nodejs", "rhel-8.6.0.z.aus:nodejs-devel", "rhel-8.6.0.z.aus:nodejs-docs", "rhel-8.6.0.z.aus:nodejs-full-i18n", "rhel-8.6.0.z.aus:nodejs:12/nodejs.src", "rhel-8.6.0.z.aus:nodejs:14/nodejs.src", "rhel-8.6.0.z.aus:npm", "rhel-8.6.0.z.eus::appstream:nodejs-debuginfo", "rhel-8.6.0.z.eus::appstream:nodejs-debugsource", "rhel-8.6.0.z.eus::appstream:nodejs-devel", "rhel-8.6.0.z.eus::appstream:nodejs-docs", "rhel-8.6.0.z.eus::appstream:nodejs-full-i18n", "rhel-8.8.0.z.eus:nodejs", "rhel-8.8.0.z.eus:nodejs-devel", "rhel-8.8.0.z.eus:nodejs-docs", "rhel-8.8.0.z.eus:nodejs-full-i18n", "rhel-8.8.0.z.eus:nodejs:12/nodejs.src", "rhel-8.8.0.z.eus:nodejs:14/nodejs.src", "rhel-8.8.0.z.eus:npm", "rhel-9.0:nodejs", "rhel-9.0:nodejs-devel", "rhel-9.0:nodejs-docs", "rhel-9.0:nodejs-full-i18n", "rhel-9.0:nodejs-libs", "rhel-9.0:nodejs.src", "rhel-9.0:npm", "rhel-9.0:v8-12.4-devel", "rhel-9.0:v8-13.6-devel", "rhel-9.1.0:nodejs", "rhel-9.1.0:nodejs-devel", "rhel-9.1.0:nodejs-docs", "rhel-9.1.0:nodejs-full-i18n", "rhel-9.1.0:nodejs-libs", "rhel-9.1.0:npm", "rhel-9.1.0:v8-12.4-devel", "rhel-9.1.0:v8-13.6-devel", "rhel-br-8.6.0.z::appstream:nodejs-debuginfo", "rhel-br-8.6.0.z::appstream:nodejs-debugsource", "rhel-br-8.6.0.z::appstream:nodejs-devel", "rhel-br-8.6.0.z::appstream:nodejs-docs", "rhel-br-8.6.0.z::appstream:nodejs-full-i18n", "rhel-br-8.6.0.z::appstream:v8-12.4-devel", "rhel-br-8.6.0.z::appstream:v8-13.6-devel", "rhscl-3:rh-nodejs12-nodejs", "rhscl-3:rh-nodejs12-nodejs-devel", "rhscl-3:rh-nodejs12-nodejs-docs", "rhscl-3:rh-nodejs12-nodejs.src", "rhscl-3:rh-nodejs12-npm", "rhscl-3:rh-nodejs14-nodejs", "rhscl-3:rh-nodejs14-nodejs-devel", "rhscl-3:rh-nodejs14-nodejs-docs", "rhscl-3:rh-nodejs14-nodejs-full-i18n", "rhscl-3:rh-nodejs14-nodejs.src", "rhscl-3:rh-nodejs14-npm" ] } ], "notes": [ { "category": "other", "text": "Several nodejs modules in Red Hat Enterprise Linux 8 and software collections for Red Hat Enterprise Linux 7 are not affected by this flaw. This is because the vulnerability was never present in the 6.x version of npm in use by these products.\n\nRed Hat's Secure Software Development Life Cycle utilizes a layered testing approach. This significantly increases attack complexity, because a compromised package must remain undetected for months to years in testing in upstream communities before it could be adopted into a Red Hat product. This long dwell-time reduces impact to Important.", "title": "Statement" }, { "category": "description", "text": "A flaw was found in npm. The npm ci command proceeds with an installation even if dependency information in package-lock.json differs from package.json. This behavior is inconsistent with the documentation and makes it easier for attackers to install malware that was supposed to have been blocked by an exact version match requirement in package-lock.json.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "rhel-8.10.z::appstream:nodejs-0:16-8060020220519144917.ad008a3a.src", "rhel-8.10.z::appstream:nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.10.z::appstream:nodejs-libs", "rhel-8.10.z::appstream:nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.10.z::appstream:nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "rhel-8.10.z::appstream:npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.6.0.z.eus::appstream:nodejs-0:16-8060020220519144917.ad008a3a.src", "rhel-8.6.0.z.eus::appstream:nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.6.0.z.eus::appstream:nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.6.0.z.eus::appstream:nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "rhel-8.6.0.z.eus::appstream:npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-br-8.6.0.z::appstream:nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-br-8.6.0.z::appstream:nodejs-0:16.14.0-4.module+el8.6.0+15294+54b291d2.src", "rhel-br-8.6.0.z::appstream:nodejs-libs", "rhel-br-8.6.0.z::appstream:nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-br-8.6.0.z::appstream:nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "rhel-br-8.6.0.z::appstream:npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2" ], "known_affected": [ "rhel-8.6.0.z.aus:nodejs:16:8060020220519144917:ad008a3a/nodejs", "rhel-8.7.0:nodejs:16:8060020220519144917:ad008a3a/nodejs", "rhel-9.1.0:nodejs.src" ], "known_not_affected": [ "quay-3.10:nodejs.src", "quay-3.12:nodejs.src", "quay-3.13:nodejs.src", "quay-3.14:nodejs.src", "quay-3.15:nodejs.src", "quay-3.9:nodejs.src", "rhel-8.10.z::appstream:nodejs-debuginfo", "rhel-8.10.z::appstream:nodejs-debugsource", "rhel-8.10.z::appstream:nodejs-devel", "rhel-8.10.z::appstream:nodejs-docs", "rhel-8.10.z::appstream:nodejs-full-i18n", "rhel-8.10.z::appstream:nodejs-libs-debuginfo", "rhel-8.10.z::appstream:v8-12.4-devel", "rhel-8.10.z::appstream:v8-13.6-devel", "rhel-8.10.z:nodejs", "rhel-8.10.z:nodejs-debuginfo", "rhel-8.10.z:nodejs-debugsource", "rhel-8.10.z:nodejs-devel", "rhel-8.10.z:nodejs-docs", "rhel-8.10.z:nodejs-full-i18n", "rhel-8.10.z:nodejs-libs", "rhel-8.10.z:nodejs-libs-debuginfo", "rhel-8.10.z:nodejs:12/nodejs.src", "rhel-8.10.z:nodejs:14/nodejs.src", "rhel-8.10.z:npm", "rhel-8.10.z:v8-12.4-devel", "rhel-8.10.z:v8-13.6-devel", "rhel-8.2.0.z.aus:nodejs", "rhel-8.2.0.z.aus:nodejs-devel", "rhel-8.2.0.z.aus:nodejs-docs", "rhel-8.2.0.z.aus:nodejs-full-i18n", "rhel-8.2.0.z.aus:nodejs-libs", "rhel-8.2.0.z.aus:nodejs:12/nodejs.src", "rhel-8.2.0.z.aus:nodejs:14/nodejs.src", "rhel-8.2.0.z.aus:npm", "rhel-8.2.0.z.aus:v8-12.4-devel", "rhel-8.2.0.z.aus:v8-13.6-devel", "rhel-8.4.0.z.eus:nodejs", "rhel-8.4.0.z.eus:nodejs-devel", "rhel-8.4.0.z.eus:nodejs-docs", "rhel-8.4.0.z.eus:nodejs-full-i18n", "rhel-8.4.0.z.eus:nodejs-libs", "rhel-8.4.0.z.eus:nodejs:12/nodejs.src", "rhel-8.4.0.z.eus:nodejs:14/nodejs.src", "rhel-8.4.0.z.eus:npm", "rhel-8.4.0.z.eus:v8-12.4-devel", "rhel-8.4.0.z.eus:v8-13.6-devel", "rhel-8.6.0.z.aus:nodejs", "rhel-8.6.0.z.aus:nodejs-devel", "rhel-8.6.0.z.aus:nodejs-docs", "rhel-8.6.0.z.aus:nodejs-full-i18n", "rhel-8.6.0.z.aus:nodejs:12/nodejs.src", "rhel-8.6.0.z.aus:nodejs:14/nodejs.src", "rhel-8.6.0.z.aus:npm", "rhel-8.6.0.z.eus::appstream:nodejs-debuginfo", "rhel-8.6.0.z.eus::appstream:nodejs-debugsource", "rhel-8.6.0.z.eus::appstream:nodejs-devel", "rhel-8.6.0.z.eus::appstream:nodejs-docs", "rhel-8.6.0.z.eus::appstream:nodejs-full-i18n", "rhel-8.8.0.z.eus:nodejs", "rhel-8.8.0.z.eus:nodejs-devel", "rhel-8.8.0.z.eus:nodejs-docs", "rhel-8.8.0.z.eus:nodejs-full-i18n", "rhel-8.8.0.z.eus:nodejs:12/nodejs.src", "rhel-8.8.0.z.eus:nodejs:14/nodejs.src", "rhel-8.8.0.z.eus:npm", "rhel-9.0:nodejs", "rhel-9.0:nodejs-devel", "rhel-9.0:nodejs-docs", "rhel-9.0:nodejs-full-i18n", "rhel-9.0:nodejs-libs", "rhel-9.0:nodejs.src", "rhel-9.0:npm", "rhel-9.0:v8-12.4-devel", "rhel-9.0:v8-13.6-devel", "rhel-9.1.0:nodejs", "rhel-9.1.0:nodejs-devel", "rhel-9.1.0:nodejs-docs", "rhel-9.1.0:nodejs-full-i18n", "rhel-9.1.0:nodejs-libs", "rhel-9.1.0:npm", "rhel-9.1.0:v8-12.4-devel", "rhel-9.1.0:v8-13.6-devel", "rhel-br-8.6.0.z::appstream:nodejs-debuginfo", "rhel-br-8.6.0.z::appstream:nodejs-debugsource", "rhel-br-8.6.0.z::appstream:nodejs-devel", "rhel-br-8.6.0.z::appstream:nodejs-docs", "rhel-br-8.6.0.z::appstream:nodejs-full-i18n", "rhel-br-8.6.0.z::appstream:v8-12.4-devel", "rhel-br-8.6.0.z::appstream:v8-13.6-devel", "rhscl-3:rh-nodejs12-nodejs", "rhscl-3:rh-nodejs12-nodejs-devel", "rhscl-3:rh-nodejs12-nodejs-docs", "rhscl-3:rh-nodejs12-nodejs.src", "rhscl-3:rh-nodejs12-npm", "rhscl-3:rh-nodejs14-nodejs", "rhscl-3:rh-nodejs14-nodejs-devel", "rhscl-3:rh-nodejs14-nodejs-docs", "rhscl-3:rh-nodejs14-nodejs-full-i18n", "rhscl-3:rh-nodejs14-nodejs.src", "rhscl-3:rh-nodejs14-npm" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-43616" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-43616" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2021-43616" } ], "remediations": [ { "category": "none_available", "details": "Affected", "product_ids": [ "rhel-8.6.0.z.aus:nodejs:16:8060020220519144917:ad008a3a/nodejs", "rhel-8.7.0:nodejs:16:8060020220519144917:ad008a3a/nodejs", "rhel-9.1.0:nodejs.src" ] }, { "category": "vendor_fix", "date": "2022-05-30T12:22:04+00:00", "details": "Apply advisory RHSA-2022:4796 as per vendors instructions.", "product_ids": [ "rhel-8.10.z::appstream:nodejs-0:16-8060020220519144917.ad008a3a.src", "rhel-8.10.z::appstream:nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.10.z::appstream:nodejs-libs", "rhel-8.10.z::appstream:nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.10.z::appstream:nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "rhel-8.10.z::appstream:npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.6.0.z.eus::appstream:nodejs-0:16-8060020220519144917.ad008a3a.src", "rhel-8.6.0.z.eus::appstream:nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.6.0.z.eus::appstream:nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.6.0.z.eus::appstream:nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "rhel-8.6.0.z.eus::appstream:npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-br-8.6.0.z::appstream:nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-br-8.6.0.z::appstream:nodejs-0:16.14.0-4.module+el8.6.0+15294+54b291d2.src", "rhel-br-8.6.0.z::appstream:nodejs-libs", "rhel-br-8.6.0.z::appstream:nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-br-8.6.0.z::appstream:nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "rhel-br-8.6.0.z::appstream:npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2" ], "url": "https://access.redhat.com/errata/RHSA-2022:4796" }, { "category": "workaround", "details": "Red Hat has investigated whether possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.", "product_ids": [ "rhel-8.6.0.z.aus:nodejs:16:8060020220519144917:ad008a3a/nodejs", "rhel-8.7.0:nodejs:16:8060020220519144917:ad008a3a/nodejs", "rhel-9.1.0:nodejs.src" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH" }, "products": [ "quay-3.10:nodejs.src", "quay-3.12:nodejs.src", "quay-3.13:nodejs.src", "quay-3.14:nodejs.src", "quay-3.15:nodejs.src", "quay-3.9:nodejs.src", "rhel-8.10.z::appstream:nodejs-0:16-8060020220519144917.ad008a3a.src", "rhel-8.10.z::appstream:nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.10.z::appstream:nodejs-debuginfo", "rhel-8.10.z::appstream:nodejs-debugsource", "rhel-8.10.z::appstream:nodejs-devel", "rhel-8.10.z::appstream:nodejs-docs", "rhel-8.10.z::appstream:nodejs-full-i18n", "rhel-8.10.z::appstream:nodejs-libs", "rhel-8.10.z::appstream:nodejs-libs-debuginfo", "rhel-8.10.z::appstream:nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.10.z::appstream:nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "rhel-8.10.z::appstream:npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.10.z::appstream:v8-12.4-devel", "rhel-8.10.z::appstream:v8-13.6-devel", "rhel-8.10.z:nodejs", "rhel-8.10.z:nodejs-debuginfo", "rhel-8.10.z:nodejs-debugsource", "rhel-8.10.z:nodejs-devel", "rhel-8.10.z:nodejs-docs", "rhel-8.10.z:nodejs-full-i18n", "rhel-8.10.z:nodejs-libs", "rhel-8.10.z:nodejs-libs-debuginfo", "rhel-8.10.z:nodejs:12/nodejs.src", "rhel-8.10.z:nodejs:14/nodejs.src", "rhel-8.10.z:npm", "rhel-8.10.z:v8-12.4-devel", "rhel-8.10.z:v8-13.6-devel", "rhel-8.2.0.z.aus:nodejs", "rhel-8.2.0.z.aus:nodejs-devel", "rhel-8.2.0.z.aus:nodejs-docs", "rhel-8.2.0.z.aus:nodejs-full-i18n", "rhel-8.2.0.z.aus:nodejs-libs", "rhel-8.2.0.z.aus:nodejs:12/nodejs.src", "rhel-8.2.0.z.aus:nodejs:14/nodejs.src", "rhel-8.2.0.z.aus:npm", "rhel-8.2.0.z.aus:v8-12.4-devel", "rhel-8.2.0.z.aus:v8-13.6-devel", "rhel-8.4.0.z.eus:nodejs", "rhel-8.4.0.z.eus:nodejs-devel", "rhel-8.4.0.z.eus:nodejs-docs", "rhel-8.4.0.z.eus:nodejs-full-i18n", "rhel-8.4.0.z.eus:nodejs-libs", "rhel-8.4.0.z.eus:nodejs:12/nodejs.src", "rhel-8.4.0.z.eus:nodejs:14/nodejs.src", "rhel-8.4.0.z.eus:npm", "rhel-8.4.0.z.eus:v8-12.4-devel", "rhel-8.4.0.z.eus:v8-13.6-devel", "rhel-8.6.0.z.aus:nodejs", "rhel-8.6.0.z.aus:nodejs-devel", "rhel-8.6.0.z.aus:nodejs-docs", "rhel-8.6.0.z.aus:nodejs-full-i18n", "rhel-8.6.0.z.aus:nodejs:12/nodejs.src", "rhel-8.6.0.z.aus:nodejs:14/nodejs.src", "rhel-8.6.0.z.aus:nodejs:16:8060020220519144917:ad008a3a/nodejs", "rhel-8.6.0.z.aus:npm", "rhel-8.6.0.z.eus::appstream:nodejs-0:16-8060020220519144917.ad008a3a.src", "rhel-8.6.0.z.eus::appstream:nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.6.0.z.eus::appstream:nodejs-debuginfo", "rhel-8.6.0.z.eus::appstream:nodejs-debugsource", "rhel-8.6.0.z.eus::appstream:nodejs-devel", "rhel-8.6.0.z.eus::appstream:nodejs-docs", "rhel-8.6.0.z.eus::appstream:nodejs-full-i18n", "rhel-8.6.0.z.eus::appstream:nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.6.0.z.eus::appstream:nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "rhel-8.6.0.z.eus::appstream:npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.7.0:nodejs:16:8060020220519144917:ad008a3a/nodejs", "rhel-8.8.0.z.eus:nodejs", "rhel-8.8.0.z.eus:nodejs-devel", "rhel-8.8.0.z.eus:nodejs-docs", "rhel-8.8.0.z.eus:nodejs-full-i18n", "rhel-8.8.0.z.eus:nodejs:12/nodejs.src", "rhel-8.8.0.z.eus:nodejs:14/nodejs.src", "rhel-8.8.0.z.eus:npm", "rhel-9.0:nodejs", "rhel-9.0:nodejs-devel", "rhel-9.0:nodejs-docs", "rhel-9.0:nodejs-full-i18n", "rhel-9.0:nodejs-libs", "rhel-9.0:nodejs.src", "rhel-9.0:npm", "rhel-9.0:v8-12.4-devel", "rhel-9.0:v8-13.6-devel", "rhel-9.1.0:nodejs", "rhel-9.1.0:nodejs-devel", "rhel-9.1.0:nodejs-docs", "rhel-9.1.0:nodejs-full-i18n", "rhel-9.1.0:nodejs-libs", "rhel-9.1.0:nodejs.src", "rhel-9.1.0:npm", "rhel-9.1.0:v8-12.4-devel", "rhel-9.1.0:v8-13.6-devel", "rhel-br-8.6.0.z::appstream:nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-br-8.6.0.z::appstream:nodejs-0:16.14.0-4.module+el8.6.0+15294+54b291d2.src", "rhel-br-8.6.0.z::appstream:nodejs-debuginfo", "rhel-br-8.6.0.z::appstream:nodejs-debugsource", "rhel-br-8.6.0.z::appstream:nodejs-devel", "rhel-br-8.6.0.z::appstream:nodejs-docs", "rhel-br-8.6.0.z::appstream:nodejs-full-i18n", "rhel-br-8.6.0.z::appstream:nodejs-libs", "rhel-br-8.6.0.z::appstream:nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-br-8.6.0.z::appstream:nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "rhel-br-8.6.0.z::appstream:npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-br-8.6.0.z::appstream:v8-12.4-devel", "rhel-br-8.6.0.z::appstream:v8-13.6-devel", "rhscl-3:rh-nodejs12-nodejs", "rhscl-3:rh-nodejs12-nodejs-devel", "rhscl-3:rh-nodejs12-nodejs-docs", "rhscl-3:rh-nodejs12-nodejs.src", "rhscl-3:rh-nodejs12-npm", "rhscl-3:rh-nodejs14-nodejs", "rhscl-3:rh-nodejs14-nodejs-devel", "rhscl-3:rh-nodejs14-nodejs-docs", "rhscl-3:rh-nodejs14-nodejs-full-i18n", "rhscl-3:rh-nodejs14-nodejs.src", "rhscl-3:rh-nodejs14-npm" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "quay-3.10:nodejs.src", "quay-3.12:nodejs.src", "quay-3.13:nodejs.src", "quay-3.14:nodejs.src", "quay-3.15:nodejs.src", "quay-3.9:nodejs.src", "rhel-8.10.z::appstream:nodejs-0:16-8060020220519144917.ad008a3a.src", "rhel-8.10.z::appstream:nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.10.z::appstream:nodejs-debuginfo", "rhel-8.10.z::appstream:nodejs-debugsource", "rhel-8.10.z::appstream:nodejs-devel", "rhel-8.10.z::appstream:nodejs-docs", "rhel-8.10.z::appstream:nodejs-full-i18n", "rhel-8.10.z::appstream:nodejs-libs", "rhel-8.10.z::appstream:nodejs-libs-debuginfo", "rhel-8.10.z::appstream:nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.10.z::appstream:nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "rhel-8.10.z::appstream:npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.10.z::appstream:v8-12.4-devel", "rhel-8.10.z::appstream:v8-13.6-devel", "rhel-8.10.z:nodejs", "rhel-8.10.z:nodejs-debuginfo", "rhel-8.10.z:nodejs-debugsource", "rhel-8.10.z:nodejs-devel", "rhel-8.10.z:nodejs-docs", "rhel-8.10.z:nodejs-full-i18n", "rhel-8.10.z:nodejs-libs", "rhel-8.10.z:nodejs-libs-debuginfo", "rhel-8.10.z:nodejs:12/nodejs.src", "rhel-8.10.z:nodejs:14/nodejs.src", "rhel-8.10.z:npm", "rhel-8.10.z:v8-12.4-devel", "rhel-8.10.z:v8-13.6-devel", "rhel-8.2.0.z.aus:nodejs", "rhel-8.2.0.z.aus:nodejs-devel", "rhel-8.2.0.z.aus:nodejs-docs", "rhel-8.2.0.z.aus:nodejs-full-i18n", "rhel-8.2.0.z.aus:nodejs-libs", "rhel-8.2.0.z.aus:nodejs:12/nodejs.src", "rhel-8.2.0.z.aus:nodejs:14/nodejs.src", "rhel-8.2.0.z.aus:npm", "rhel-8.2.0.z.aus:v8-12.4-devel", "rhel-8.2.0.z.aus:v8-13.6-devel", "rhel-8.4.0.z.eus:nodejs", "rhel-8.4.0.z.eus:nodejs-devel", "rhel-8.4.0.z.eus:nodejs-docs", "rhel-8.4.0.z.eus:nodejs-full-i18n", "rhel-8.4.0.z.eus:nodejs-libs", "rhel-8.4.0.z.eus:nodejs:12/nodejs.src", "rhel-8.4.0.z.eus:nodejs:14/nodejs.src", "rhel-8.4.0.z.eus:npm", "rhel-8.4.0.z.eus:v8-12.4-devel", "rhel-8.4.0.z.eus:v8-13.6-devel", "rhel-8.6.0.z.aus:nodejs", "rhel-8.6.0.z.aus:nodejs-devel", "rhel-8.6.0.z.aus:nodejs-docs", "rhel-8.6.0.z.aus:nodejs-full-i18n", "rhel-8.6.0.z.aus:nodejs:12/nodejs.src", "rhel-8.6.0.z.aus:nodejs:14/nodejs.src", "rhel-8.6.0.z.aus:nodejs:16:8060020220519144917:ad008a3a/nodejs", "rhel-8.6.0.z.aus:npm", "rhel-8.6.0.z.eus::appstream:nodejs-0:16-8060020220519144917.ad008a3a.src", "rhel-8.6.0.z.eus::appstream:nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.6.0.z.eus::appstream:nodejs-debuginfo", "rhel-8.6.0.z.eus::appstream:nodejs-debugsource", "rhel-8.6.0.z.eus::appstream:nodejs-devel", "rhel-8.6.0.z.eus::appstream:nodejs-docs", "rhel-8.6.0.z.eus::appstream:nodejs-full-i18n", "rhel-8.6.0.z.eus::appstream:nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.6.0.z.eus::appstream:nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "rhel-8.6.0.z.eus::appstream:npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-8.7.0:nodejs:16:8060020220519144917:ad008a3a/nodejs", "rhel-8.8.0.z.eus:nodejs", "rhel-8.8.0.z.eus:nodejs-devel", "rhel-8.8.0.z.eus:nodejs-docs", "rhel-8.8.0.z.eus:nodejs-full-i18n", "rhel-8.8.0.z.eus:nodejs:12/nodejs.src", "rhel-8.8.0.z.eus:nodejs:14/nodejs.src", "rhel-8.8.0.z.eus:npm", "rhel-9.0:nodejs", "rhel-9.0:nodejs-devel", "rhel-9.0:nodejs-docs", "rhel-9.0:nodejs-full-i18n", "rhel-9.0:nodejs-libs", "rhel-9.0:nodejs.src", "rhel-9.0:npm", "rhel-9.0:v8-12.4-devel", "rhel-9.0:v8-13.6-devel", "rhel-9.1.0:nodejs", "rhel-9.1.0:nodejs-devel", "rhel-9.1.0:nodejs-docs", "rhel-9.1.0:nodejs-full-i18n", "rhel-9.1.0:nodejs-libs", "rhel-9.1.0:nodejs.src", "rhel-9.1.0:npm", "rhel-9.1.0:v8-12.4-devel", "rhel-9.1.0:v8-13.6-devel", "rhel-br-8.6.0.z::appstream:nodejs-0:16.14.0-4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-br-8.6.0.z::appstream:nodejs-0:16.14.0-4.module+el8.6.0+15294+54b291d2.src", "rhel-br-8.6.0.z::appstream:nodejs-debuginfo", "rhel-br-8.6.0.z::appstream:nodejs-debugsource", "rhel-br-8.6.0.z::appstream:nodejs-devel", "rhel-br-8.6.0.z::appstream:nodejs-docs", "rhel-br-8.6.0.z::appstream:nodejs-full-i18n", "rhel-br-8.6.0.z::appstream:nodejs-libs", "rhel-br-8.6.0.z::appstream:nodejs-nodemon-0:2.0.15-1.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-br-8.6.0.z::appstream:nodejs-packaging-0:25-1.module%2Bel8.5.0%2B10992%2Bfac5fe06", "rhel-br-8.6.0.z::appstream:npm-0:8.3.1-1.16.14.0.4.module%2Bel8.6.0%2B15294%2B54b291d2", "rhel-br-8.6.0.z::appstream:v8-12.4-devel", "rhel-br-8.6.0.z::appstream:v8-13.6-devel", "rhscl-3:rh-nodejs12-nodejs", "rhscl-3:rh-nodejs12-nodejs-devel", "rhscl-3:rh-nodejs12-nodejs-docs", "rhscl-3:rh-nodejs12-nodejs.src", "rhscl-3:rh-nodejs12-npm", "rhscl-3:rh-nodejs14-nodejs", "rhscl-3:rh-nodejs14-nodejs-devel", "rhscl-3:rh-nodejs14-nodejs-docs", "rhscl-3:rh-nodejs14-nodejs-full-i18n", "rhscl-3:rh-nodejs14-nodejs.src", "rhscl-3:rh-nodejs14-npm" ] } ], "title": "npm ci succeeds when package-lock.json doesn't match package.json" } ] }