{"id":"CLEANSTART-2026-IS74202","summary":"Security fixes for CVE-2017-14919, CVE-2017-15896, CVE-2018-0734, CVE-2018-0735, CVE-2018-1000168, CVE-2018-12121, CVE-2018-12122, CVE-2018-7160, CVE-2018-7161, CVE-2019-15604, CVE-2019-15605, CVE-2019-15606, CVE-2019-5737, CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514, CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518, CVE-2020-11080, CVE-2020-7774, CVE-2020-8172, CVE-2020-8174, CVE-2020-8201, CVE-2020-8252, CVE-2020-8265, CVE-2020-8277, CVE-2020-8287, CVE-2021-21148, CVE-2021-22930, CVE-2021-22931, CVE-2021-22959, CVE-2021-22960, CVE-2021-3672, CVE-2021-43803, CVE-2021-44531, CVE-2021-44532, CVE-2022-32212, CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2022-35255, CVE-2022-35256, CVE-2022-3602, CVE-2022-43548, CVE-2023-23918, CVE-2023-23919, CVE-2023-23920, CVE-2023-23936, CVE-2023-24807, CVE-2023-39333, CVE-2023-44487, CVE-2024-22018, CVE-2024-22020, CVE-2024-27982, CVE-2024-27983, CVE-2024-36138, CVE-2024-37372 applied in versions: 10.14.0-r0, 10.15.3-r0, 10.16.3-r0, 12.15.0-r0, 12.18.0-r0, 12.18.4-r0, 14.15.1-r0, 14.15.4-r0, 14.15.5-r0, 14.16.0-r0, 14.16.1-r0, 14.17.4-r0, 14.17.5-r0, 14.17.6-r0, 14.18.1-r0, 16.13.2-r0, 16.17.1-r0, 18.12.1-r0, 18.14.1-r0, 18.17.1-r0, 18.18.2-r0, 20.12.1-r0, 20.15.1-r0, 6.11.1-r0, 6.11.5-r0, 8.11.0-r0, 8.11.3-r0, 8.11.4-r0, 8.9.3-r0","details":"Multiple security vulnerabilities affect the nodejs package. These issues are resolved in later releases. See references for individual vulnerability details.","modified":"2026-04-01T18:47:52.187791Z","published":"2026-04-01T09:09:55.185988Z","upstream":["CVE-2017-14919","CVE-2017-15896","CVE-2018-0734","CVE-2018-0735","CVE-2018-1000168","CVE-2018-12121","CVE-2018-12122","CVE-2018-7160","CVE-2018-7161","CVE-2019-15604","CVE-2019-15605","CVE-2019-15606","CVE-2019-5737","CVE-2019-9511","CVE-2019-9512","CVE-2019-9513","CVE-2019-9514","CVE-2019-9515","CVE-2019-9516","CVE-2019-9517","CVE-2019-9518","CVE-2020-11080","CVE-2020-7774","CVE-2020-8172","CVE-2020-8174","CVE-2020-8201","CVE-2020-8252","CVE-2020-8265","CVE-2020-8277","CVE-2020-8287","CVE-2021-21148","CVE-2021-22930","CVE-2021-22931","CVE-2021-22959","CVE-2021-22960","CVE-2021-3672","CVE-2021-43803","CVE-2021-44531","CVE-2021-44532","CVE-2022-32212","CVE-2022-32213","CVE-2022-32214","CVE-2022-32215","CVE-2022-35255","CVE-2022-35256","CVE-2022-3602","CVE-2022-43548","CVE-2023-23918","CVE-2023-23919","CVE-2023-23920","CVE-2023-23936","CVE-2023-24807","CVE-2023-39333","CVE-2023-44487","CVE-2024-22018","CVE-2024-22020","CVE-2024-27982","CVE-2024-27983","CVE-2024-36138","CVE-2024-37372"],"database_specific":{},"references":[{"type":"ADVISORY","url":"https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-IS74202.json"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2017-14919"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2017-15896"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2018-0734"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2018-0735"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2018-1000168"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2018-12121"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2018-12122"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2018-7160"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2018-7161"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-15604"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-15605"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-15606"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-5737"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-9511"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-9512"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-9513"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-9514"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-9515"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-9516"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-9517"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-9518"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2020-11080"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2020-7774"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2020-8172"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2020-8174"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2020-8201"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2020-8252"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2020-8265"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2020-8277"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2020-8287"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2021-21148"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2021-22930"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2021-22931"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2021-22959"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2021-22960"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2021-3672"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2021-43803"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2021-44531"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2021-44532"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2022-32212"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2022-32213"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2022-32214"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2022-32215"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2022-35255"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2022-35256"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2022-3602"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2022-43548"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2023-23918"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2023-23919"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2023-23920"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2023-23936"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2023-24807"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2023-39333"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2023-44487"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2024-22018"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2024-22020"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2024-27982"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2024-27983"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2024-36138"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2024-37372"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14919"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15896"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0734"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0735"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000168"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12121"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12122"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7160"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7161"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15604"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15605"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15606"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5737"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9511"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9512"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9513"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9514"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9515"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9516"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9517"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9518"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11080"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7774"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8172"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8174"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8201"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8252"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8265"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8277"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8287"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21148"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22930"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22931"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22959"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22960"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3672"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43803"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44531"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44532"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32212"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32213"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32214"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32215"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35255"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35256"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3602"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-43548"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23918"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23919"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23920"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23936"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24807"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39333"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22018"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22020"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27982"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27983"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36138"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-37372"}],"affected":[{"package":{"name":"nodejs","ecosystem":"CleanStart"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.3-r0"}]}],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IS74202.json"}}],"schema_version":"1.7.5"}