https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T19:46:50.544765+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-32212 CVE-2022-32212 2026-09-29T19:46:50.546044+00:00

Affected: NodeJS Node

A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.