{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
              "matchCriteriaId": "30C30A13-A774-48C1-A0FC-1F31327DE909",
              "versionEndExcluding": "6.15.0",
              "versionStartIncluding": "6.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
              "matchCriteriaId": "1B607427-7A5B-4F24-B042-CF4BF95DC185",
              "versionEndExcluding": "8.14.0",
              "versionStartIncluding": "8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
              "matchCriteriaId": "34D3C40A-3BE7-42A4-BE15-762CEE1754C4",
              "versionEndExcluding": "10.14.0",
              "versionStartIncluding": "10.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
              "matchCriteriaId": "4E62EA78-C705-4AC9-9C0B-3C9114087C37",
              "versionEndExcluding": "11.3.0",
              "versionStartIncluding": "11.0.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*",
              "matchCriteriaId": "053C1B35-3869-41C2-9551-044182DE0A64",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "92BC9265-6959-4D37-BE5E-8C45E98992F8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "831F0F47-3565-4763-B16F-C87B1FF2035E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "0E3F09B5-569F-4C58-9FCA-3C0953D107B5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "6C3741B8-851F-475D-B428-523F4F722350",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "6897676D-53F9-45B3-B27F-7FF9A4C58D33",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E28F226A-CBC7-4A32-BE58-398FA5B42481",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "76C24D94-834A-4E9D-8F73-624AFA99AAA2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "B09ACF2D-D83F-4A86-8185-9569605D8EE1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC10D919-57FD-4725-B8D2-39ECB476902F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "1272DF03-7674-4BD4-8E64-94004B195448",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer."
    },
    {
      "lang": "es",
      "value": "Node.js: Todas las versiones anteriores a la 6.15.0, 8.14.0, 10.14.0 y 11.3.0: Denegaci\u00f3n de servicio (DoS) con cabeceras HTTP grandes. Mediante la combinaci\u00f3n de muchas peticiones con cabeceras de tama\u00f1o m\u00e1ximo (casi 80 KB por conexi\u00f3n) y al terminar a su debido tiempo las cabeceras, es posible provocar que el servidor HTTP aborte el fallo de asignaci\u00f3n de memoria din\u00e1mica (heap). El potencial del ataque se ve mitigado por el uso de un balance de carga u otra capa del proxy."
    }
  ],
  "id": "CVE-2018-12121",
  "lastModified": "2024-12-27T16:15:22.400",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2018-11-28T17:29:00.337",
  "references": [
    {
      "source": "cve-request@iojs.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/106043"
    },
    {
      "source": "cve-request@iojs.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2019:1821"
    },
    {
      "source": "cve-request@iojs.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2019:2258"
    },
    {
      "source": "cve-request@iojs.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2019:3497"
    },
    {
      "source": "cve-request@iojs.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/"
    },
    {
      "source": "cve-request@iojs.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.gentoo.org/glsa/202003-48"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/106043"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2019:1821"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2019:2258"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2019:3497"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.gentoo.org/glsa/202003-48"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://security.netapp.com/advisory/ntap-20241227-0008/"
    }
  ],
  "sourceIdentifier": "cve-request@iojs.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ],
      "source": "cve-request@iojs.org",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2018-12121"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-400"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2018-11-28T17:29:00Z",
    "severity": "HIGH"
  },
  "details": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.",
  "id": "GHSA-2p2c-vwq7-7vg6",
  "modified": "2024-12-27T18:30:25Z",
  "published": "2022-05-13T01:27:48Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12121"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:1821"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2258"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:3497"
    },
    {
      "type": "WEB",
      "url": "https://nodejs.org/en/blog/vulnerability/november-2018-security-releases"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/202003-48"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20241227-0008"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/106043"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2018-12121",
    "description": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.",
    "id": "GSD-2018-12121",
    "references": [
      "https://www.suse.com/security/cve/CVE-2018-12121.html",
      "https://access.redhat.com/errata/RHSA-2019:3497",
      "https://access.redhat.com/errata/RHSA-2019:2939",
      "https://access.redhat.com/errata/RHSA-2019:2258",
      "https://access.redhat.com/errata/RHSA-2019:1821",
      "https://advisories.mageia.org/CVE-2018-12121.html",
      "https://alas.aws.amazon.com/cve/html/CVE-2018-12121.html",
      "https://linux.oracle.com/cve/CVE-2018-12121.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2018-12121"
      ],
      "details": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.",
      "id": "GSD-2018-12121",
      "modified": "2023-12-13T01:22:29.749630Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve-request@iojs.org",
        "ID": "CVE-2018-12121",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Node.js",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "The Node.js Project"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-400: Uncontrolled Resource Consumption / Denial of Service"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/",
            "refsource": "CONFIRM",
            "url": "https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/"
          },
          {
            "name": "106043",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/106043"
          },
          {
            "name": "RHSA-2019:1821",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:1821"
          },
          {
            "name": "RHSA-2019:2258",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2258"
          },
          {
            "name": "RHSA-2019:3497",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:3497"
          },
          {
            "name": "GLSA-202003-48",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/202003-48"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "11.3.0",
                "versionStartIncluding": "11.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "10.14.0",
                "versionStartIncluding": "10.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "8.14.0",
                "versionStartIncluding": "8.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.15.0",
                "versionStartIncluding": "6.0.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve-request@iojs.org",
          "ID": "CVE-2018-12121"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-400"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/"
            },
            {
              "name": "106043",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/106043"
            },
            {
              "name": "RHSA-2019:1821",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:1821"
            },
            {
              "name": "RHSA-2019:2258",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2258"
            },
            {
              "name": "RHSA-2019:3497",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:3497"
            },
            {
              "name": "GLSA-202003-48",
              "refsource": "GENTOO",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.gentoo.org/glsa/202003-48"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2022-09-06T17:54Z",
      "publishedDate": "2018-11-28T17:29Z"
    }
  }
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2018-12121 Node.js: All versions prior to Node.js 6.15.0 8.14.0 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection) and carefully timed completion of the headers it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer. - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2018/msrc_cve-2018-12121.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Node.js: All versions prior to Node.js 6.15.0 8.14.0 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection) and carefully timed completion of the headers it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.",
    "tracking": {
      "current_release_date": "2021-06-06T00:00:00.000Z",
      "generator": {
        "date": "2025-10-19T17:23:54.152Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2018-12121",
      "initial_release_date": "2018-11-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2021-06-06T00:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.0",
                "product": {
                  "name": "CBL Mariner 1.0",
                  "product_id": "16820"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccm1 nodejs 14.17.2-1",
                "product": {
                  "name": "\u003ccm1 nodejs 14.17.2-1",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "cm1 nodejs 14.17.2-1",
                "product": {
                  "name": "cm1 nodejs 14.17.2-1",
                  "product_id": "16918"
                }
              }
            ],
            "category": "product_name",
            "name": "nodejs"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccm1 nodejs 14.17.2-1 as a component of CBL Mariner 1.0",
          "product_id": "16820-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cm1 nodejs 14.17.2-1 as a component of CBL Mariner 1.0",
          "product_id": "16918-16820"
        },
        "product_reference": "16918",
        "relates_to_product_reference": "16820"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-12121",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "general",
          "text": "nodejs",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "16918-16820"
        ],
        "known_affected": [
          "16820-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2018-12121 Node.js: All versions prior to Node.js 6.15.0 8.14.0 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection) and carefully timed completion of the headers it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer. - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2018/msrc_cve-2018-12121.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-06-06T00:00:00.000Z",
          "details": "14.17.2-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "16820-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "environmentalsScore": 0.0,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "16820-1"
          ]
        }
      ],
      "title": "Node.js: All versions prior to Node.js 6.15.0 8.14.0 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection) and carefully timed completion of the headers it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer."
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for nodejs8",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for nodejs8 to version 8.15.0 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-12121: Fixed a Denial of Service with large HTTP headers (bsc#1117626)\n- CVE-2018-12122: Fixed the \u0027Slowloris\u0027 HTTP Denial of Service (bsc#1117627)\n- CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630)\n- CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript protocol (bsc#1117629)\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2019-89",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_0089-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2019:0089-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WVHUGID7T2P6NHDOVMAVMRSCBS4GN25L/#WVHUGID7T2P6NHDOVMAVMRSCBS4GN25L"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2019:0089-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WVHUGID7T2P6NHDOVMAVMRSCBS4GN25L/#WVHUGID7T2P6NHDOVMAVMRSCBS4GN25L"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1117626",
        "url": "https://bugzilla.suse.com/1117626"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1117627",
        "url": "https://bugzilla.suse.com/1117627"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1117629",
        "url": "https://bugzilla.suse.com/1117629"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1117630",
        "url": "https://bugzilla.suse.com/1117630"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-12116 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-12116/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-12121 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-12121/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-12122 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-12122/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-12123 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-12123/"
      }
    ],
    "title": "Security update for nodejs8",
    "tracking": {
      "current_release_date": "2019-03-23T10:49:42Z",
      "generator": {
        "date": "2019-03-23T10:49:42Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2019:0089-1",
      "initial_release_date": "2019-03-23T10:49:42Z",
      "revision_history": [
        {
          "date": "2019-03-23T10:49:42Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs8-8.15.0-lp150.2.9.1.i586",
                "product": {
                  "name": "nodejs8-8.15.0-lp150.2.9.1.i586",
                  "product_id": "nodejs8-8.15.0-lp150.2.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs8-devel-8.15.0-lp150.2.9.1.i586",
                "product": {
                  "name": "nodejs8-devel-8.15.0-lp150.2.9.1.i586",
                  "product_id": "nodejs8-devel-8.15.0-lp150.2.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "npm8-8.15.0-lp150.2.9.1.i586",
                "product": {
                  "name": "npm8-8.15.0-lp150.2.9.1.i586",
                  "product_id": "npm8-8.15.0-lp150.2.9.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs8-docs-8.15.0-lp150.2.9.1.noarch",
                "product": {
                  "name": "nodejs8-docs-8.15.0-lp150.2.9.1.noarch",
                  "product_id": "nodejs8-docs-8.15.0-lp150.2.9.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs8-8.15.0-lp150.2.9.1.x86_64",
                "product": {
                  "name": "nodejs8-8.15.0-lp150.2.9.1.x86_64",
                  "product_id": "nodejs8-8.15.0-lp150.2.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs8-devel-8.15.0-lp150.2.9.1.x86_64",
                "product": {
                  "name": "nodejs8-devel-8.15.0-lp150.2.9.1.x86_64",
                  "product_id": "nodejs8-devel-8.15.0-lp150.2.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "npm8-8.15.0-lp150.2.9.1.x86_64",
                "product": {
                  "name": "npm8-8.15.0-lp150.2.9.1.x86_64",
                  "product_id": "npm8-8.15.0-lp150.2.9.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.0",
                "product": {
                  "name": "openSUSE Leap 15.0",
                  "product_id": "openSUSE Leap 15.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.15.0-lp150.2.9.1.i586 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.i586"
        },
        "product_reference": "nodejs8-8.15.0-lp150.2.9.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-8.15.0-lp150.2.9.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.x86_64"
        },
        "product_reference": "nodejs8-8.15.0-lp150.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.15.0-lp150.2.9.1.i586 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.i586"
        },
        "product_reference": "nodejs8-devel-8.15.0-lp150.2.9.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-devel-8.15.0-lp150.2.9.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.x86_64"
        },
        "product_reference": "nodejs8-devel-8.15.0-lp150.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs8-docs-8.15.0-lp150.2.9.1.noarch as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:nodejs8-docs-8.15.0-lp150.2.9.1.noarch"
        },
        "product_reference": "nodejs8-docs-8.15.0-lp150.2.9.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.15.0-lp150.2.9.1.i586 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.i586"
        },
        "product_reference": "npm8-8.15.0-lp150.2.9.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm8-8.15.0-lp150.2.9.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.x86_64"
        },
        "product_reference": "npm8-8.15.0-lp150.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-12116",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-12116"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.i586",
          "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.x86_64",
          "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.i586",
          "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.x86_64",
          "openSUSE Leap 15.0:nodejs8-docs-8.15.0-lp150.2.9.1.noarch",
          "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.i586",
          "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-12116",
          "url": "https://www.suse.com/security/cve/CVE-2018-12116"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117630 for CVE-2018-12116",
          "url": "https://bugzilla.suse.com/1117630"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-docs-8.15.0-lp150.2.9.1.noarch",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-docs-8.15.0-lp150.2.9.1.noarch",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-23T10:49:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-12116"
    },
    {
      "cve": "CVE-2018-12121",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-12121"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.i586",
          "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.x86_64",
          "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.i586",
          "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.x86_64",
          "openSUSE Leap 15.0:nodejs8-docs-8.15.0-lp150.2.9.1.noarch",
          "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.i586",
          "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-12121",
          "url": "https://www.suse.com/security/cve/CVE-2018-12121"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117626 for CVE-2018-12121",
          "url": "https://bugzilla.suse.com/1117626"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127532 for CVE-2018-12121",
          "url": "https://bugzilla.suse.com/1127532"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-docs-8.15.0-lp150.2.9.1.noarch",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-docs-8.15.0-lp150.2.9.1.noarch",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-23T10:49:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-12121"
    },
    {
      "cve": "CVE-2018-12122",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-12122"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.i586",
          "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.x86_64",
          "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.i586",
          "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.x86_64",
          "openSUSE Leap 15.0:nodejs8-docs-8.15.0-lp150.2.9.1.noarch",
          "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.i586",
          "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-12122",
          "url": "https://www.suse.com/security/cve/CVE-2018-12122"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117627 for CVE-2018-12122",
          "url": "https://bugzilla.suse.com/1117627"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-docs-8.15.0-lp150.2.9.1.noarch",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-docs-8.15.0-lp150.2.9.1.noarch",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-23T10:49:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-12122"
    },
    {
      "cve": "CVE-2018-12123",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-12123"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascript protocol: If a Node.js application is using url.parse() to determine the URL hostname, that hostname can be spoofed by using a mixed case \"javascript:\" (e.g. \"javAscript:\") protocol (other protocols are not affected). If security decisions are made about the URL based on the hostname, they may be incorrect.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.i586",
          "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.x86_64",
          "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.i586",
          "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.x86_64",
          "openSUSE Leap 15.0:nodejs8-docs-8.15.0-lp150.2.9.1.noarch",
          "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.i586",
          "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-12123",
          "url": "https://www.suse.com/security/cve/CVE-2018-12123"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117629 for CVE-2018-12123",
          "url": "https://bugzilla.suse.com/1117629"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-docs-8.15.0-lp150.2.9.1.noarch",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:nodejs8-devel-8.15.0-lp150.2.9.1.x86_64",
            "openSUSE Leap 15.0:nodejs8-docs-8.15.0-lp150.2.9.1.noarch",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.i586",
            "openSUSE Leap 15.0:npm8-8.15.0-lp150.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-23T10:49:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-12123"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for rh-nodejs8-nodejs is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: rh-nodejs8-nodejs (8.16.0). (BZ#1665986, BZ#1710734)\n\nSecurity Fix(es):\n\n* nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link (CVE-2018-20834)\n\n* nodejs: HTTP request splitting (CVE-2018-12116)\n\n* nodejs: Denial of Service with large HTTP headers (CVE-2018-12121)\n\n* nodejs: Slowloris HTTP Denial of Service (CVE-2018-12122)\n\n* nodejs: Hostname spoofing in URL parser for javascript protocol (CVE-2018-12123)\n\n* nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass (CVE-2019-5737)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:1821",
        "url": "https://access.redhat.com/errata/RHSA-2019:1821"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1660998",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660998"
      },
      {
        "category": "external",
        "summary": "1661002",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661002"
      },
      {
        "category": "external",
        "summary": "1661005",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661005"
      },
      {
        "category": "external",
        "summary": "1661010",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661010"
      },
      {
        "category": "external",
        "summary": "1690808",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1690808"
      },
      {
        "category": "external",
        "summary": "1702338",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702338"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1821.json"
      }
    ],
    "title": "Red Hat Security Advisory: rh-nodejs8-nodejs security update",
    "tracking": {
      "current_release_date": "2026-02-04T19:03:24+00:00",
      "generator": {
        "date": "2026-02-04T19:03:24+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.1"
        }
      },
      "id": "RHSA-2019:1821",
      "initial_release_date": "2019-07-22T13:39:40+00:00",
      "revision_history": [
        {
          "date": "2019-07-22T13:39:40+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-07-22T13:39:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-02-04T19:03:24+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-Alt-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
                  "product_id": "7Server-RHSCL-3.3-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                  "product_id": "7Server-RHSCL-3.3-7.5.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                  "product_id": "7Server-RHSCL-3.3-7.6.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
                  "product_id": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.0-1.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
                  "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.0.1.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
                  "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.0-1.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
                  "product_id": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.0-1.el7?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
                  "product_id": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.0-1.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
                  "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.0.1.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
                  "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.0-1.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
                  "product_id": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.0-1.el7?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
                  "product_id": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.0-1.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
                  "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.0.1.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
                  "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.0-1.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
                  "product_id": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.0-1.el7?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
                "product": {
                  "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
                  "product_id": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.0-1.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
                "product": {
                  "name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
                  "product_id": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-docs@8.16.0-1.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
                  "product_id": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.0-1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
                  "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.0.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
                  "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.0-1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
                  "product_id": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.0-1.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-12116",
      "cwe": {
        "id": "CWE-113",
        "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
      },
      "discovery_date": "2018-11-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1660998"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs: HTTP request splitting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12116"
        },
        {
          "category": "external",
          "summary": "RHBZ#1660998",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660998"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12116",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12116"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12116",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12116"
        }
      ],
      "release_date": "2018-11-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-07-22T13:39:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1821"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "nodejs: HTTP request splitting"
    },
    {
      "cve": "CVE-2018-12121",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2018-11-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1661002"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs: Denial of Service with large HTTP headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12121"
        },
        {
          "category": "external",
          "summary": "RHBZ#1661002",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661002"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12121",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12121"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12121",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12121"
        }
      ],
      "release_date": "2018-11-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-07-22T13:39:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1821"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "nodejs: Denial of Service with large HTTP headers"
    },
    {
      "cve": "CVE-2018-12122",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2018-11-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1661005"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that Node.js HTTP server was vulnerable to a Slowloris type attack. An attacker could make long lived connections by sending bytes very slowly to the server, saturating its resource and possibly resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs: Slowloris HTTP Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12122"
        },
        {
          "category": "external",
          "summary": "RHBZ#1661005",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661005"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12122",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12122"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12122",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12122"
        }
      ],
      "release_date": "2018-11-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-07-22T13:39:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1821"
        },
        {
          "category": "workaround",
          "details": "The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "nodejs: Slowloris HTTP Denial of Service"
    },
    {
      "cve": "CVE-2018-12123",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2018-11-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1661010"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascript protocol: If a Node.js application is using url.parse() to determine the URL hostname, that hostname can be spoofed by using a mixed case \"javascript:\" (e.g. \"javAscript:\") protocol (other protocols are not affected). If security decisions are made about the URL based on the hostname, they may be incorrect.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs: Hostname spoofing in URL parser for javascript protocol",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12123"
        },
        {
          "category": "external",
          "summary": "RHBZ#1661010",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661010"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12123",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12123"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12123",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12123"
        }
      ],
      "release_date": "2018-11-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-07-22T13:39:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1821"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "nodejs: Hostname spoofing in URL parser for javascript protocol"
    },
    {
      "cve": "CVE-2018-20834",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2019-04-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702338"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in nodejs-tar in versions prior to 4.4.2. An arbitrary file overwrite can occur when extracting tarballs containing a hard-link to a file that already exists in the system. Further, a file that matches the hard-link may overwrite the system\u0027s files with the contents of the extracted file. The highest threat from the vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In Red Hat OpenShift Logging the openshift-logging/kibana6-rhel8 container bundles many nodejs packages as a build time dependencies, including the tar package. \nThe vulnerable nodejs tar package is not used in a way that makes this vulnerability exploitable, hence the impact to OpenShift Logging by this vulnerability is Low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-20834"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702338",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702338"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-20834",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-20834"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20834",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20834"
        },
        {
          "category": "external",
          "summary": "https://hackerone.com/reports/344595",
          "url": "https://hackerone.com/reports/344595"
        }
      ],
      "release_date": "2018-04-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-07-22T13:39:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1821"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link"
    },
    {
      "cve": "CVE-2019-5737",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-03-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1690808"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that the original fix for Slowloris, CVE-2018-12122, was insufficient. It is possible to bypass the server\u0027s headersTimeout by sending two specially crafted HTTP requests in the same connection. An attacker could use this flaw to bypass Slowloris protection, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "RHBZ#1690808",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1690808"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5737",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/",
          "url": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/"
        }
      ],
      "release_date": "2019-02-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-07-22T13:39:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1821"
        },
        {
          "category": "workaround",
          "details": "The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass"
    }
  ]
}