CVE-2021-22930: Debian Linux

Critical severity, CVSS 9.8. EPSS: 36.5% chance of exploitation in the next 30 days.

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

Affected products

• Debian Debian Linux: version 10.0 only
• Netapp NextGen API: affected versions not specified
• Node.js Node.js: from 12.0.0, before 12.22.4 (fixed in 12.22.4); from 14.0.0, before 14.17.4 (fixed in 14.17.4); from 16.0.0, before 16.6.0 (fixed in 16.6.0)
• Siemens Sinec Infrastructure Network Services: before 1.0.1.1 (fixed in 1.0.1.1)

Published 2021-10-07. Last modified 2026-06-17.