GitHub Advisoryadvisory · npm
GHSA-8gpg-466c-5cpj Apache SkyWalking NodeJS Agent can lose availability if header includes illegal SkyWalking header
HIGH
Official page ↗
- Aliases
- CVE-2022-36127
- Ecosystem
- npm
- Packages
- skywalking-backend-js
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Reviewed
- 2022-08-06
Affected packages
• npm skywalking-backend-js: < 0.5.1 → fixed in 0.5.1
Description
A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has this agent installed to be unavailable if the OAP is unhealthy and NodeJS agent can't establish the connection.
Related
Alias · CVE (1)
- CVE-2022-36127 A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2022-36127 advisory
- https://github.com/apache/skywalking-nodejs package
- https://lists.apache.org/thread/x238wo4r5goy39dxdjcmlofp6gcdnqr3 web
- https://skywalking.apache.org/events/release-apache-skywalking-nodejs-0-5-1 web
- http://www.openwall.com/lists/oss-security/2022/07/18/1 web