CVE-2024-22020 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-22020 Interim 1 27 2026-03-05T02:51:32Z current 2024-07-09T23:17:33Z 2026-03-05T02:51:32Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-22020 A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2024-July/018981.html E-Mail link for SUSE-SU-2024:2496-1 https://lists.suse.com/pipermail/sle-security-updates/2024-July/018991.html E-Mail link for SUSE-SU-2024:2542-1 https://lists.suse.com/pipermail/sle-security-updates/2024-July/018990.html E-Mail link for SUSE-SU-2024:2543-1 https://lists.suse.com/pipermail/sle-updates/2024-July/036101.html E-Mail link for SUSE-SU-2024:2574-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OWCPL7VTEVIGUDVKLEV2D2ITNTWKC4AZ/ E-Mail link for openSUSE-SU-2024:14435-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container bci/nodejs:18-26.9 Container containers/open-webui:0.6.9-10.1 SUSE Enterprise Storage 7.1 SUSE Liberty Linux 8 SUSE Liberty Linux 9 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP6 SUSE Linux Enterprise Module for Web and Scripting 15 SP7 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP6 SUSE Linux Enterprise Module for Web and Scripting 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP6 SUSE Linux Enterprise Module for Web and Scripting 15 SP7 SUSE Manager Server 4.3 SUSE Manager Server LTS 4.3 openSUSE Leap 15.5 openSUSE Leap 15.6 openSUSE Tumbleweed corepack18 corepack18-18.20.4-150400.9.24.2 corepack20-20.15.1-1.1 corepack20-20.15.1-150500.11.12.2 corepack20-20.15.1-150600.3.3.2 corepack22-22.10.0-1.1 corepack22-22.15.1-160000.2.2 corepack24-24.11.1-2.1 nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310 nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127 nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310 nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127 nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310 nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127 nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310 nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127 nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781 nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d nodejs10 nodejs10-devel nodejs10-docs nodejs12 nodejs12-devel nodejs12-docs nodejs14 nodejs14-devel nodejs14-docs nodejs16 nodejs16-devel nodejs16-docs nodejs18 nodejs18-18.20.4-150400.9.24.2 nodejs18-18.20.4-8.24.1 nodejs18-devel nodejs18-devel-18.20.4-150400.9.24.2 nodejs18-devel-18.20.4-8.24.1 nodejs18-docs nodejs18-docs-18.20.4-150400.9.24.2 nodejs18-docs-18.20.4-8.24.1 nodejs20 nodejs20-20.15.1-1.1 nodejs20-20.15.1-150500.11.12.2 nodejs20-20.15.1-150600.3.3.2 nodejs20-devel nodejs20-devel-20.15.1-1.1 nodejs20-devel-20.15.1-150500.11.12.2 nodejs20-devel-20.15.1-150600.3.3.2 nodejs20-docs nodejs20-docs-20.15.1-1.1 nodejs20-docs-20.15.1-150500.11.12.2 nodejs20-docs-20.15.1-150600.3.3.2 nodejs22 nodejs22-22.10.0-1.1 nodejs22-22.15.1-160000.2.2 nodejs22-devel nodejs22-devel-22.10.0-1.1 nodejs22-devel-22.15.1-160000.2.2 nodejs22-docs nodejs22-docs-22.10.0-1.1 nodejs22-docs-22.15.1-160000.2.2 nodejs24-24.11.1-2.1 nodejs24-devel-24.11.1-2.1 nodejs24-docs-24.11.1-2.1 nodejs8 nodejs8-devel nodejs8-docs npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310 npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127 npm10 npm12 npm14 npm16 npm18 npm18-18.20.4-150400.9.24.2 npm18-18.20.4-8.24.1 npm20 npm20-20.15.1-1.1 npm20-20.15.1-150500.11.12.2 npm20-20.15.1-150600.3.3.2 npm22 npm22-22.10.0-1.1 npm22-22.15.1-160000.2.2 npm24-24.11.1-2.1 npm8 nodejs18-18.20.4-150400.9.24.2 as a component of Container bci/nodejs:18-26.9 npm18-18.20.4-150400.9.24.2 as a component of Container bci/nodejs:18-26.9 nodejs20-20.15.1-150600.3.3.2 as a component of Container containers/open-webui:0.6.9-10.1 nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310 as a component of SUSE Liberty Linux 8 nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310 as a component of SUSE Liberty Linux 8 nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310 as a component of SUSE Liberty Linux 8 nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310 as a component of SUSE Liberty Linux 8 nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d as a component of SUSE Liberty Linux 8 nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a as a component of SUSE Liberty Linux 8 nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a as a component of SUSE Liberty Linux 8 npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310 as a component of SUSE Liberty Linux 8 nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127 as a component of SUSE Liberty Linux 9 nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127 as a component of SUSE Liberty Linux 9 nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127 as a component of SUSE Liberty Linux 9 nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127 as a component of SUSE Liberty Linux 9 nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781 as a component of SUSE Liberty Linux 9 nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d as a component of SUSE Liberty Linux 9 nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d as a component of SUSE Liberty Linux 9 npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127 as a component of SUSE Liberty Linux 9 nodejs18-18.20.4-8.24.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs18-devel-18.20.4-8.24.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs18-docs-18.20.4-8.24.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm18-18.20.4-8.24.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs18-18.20.4-150400.9.24.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs18-devel-18.20.4-150400.9.24.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs18-docs-18.20.4-150400.9.24.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs20-20.15.1-150500.11.12.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs20-devel-20.15.1-150500.11.12.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs20-docs-20.15.1-150500.11.12.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 npm18-18.20.4-150400.9.24.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 npm20-20.15.1-150500.11.12.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs20-20.15.1-150600.3.3.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6 nodejs20-devel-20.15.1-150600.3.3.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6 nodejs20-docs-20.15.1-150600.3.3.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6 npm20-20.15.1-150600.3.3.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6 nodejs18-18.20.4-150400.9.24.2 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA nodejs18-devel-18.20.4-150400.9.24.2 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA nodejs18-docs-18.20.4-150400.9.24.2 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA npm18-18.20.4-150400.9.24.2 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA corepack22-22.15.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 nodejs22-22.15.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 nodejs22-devel-22.15.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 nodejs22-docs-22.15.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 npm22-22.15.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 corepack18-18.20.4-150400.9.24.2 as a component of openSUSE Leap 15.5 corepack20-20.15.1-150500.11.12.2 as a component of openSUSE Leap 15.5 nodejs18-18.20.4-150400.9.24.2 as a component of openSUSE Leap 15.5 nodejs18-devel-18.20.4-150400.9.24.2 as a component of openSUSE Leap 15.5 nodejs18-docs-18.20.4-150400.9.24.2 as a component of openSUSE Leap 15.5 nodejs20-20.15.1-150500.11.12.2 as a component of openSUSE Leap 15.5 nodejs20-devel-20.15.1-150500.11.12.2 as a component of openSUSE Leap 15.5 nodejs20-docs-20.15.1-150500.11.12.2 as a component of openSUSE Leap 15.5 npm18-18.20.4-150400.9.24.2 as a component of openSUSE Leap 15.5 npm20-20.15.1-150500.11.12.2 as a component of openSUSE Leap 15.5 corepack20-20.15.1-150600.3.3.2 as a component of openSUSE Leap 15.6 nodejs20-20.15.1-150600.3.3.2 as a component of openSUSE Leap 15.6 nodejs20-devel-20.15.1-150600.3.3.2 as a component of openSUSE Leap 15.6 nodejs20-docs-20.15.1-150600.3.3.2 as a component of openSUSE Leap 15.6 npm20-20.15.1-150600.3.3.2 as a component of openSUSE Leap 15.6 corepack20-20.15.1-1.1 as a component of openSUSE Tumbleweed corepack22-22.10.0-1.1 as a component of openSUSE Tumbleweed corepack24-24.11.1-2.1 as a component of openSUSE Tumbleweed nodejs20-20.15.1-1.1 as a component of openSUSE Tumbleweed nodejs20-devel-20.15.1-1.1 as a component of openSUSE Tumbleweed nodejs20-docs-20.15.1-1.1 as a component of openSUSE Tumbleweed nodejs22-22.10.0-1.1 as a component of openSUSE Tumbleweed nodejs22-devel-22.10.0-1.1 as a component of openSUSE Tumbleweed nodejs22-docs-22.10.0-1.1 as a component of openSUSE Tumbleweed nodejs24-24.11.1-2.1 as a component of openSUSE Tumbleweed nodejs24-devel-24.11.1-2.1 as a component of openSUSE Tumbleweed nodejs24-docs-24.11.1-2.1 as a component of openSUSE Tumbleweed npm20-20.15.1-1.1 as a component of openSUSE Tumbleweed npm22-22.10.0-1.1 as a component of openSUSE Tumbleweed npm24-24.11.1-2.1 as a component of openSUSE Tumbleweed nodejs12 as a component of SUSE Enterprise Storage 7.1 nodejs12-devel as a component of SUSE Enterprise Storage 7.1 nodejs12-docs as a component of SUSE Enterprise Storage 7.1 npm12 as a component of SUSE Enterprise Storage 7.1 nodejs14 as a component of SUSE Enterprise Storage 7.1 nodejs14-devel as a component of SUSE Enterprise Storage 7.1 nodejs14-docs as a component of SUSE Enterprise Storage 7.1 npm14 as a component of SUSE Enterprise Storage 7.1 nodejs16 as a component of SUSE Enterprise Storage 7.1 nodejs16-devel as a component of SUSE Enterprise Storage 7.1 nodejs16-docs as a component of SUSE Enterprise Storage 7.1 npm16 as a component of SUSE Enterprise Storage 7.1 nodejs10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs10-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs10-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS npm10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs12-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs12-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS npm12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs14-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs14-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS npm14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs8-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs8-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS npm8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs12-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs12-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS npm12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs14-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs14-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS npm14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs16-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs16-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS npm16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS nodejs16-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS nodejs16-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS npm16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS nodejs18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS nodejs18-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS nodejs18-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS npm18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS nodejs16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs16-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs16-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS npm16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs18-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs18-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS npm18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs16 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs16-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs16-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm16 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs18 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs18-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs18-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 npm18 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs20 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs20-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs20-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 npm20 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs20 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6 nodejs20-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6 nodejs20-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6 npm20 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6 nodejs22 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 nodejs22-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 nodejs22-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 npm22 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 nodejs10 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs10-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs10-docs as a component of SUSE Linux Enterprise Server 15 SP1-LTSS npm10 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8-docs as a component of SUSE Linux Enterprise Server 15 SP1-LTSS npm8 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs10 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs10-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs10-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm10 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm12 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs14 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs14-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs14-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm14 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs8 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs8-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs8-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm8 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs12-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs12-docs as a component of SUSE Linux Enterprise Server 15 SP3-LTSS npm12 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs14 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs14-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs14-docs as a component of SUSE Linux Enterprise Server 15 SP3-LTSS npm14 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs16 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs16-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs16-docs as a component of SUSE Linux Enterprise Server 15 SP3-LTSS npm16 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs16 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs16-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs16-docs as a component of SUSE Linux Enterprise Server 15 SP4-LTSS npm16 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs18 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs18-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs18-docs as a component of SUSE Linux Enterprise Server 15 SP4-LTSS npm18 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs10 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs10-devel as a component of SUSE Linux Enterprise Server 15-LTSS nodejs10-docs as a component of SUSE Linux Enterprise Server 15-LTSS npm10 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs8 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs8-devel as a component of SUSE Linux Enterprise Server 15-LTSS nodejs8-docs as a component of SUSE Linux Enterprise Server 15-LTSS npm8 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs16 as a component of SUSE Linux Enterprise Server Teradata 15 SP4 nodejs10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs10-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs10-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 npm10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs12-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs12-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 npm12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs14-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs14-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 npm14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs8-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs8-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 npm8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs12-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs12-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 npm12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs14-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs14-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 npm14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs16 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs16-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs16-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 npm16 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs16 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs16-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs16-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 npm16 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs18 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs18-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs18-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 npm18 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs16 as a component of SUSE Manager Server 4.3 nodejs16-devel as a component of SUSE Manager Server 4.3 nodejs16-docs as a component of SUSE Manager Server 4.3 npm16 as a component of SUSE Manager Server 4.3 nodejs18 as a component of SUSE Manager Server 4.3 nodejs18-devel as a component of SUSE Manager Server 4.3 nodejs18-docs as a component of SUSE Manager Server 4.3 npm18 as a component of SUSE Manager Server 4.3 nodejs16 as a component of SUSE Manager Server LTS 4.3 nodejs16-devel as a component of SUSE Manager Server LTS 4.3 nodejs16-docs as a component of SUSE Manager Server LTS 4.3 npm16 as a component of SUSE Manager Server LTS 4.3 corepack18 as a component of openSUSE Leap 15.5 nodejs18 as a component of openSUSE Leap 15.5 nodejs18-devel as a component of openSUSE Leap 15.5 nodejs18-docs as a component of openSUSE Leap 15.5 npm18 as a component of openSUSE Leap 15.5 A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers. CVE-2024-22020 Container bci/nodejs:18-26.9:nodejs18-18.20.4-150400.9.24.2 Container bci/nodejs:18-26.9:npm18-18.20.4-150400.9.24.2 Container containers/open-webui:0.6.9-10.1:nodejs20-20.15.1-150600.3.3.2 SUSE Liberty Linux 8:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310 SUSE Liberty Linux 8:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310 SUSE Liberty Linux 8:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310 SUSE Liberty Linux 8:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310 SUSE Liberty Linux 8:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d SUSE Liberty Linux 8:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a SUSE Liberty Linux 8:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a SUSE Liberty Linux 8:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310 SUSE Liberty Linux 9:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127 SUSE Liberty Linux 9:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127 SUSE Liberty Linux 9:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127 SUSE Liberty Linux 9:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127 SUSE Liberty Linux 9:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781 SUSE Liberty Linux 9:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d SUSE Liberty Linux 9:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d SUSE Liberty Linux 9:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:corepack18-18.20.4-150400.9.24.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:corepack20-20.15.1-150600.3.3.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:nodejs18-18.20.4-150400.9.24.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:nodejs18-devel-18.20.4-150400.9.24.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:nodejs18-docs-18.20.4-150400.9.24.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:nodejs20-20.15.1-150600.3.3.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:nodejs20-devel-20.15.1-150600.3.3.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:nodejs20-docs-20.15.1-150600.3.3.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:npm18-18.20.4-150400.9.24.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:npm20-20.15.1-150600.3.3.2 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-docs-18.20.4-8.24.1 SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-docs-18.20.4-150400.9.24.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2 SUSE Linux Enterprise Server 15 SP4-TERADATA:nodejs18-18.20.4-150400.9.24.2 SUSE Linux Enterprise Server 15 SP4-TERADATA:nodejs18-devel-18.20.4-150400.9.24.2 SUSE Linux Enterprise Server 15 SP4-TERADATA:nodejs18-docs-18.20.4-150400.9.24.2 SUSE Linux Enterprise Server 15 SP4-TERADATA:npm18-18.20.4-150400.9.24.2 SUSE Linux Enterprise Server 16.0:corepack22-22.15.1-160000.2.2 SUSE Linux Enterprise Server 16.0:nodejs22-22.15.1-160000.2.2 SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.15.1-160000.2.2 SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.15.1-160000.2.2 SUSE Linux Enterprise Server 16.0:npm22-22.15.1-160000.2.2 openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2 openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2 openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2 openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2 openSUSE Leap 15.5:nodejs18-docs-18.20.4-150400.9.24.2 openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2 openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2 openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2 openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2 openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2 openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2 openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2 openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2 openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2 openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2 openSUSE Tumbleweed:corepack20-20.15.1-1.1 openSUSE Tumbleweed:corepack22-22.10.0-1.1 openSUSE Tumbleweed:corepack24-24.11.1-2.1 openSUSE Tumbleweed:nodejs20-20.15.1-1.1 openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1 openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1 openSUSE Tumbleweed:nodejs22-22.10.0-1.1 openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1 openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1 openSUSE Tumbleweed:nodejs24-24.11.1-2.1 openSUSE Tumbleweed:nodejs24-devel-24.11.1-2.1 openSUSE Tumbleweed:nodejs24-docs-24.11.1-2.1 openSUSE Tumbleweed:npm20-20.15.1-1.1 openSUSE Tumbleweed:npm22-22.10.0-1.1 openSUSE Tumbleweed:npm24-24.11.1-2.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP7:nodejs22 SUSE Linux Enterprise Module for Web and Scripting 15 SP7:nodejs22-devel SUSE Linux Enterprise Module for Web and Scripting 15 SP7:nodejs22-docs SUSE Linux Enterprise Module for Web and Scripting 15 SP7:npm22 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nodejs16 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nodejs16-devel SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nodejs16-docs SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:npm16 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nodejs16 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nodejs16-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nodejs16-docs SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:npm16 SUSE Linux Enterprise Server 15 SP4-LTSS:nodejs16 SUSE Linux Enterprise Server 15 SP4-LTSS:nodejs16-devel SUSE Linux Enterprise Server 15 SP4-LTSS:nodejs16-docs SUSE Linux Enterprise Server 15 SP4-LTSS:npm16 SUSE Linux Enterprise Server Teradata 15 SP4:nodejs16 SUSE Linux Enterprise Server for SAP Applications 15 SP4:nodejs16 SUSE Linux Enterprise Server for SAP Applications 15 SP4:nodejs16-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:nodejs16-docs SUSE Linux Enterprise Server for SAP Applications 15 SP4:npm16 SUSE Manager Server 4.3:nodejs16 SUSE Manager Server 4.3:nodejs16-devel SUSE Manager Server 4.3:nodejs16-docs SUSE Manager Server 4.3:npm16 SUSE Manager Server LTS 4.3:nodejs16 SUSE Manager Server LTS 4.3:nodejs16-devel SUSE Manager Server LTS 4.3:nodejs16-docs SUSE Manager Server LTS 4.3:npm16 moderate 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H