GCVE - cpe:2.3:a:netapp:nextgen_api:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:netapp:nextgen_api:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Netapp (`f19678f6-cb27-5a55-8852-34b249f80ef9`)
Product	Nextgen Api (`7a79a2f7-8d3a-58c7-9359-0a0932d017e3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-22940`	vulnerable	2026-06-08 05:30:01.976441	Details available Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior. Published: 2021-08-16T00:00:00.000Z Updated: 2025-04-30T22:24:35.552Z Open on db.gcve.eu Reference links https://hackerone.com/reports/1238162 https://nodejs.org/en/blog/vulnerability/aug-2021-security-releases/ https://www.oracle.com/security-alerts/cpuoct2021.html https://security.netapp.com/advisory/ntap-20210923-0001/ https://www.oracle.com/security-alerts/cpujan2022.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-22939`	vulnerable	2026-06-08 05:30:01.975738	Details available If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted. Published: 2021-08-16T00:00:00.000Z Updated: 2025-04-30T22:24:36.404Z Open on db.gcve.eu Reference links https://nodejs.org/en/blog/vulnerability/aug-2021-security-releases/ https://hackerone.com/reports/1278254 https://www.oracle.com/security-alerts/cpuoct2021.html https://security.netapp.com/advisory/ntap-20210917-0003/ https://www.oracle.com/security-alerts/cpujan2022.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-22931`	vulnerable	2026-06-08 05:30:01.960447	Details available Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library. Published: 2021-08-16T00:00:00.000Z Updated: 2025-04-30T22:24:34.672Z Open on db.gcve.eu Reference links https://nodejs.org/en/blog/vulnerability/aug-2021-security-releases/ https://hackerone.com/reports/1178337 https://www.oracle.com/security-alerts/cpuoct2021.html https://security.netapp.com/advisory/ntap-20210923-0001/ https://www.oracle.com/security-alerts/cpujan2022.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-22930`	vulnerable	2026-06-08 05:30:01.959465	Details available Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior. Published: 2021-10-07T00:00:00.000Z Updated: 2025-04-30T22:24:32.104Z Open on db.gcve.eu Reference links https://hackerone.com/reports/1238162 https://nodejs.org/en/blog/vulnerability/july-2021-security-releases-2/ https://security.netapp.com/advisory/ntap-20211112-0002/ https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf https://lists.debian.org/debian-lts-announce/2022/10/msg00006.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.