What is GHSA-8gpg-466c-5cpj?

GHSA-8gpg-466c-5cpj is a security advisory published by GitHub Security Advisories with High severity. Apache SkyWalking NodeJS Agent can lose availability if header includes illegal SkyWalking header

Which CVE IDs does GHSA-8gpg-466c-5cpj cover?

GHSA-8gpg-466c-5cpj covers the following CVE IDs: CVE-2022-36127. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8gpg-466c-5cpj?

GHSA-8gpg-466c-5cpj has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-8gpg-466c-5cpj?

GHSA-8gpg-466c-5cpj affects 1 product, including: npm/skywalking-backend-js:\u003c 0.5.1.

GHSA-8gpg-466c-5cpjHighCVSS 7.5

Apache SkyWalking NodeJS Agent can lose availability if header includes illegal SkyWalking header

Vendor

GitHub Security Advisories

Published

July 19, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-36127 →

📋 Description

A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has this agent installed to be unavailable if the OAP is unhealthy and NodeJS agent can't establish the connection.

🎯 Affected products1

npm/skywalking-backend-js:< 0.5.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-36127
https://lists.apache.org/thread/x238wo4r5goy39dxdjcmlofp6gcdnqr3
http://www.openwall.com/lists/oss-security/2022/07/18/1
https://skywalking.apache.org/events/release-apache-skywalking-nodejs-0-5-1/
https://github.com/advisories/GHSA-8gpg-466c-5cpj