CVE-2021-43616 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2021-43616 Interim 1 12 2025-08-14T00:51:26Z current 2023-01-12T00:53:15Z 2025-08-14T00:51:26Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2021-43616 The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in package-lock.json differs from package.json. This behavior is inconsistent with the documentation, and makes it easier for attackers to install malware that was supposed to have been blocked by an exact version match requirement in package-lock.json. NOTE: The npm team believes this is not a vulnerability. It would require someone to socially engineer package.json which has different dependencies than package-lock.json. That user would have to have file system or write access to change dependencies. The npm team states preventing malicious actors from socially engineering or gaining file system access is outside the scope of the npm CLI. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP3 SUSE Liberty Linux 8 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Web and Scripting 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Web and Scripting 15 SP4 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Web and Scripting 15 SP3 SUSE Linux Enterprise Module for Web and Scripting 15 SP4 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server Business Critical Linux 15 SP3 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Web and Scripting 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Web and Scripting 15 SP4 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP3 SUSE Linux Enterprise Module for Web and Scripting 15 SP4 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP3 SUSE Linux Enterprise Module for Web and Scripting 15 SP4 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP3 SUSE Manager Server 4.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP4 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 nodejs-16.14.0-4.module+el8.6.0+15294+54b291d2 nodejs-devel-16.14.0-4.module+el8.6.0+15294+54b291d2 nodejs-docs-16.14.0-4.module+el8.6.0+15294+54b291d2 nodejs-full-i18n-16.14.0-4.module+el8.6.0+15294+54b291d2 nodejs-nodemon-2.0.15-1.module+el8.6.0+15294+54b291d2 nodejs-packaging-25-1.module+el8.5.0+10992+fac5fe06 nodejs10 nodejs10-devel nodejs10-docs nodejs12 nodejs12-devel nodejs12-docs nodejs14 nodejs14-devel nodejs14-docs nodejs6 nodejs6-devel nodejs6-docs nodejs8 nodejs8-devel nodejs8-docs npm-8.3.1-1.16.14.0.4.module+el8.6.0+15294+54b291d2 npm10 npm12 npm14 npm6 npm8 nodejs-16.14.0-4.module+el8.6.0+15294+54b291d2 as a component of SUSE Liberty Linux 8 nodejs-devel-16.14.0-4.module+el8.6.0+15294+54b291d2 as a component of SUSE Liberty Linux 8 nodejs-docs-16.14.0-4.module+el8.6.0+15294+54b291d2 as a component of SUSE Liberty Linux 8 nodejs-full-i18n-16.14.0-4.module+el8.6.0+15294+54b291d2 as a component of SUSE Liberty Linux 8 nodejs-nodemon-2.0.15-1.module+el8.6.0+15294+54b291d2 as a component of SUSE Liberty Linux 8 nodejs-packaging-25-1.module+el8.5.0+10992+fac5fe06 as a component of SUSE Liberty Linux 8 npm-8.3.1-1.16.14.0.4.module+el8.6.0+15294+54b291d2 as a component of SUSE Liberty Linux 8 nodejs10 as a component of SUSE CaaS Platform 4.0 nodejs10-devel as a component of SUSE CaaS Platform 4.0 nodejs10-docs as a component of SUSE CaaS Platform 4.0 npm10 as a component of SUSE CaaS Platform 4.0 nodejs8 as a component of SUSE CaaS Platform 4.0 nodejs8-devel as a component of SUSE CaaS Platform 4.0 nodejs8-docs as a component of SUSE CaaS Platform 4.0 npm8 as a component of SUSE CaaS Platform 4.0 nodejs10 as a component of SUSE Enterprise Storage 6 nodejs8 as a component of SUSE Enterprise Storage 6 nodejs10 as a component of SUSE Enterprise Storage 7 nodejs12 as a component of SUSE Enterprise Storage 7 nodejs14 as a component of SUSE Enterprise Storage 7 nodejs8 as a component of SUSE Enterprise Storage 7 nodejs12 as a component of SUSE Enterprise Storage 7.1 nodejs12-devel as a component of SUSE Enterprise Storage 7.1 nodejs12-docs as a component of SUSE Enterprise Storage 7.1 npm12 as a component of SUSE Enterprise Storage 7.1 nodejs14 as a component of SUSE Enterprise Storage 7.1 nodejs14-devel as a component of SUSE Enterprise Storage 7.1 nodejs14-docs as a component of SUSE Enterprise Storage 7.1 npm14 as a component of SUSE Enterprise Storage 7.1 nodejs10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS nodejs10-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS nodejs10-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS npm10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS nodejs8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS nodejs8-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS nodejs8-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS npm8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS nodejs10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs10-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs10-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS npm10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs8-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs8-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS npm8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS nodejs10-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS nodejs10-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS npm10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS nodejs12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS nodejs12-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS nodejs12-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS npm12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS nodejs14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS nodejs14-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS nodejs14-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS npm14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS nodejs8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS nodejs8-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS nodejs8-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS npm8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS nodejs10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs10-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs10-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS npm10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs12-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs12-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS npm12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs14-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs14-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS npm14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs8-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs8-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS npm8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS nodejs12-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS nodejs12-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS npm12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS nodejs14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS nodejs14-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS nodejs14-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS npm14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS nodejs12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs12-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs12-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS npm12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs14-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs14-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS npm14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs10 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs10-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs10-docs as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS npm10 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs8 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs8-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs8-docs as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS npm8 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs12 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs12-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs12-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm12 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs14 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs14-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs14-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm14 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs6 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs6-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs6-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm6 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs12 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP3 nodejs12-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP3 nodejs12-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP3 npm12 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP3 nodejs14 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP3 nodejs14-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP3 nodejs14-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP3 npm14 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP3 nodejs14 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 nodejs10 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs10-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs10-docs as a component of SUSE Linux Enterprise Server 15 SP1-LTSS npm10 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8-docs as a component of SUSE Linux Enterprise Server 15 SP1-LTSS npm8 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs10 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs10-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs10-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm10 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm12 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs14 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs14-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs14-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm14 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs8 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs8-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs8-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm8 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs10 as a component of SUSE Linux Enterprise Server 15-ESPOS nodejs8 as a component of SUSE Linux Enterprise Server 15-ESPOS nodejs10 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs10-devel as a component of SUSE Linux Enterprise Server 15-LTSS nodejs10-docs as a component of SUSE Linux Enterprise Server 15-LTSS npm10 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs8 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs8-devel as a component of SUSE Linux Enterprise Server 15-LTSS nodejs8-docs as a component of SUSE Linux Enterprise Server 15-LTSS npm8 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs10 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 nodejs8 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 nodejs10 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 nodejs12 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 nodejs14 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 nodejs8 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 nodejs12 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP3 nodejs14 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP3 nodejs10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs10-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs10-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 npm10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs8-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs8-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 npm8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs10-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs10-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 npm10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs8-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs8-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 npm8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs10-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs10-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 npm10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs12-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs12-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 npm12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs14-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs14-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 npm14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs8-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs8-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 npm8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs12-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs12-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 npm12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs14-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs14-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 npm14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs10 as a component of SUSE Manager Proxy 4.1 nodejs12 as a component of SUSE Manager Proxy 4.1 nodejs14 as a component of SUSE Manager Proxy 4.1 nodejs8 as a component of SUSE Manager Proxy 4.1 nodejs10 as a component of SUSE Manager Retail Branch Server 4.1 nodejs12 as a component of SUSE Manager Retail Branch Server 4.1 nodejs14 as a component of SUSE Manager Retail Branch Server 4.1 nodejs8 as a component of SUSE Manager Retail Branch Server 4.1 nodejs10 as a component of SUSE Manager Server 4.1 nodejs12 as a component of SUSE Manager Server 4.1 nodejs14 as a component of SUSE Manager Server 4.1 nodejs8 as a component of SUSE Manager Server 4.1 nodejs12 as a component of SUSE Manager Server 4.2 nodejs12-devel as a component of SUSE Manager Server 4.2 nodejs12-docs as a component of SUSE Manager Server 4.2 npm12 as a component of SUSE Manager Server 4.2 nodejs14 as a component of SUSE Manager Server 4.2 nodejs14-devel as a component of SUSE Manager Server 4.2 nodejs14-docs as a component of SUSE Manager Server 4.2 npm14 as a component of SUSE Manager Server 4.2 nodejs6 as a component of SUSE OpenStack Cloud Crowbar 8 nodejs6 as a component of SUSE OpenStack Cloud Crowbar 9 The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in package-lock.json differs from package.json. This behavior is inconsistent with the documentation, and makes it easier for attackers to install malware that was supposed to have been blocked by an exact version match requirement in package-lock.json. NOTE: The npm team believes this is not a vulnerability. It would require someone to socially engineer package.json which has different dependencies than package-lock.json. That user would have to have file system or write access to change dependencies. The npm team states preventing malicious actors from socially engineering or gaining file system access is outside the scope of the npm CLI. CVE-2021-43616 SUSE Liberty Linux 8:nodejs-16.14.0-4.module+el8.6.0+15294+54b291d2 SUSE Liberty Linux 8:nodejs-devel-16.14.0-4.module+el8.6.0+15294+54b291d2 SUSE Liberty Linux 8:nodejs-docs-16.14.0-4.module+el8.6.0+15294+54b291d2 SUSE Liberty Linux 8:nodejs-full-i18n-16.14.0-4.module+el8.6.0+15294+54b291d2 SUSE Liberty Linux 8:nodejs-nodemon-2.0.15-1.module+el8.6.0+15294+54b291d2 SUSE Liberty Linux 8:nodejs-packaging-25-1.module+el8.5.0+10992+fac5fe06 SUSE Liberty Linux 8:npm-8.3.1-1.16.14.0.4.module+el8.6.0+15294+54b291d2 SUSE CaaS Platform 4.0:nodejs10 SUSE CaaS Platform 4.0:nodejs10-devel SUSE CaaS Platform 4.0:nodejs10-docs SUSE CaaS Platform 4.0:nodejs8 SUSE CaaS Platform 4.0:nodejs8-devel SUSE CaaS Platform 4.0:nodejs8-docs SUSE CaaS Platform 4.0:npm10 SUSE CaaS Platform 4.0:npm8 SUSE Enterprise Storage 6:nodejs10 SUSE Enterprise Storage 6:nodejs8 SUSE Enterprise Storage 7.1:nodejs12 SUSE Enterprise Storage 7.1:nodejs12-devel SUSE Enterprise Storage 7.1:nodejs12-docs SUSE Enterprise Storage 7.1:nodejs14 SUSE Enterprise Storage 7.1:nodejs14-devel SUSE Enterprise Storage 7.1:nodejs14-docs SUSE Enterprise Storage 7.1:npm12 SUSE Enterprise Storage 7.1:npm14 SUSE Enterprise Storage 7:nodejs10 SUSE Enterprise Storage 7:nodejs12 SUSE Enterprise Storage 7:nodejs14 SUSE Enterprise Storage 7:nodejs8 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs10 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs10-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs10-docs SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm10 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs10 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs10-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs10-docs SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm10 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:nodejs10 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:nodejs10-devel SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:nodejs10-docs SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:nodejs12 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:nodejs12-devel SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:nodejs12-docs SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:nodejs14 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:nodejs14-devel SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:nodejs14-docs SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:nodejs8 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:nodejs8-devel SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:nodejs8-docs SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:npm10 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:npm12 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:npm14 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:npm8 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs10 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs10-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs10-docs SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs12 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs12-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs12-docs SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs14 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs14-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs14-docs SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs8 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs8-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs8-docs SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:npm10 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:npm12 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:npm14 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:npm8 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:nodejs12 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:nodejs12-devel SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:nodejs12-docs SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:nodejs14 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:nodejs14-devel SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:nodejs14-docs SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:npm12 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:npm14 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs12 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs12-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs12-docs SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs14 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs14-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs14-docs SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:npm12 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:npm14 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs10 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs10-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs10-docs SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs SUSE Linux Enterprise High Performance Computing 15-LTSS:npm10 SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-docs SUSE Linux Enterprise Module for Web and Scripting 12:npm12 SUSE Linux Enterprise Module for Web and Scripting 12:npm14 SUSE Linux Enterprise Module for Web and Scripting 12:npm6 SUSE Linux Enterprise Module for Web and Scripting 15 SP3:nodejs12 SUSE Linux Enterprise Module for Web and Scripting 15 SP3:nodejs12-devel SUSE Linux Enterprise Module for Web and Scripting 15 SP3:nodejs12-docs SUSE Linux Enterprise Module for Web and Scripting 15 SP3:nodejs14 SUSE Linux Enterprise Module for Web and Scripting 15 SP3:nodejs14-devel SUSE Linux Enterprise Module for Web and Scripting 15 SP3:nodejs14-docs SUSE Linux Enterprise Module for Web and Scripting 15 SP3:npm12 SUSE Linux Enterprise Module for Web and Scripting 15 SP3:npm14 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:nodejs14 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs10 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs10-devel SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs10-docs SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs SUSE Linux Enterprise Server 15 SP1-LTSS:npm10 SUSE Linux Enterprise Server 15 SP1-LTSS:npm8 SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs10 SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs10-devel SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs10-docs SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs12 SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs12-devel SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs12-docs SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs14 SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs14-devel SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs14-docs SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs8 SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs8-devel SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs8-docs SUSE Linux Enterprise Server 15 SP2-LTSS:npm10 SUSE Linux Enterprise Server 15 SP2-LTSS:npm12 SUSE Linux Enterprise Server 15 SP2-LTSS:npm14 SUSE Linux Enterprise Server 15 SP2-LTSS:npm8 SUSE Linux Enterprise Server 15-ESPOS:nodejs10 SUSE Linux Enterprise Server 15-ESPOS:nodejs8 SUSE Linux Enterprise Server 15-LTSS:nodejs10 SUSE Linux Enterprise Server 15-LTSS:nodejs10-devel SUSE Linux Enterprise Server 15-LTSS:nodejs10-docs SUSE Linux Enterprise Server 15-LTSS:nodejs8 SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs SUSE Linux Enterprise Server 15-LTSS:npm10 SUSE Linux Enterprise Server 15-LTSS:npm8 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:nodejs10 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:nodejs8 SUSE Linux Enterprise Server Business Critical Linux 15 SP2:nodejs10 SUSE Linux Enterprise Server Business Critical Linux 15 SP2:nodejs12 SUSE Linux Enterprise Server Business Critical Linux 15 SP2:nodejs14 SUSE Linux Enterprise Server Business Critical Linux 15 SP2:nodejs8 SUSE Linux Enterprise Server Business Critical Linux 15 SP3:nodejs12 SUSE Linux Enterprise Server Business Critical Linux 15 SP3:nodejs14 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs10 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs10-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs10-docs SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm10 SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8 SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs10 SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs10-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs10-docs SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs12 SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs12-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs12-docs SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs14 SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs14-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs14-docs SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs8 SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs8-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs8-docs SUSE Linux Enterprise Server for SAP Applications 15 SP2:npm10 SUSE Linux Enterprise Server for SAP Applications 15 SP2:npm12 SUSE Linux Enterprise Server for SAP Applications 15 SP2:npm14 SUSE Linux Enterprise Server for SAP Applications 15 SP2:npm8 SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs12 SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs12-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs12-docs SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs14 SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs14-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs14-docs SUSE Linux Enterprise Server for SAP Applications 15 SP3:npm12 SUSE Linux Enterprise Server for SAP Applications 15 SP3:npm14 SUSE Linux Enterprise Server for SAP Applications 15:nodejs10 SUSE Linux Enterprise Server for SAP Applications 15:nodejs10-devel SUSE Linux Enterprise Server for SAP Applications 15:nodejs10-docs SUSE Linux Enterprise Server for SAP Applications 15:nodejs8 SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs SUSE Linux Enterprise Server for SAP Applications 15:npm10 SUSE Linux Enterprise Server for SAP Applications 15:npm8 SUSE Manager Proxy 4.1:nodejs10 SUSE Manager Proxy 4.1:nodejs12 SUSE Manager Proxy 4.1:nodejs14 SUSE Manager Proxy 4.1:nodejs8 SUSE Manager Retail Branch Server 4.1:nodejs10 SUSE Manager Retail Branch Server 4.1:nodejs12 SUSE Manager Retail Branch Server 4.1:nodejs14 SUSE Manager Retail Branch Server 4.1:nodejs8 SUSE Manager Server 4.1:nodejs10 SUSE Manager Server 4.1:nodejs12 SUSE Manager Server 4.1:nodejs14 SUSE Manager Server 4.1:nodejs8 SUSE Manager Server 4.2:nodejs12 SUSE Manager Server 4.2:nodejs12-devel SUSE Manager Server 4.2:nodejs12-docs SUSE Manager Server 4.2:nodejs14 SUSE Manager Server 4.2:nodejs14-devel SUSE Manager Server 4.2:nodejs14-docs SUSE Manager Server 4.2:npm12 SUSE Manager Server 4.2:npm14 SUSE OpenStack Cloud Crowbar 8:nodejs6 SUSE OpenStack Cloud Crowbar 9:nodejs6 moderate 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H