{"schema":"vulnpedia.research/1","cve":"CVE-2022-4904","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168631","tags":["x_transferred","Issue Tracking","Third Party Advisory","vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2024-01-05T10:06:27.302Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2024-01-05T10:06:27.302Z","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168631"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-03T01:55:45.918Z","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168631"},{"source":"nvd","sourceId":"CVE-2022-4904","modified":"2026-06-17T05:22:15.580","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168631"},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168631"}]},{"url":"https://github.com/c-ares/c-ares/issues/496","tags":["x_transferred","Exploit","Issue Tracking","vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2024-01-05T10:06:27.302Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2024-01-05T10:06:27.302Z","url":"https://github.com/c-ares/c-ares/issues/496"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-03T01:55:45.918Z","url":"https://github.com/c-ares/c-ares/issues/496"},{"source":"nvd","sourceId":"CVE-2022-4904","modified":"2026-06-17T05:22:15.580","url":"https://github.com/c-ares/c-ares/issues/496"},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://github.com/c-ares/c-ares/issues/496"}]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2/","tags":["vendor-advisory","x_transferred"],"source":"mitre","sourceId":"redhat","modified":"2024-01-05T10:06:27.302Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2024-01-05T10:06:27.302Z","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2/"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-03T01:55:45.918Z","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2/"},{"source":"nvd","sourceId":"CVE-2022-4904","modified":"2026-06-17T05:22:15.580","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2/"}]},{"url":"https://security.gentoo.org/glsa/202401-02","tags":["vendor-advisory","x_transferred"],"source":"mitre","sourceId":"redhat","modified":"2024-01-05T10:06:27.302Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2024-01-05T10:06:27.302Z","url":"https://security.gentoo.org/glsa/202401-02"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-03T01:55:45.918Z","url":"https://security.gentoo.org/glsa/202401-02"},{"source":"nvd","sourceId":"CVE-2022-4904","modified":"2026-06-17T05:22:15.580","url":"https://security.gentoo.org/glsa/202401-02"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4904","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://access.redhat.com/security/cve/CVE-2022-4904"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4904","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2022-4904"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4904","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4904"}]},{"url":"https://access.redhat.com/errata/RHSA-2023:1744","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://access.redhat.com/errata/RHSA-2023:1744"}]},{"url":"https://access.redhat.com/errata/RHSA-2023:1533","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://access.redhat.com/errata/RHSA-2023:1533"}]},{"url":"https://access.redhat.com/errata/RHSA-2023:1742","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://access.redhat.com/errata/RHSA-2023:1742"}]},{"url":"https://access.redhat.com/errata/RHSA-2023:1582","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://access.redhat.com/errata/RHSA-2023:1582"}]},{"url":"https://access.redhat.com/errata/RHSA-2023:4035","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://access.redhat.com/errata/RHSA-2023:4035"}]},{"url":"https://access.redhat.com/errata/RHSA-2023:6291","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://access.redhat.com/errata/RHSA-2023:6291"}]},{"url":"https://access.redhat.com/errata/RHSA-2023:5533","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://access.redhat.com/errata/RHSA-2023:5533"}]},{"url":"https://access.redhat.com/errata/RHSA-2023:7368","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://access.redhat.com/errata/RHSA-2023:7368"}]},{"url":"https://access.redhat.com/errata/RHSA-2023:2655","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://access.redhat.com/errata/RHSA-2023:2655"}]},{"url":"https://access.redhat.com/errata/RHSA-2023:2654","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://access.redhat.com/errata/RHSA-2023:2654"}]},{"url":"https://access.redhat.com/errata/RHSA-2023:7543","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://access.redhat.com/errata/RHSA-2023:7543"}]},{"url":"https://access.redhat.com/errata/RHSA-2023:7116","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://access.redhat.com/errata/RHSA-2023:7116"}]},{"url":"https://access.redhat.com/errata/RHSA-2023:6635","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://access.redhat.com/errata/RHSA-2023:6635"}]},{"url":"https://access.redhat.com/errata/RHSA-2023:1743","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://access.redhat.com/errata/RHSA-2023:1743"}]},{"source":"euvd","sourceId":"EUVD-2022-52159","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-52159","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2022-52159","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-52159"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"7Server-RHSCL-3.8:rh-nodejs14-0:3.6-2.el7.ppc64le","product":"rh-nodejs14-0:3.6-2.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:1744"}],"purl":"pkg:rpm/redhat/rh-nodejs14@3.6-2.el7?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"7Server-RHSCL-3.8:rh-nodejs14-npm-0:6.14.18-14.21.3.2.el7.ppc64le","product":"rh-nodejs14-npm-0:6.14.18-14.21.3.2.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:1744"}],"purl":"pkg:rpm/redhat/rh-nodejs14-npm@6.14.18-14.21.3.2.el7?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"7Workstation-RHSCL-3.8:rh-nodejs14-npm-0:6.14.18-14.21.3.2.el7.x86_64","product":"rh-nodejs14-npm-0:6.14.18-14.21.3.2.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:1744"}],"purl":"pkg:rpm/redhat/rh-nodejs14-npm@6.14.18-14.21.3.2.el7?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-8.4.0.Z.EUS:nodejs-devel-1:14.21.3-1.module+el8.4.0+18317+43f5ac16.s390x::nodejs:14","product":"nodejs-devel-1:14.21.3-1.module+el8.4.0+18317+43f5ac16.s390x (nodejs:14) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:1533"}],"purl":"pkg:rpm/redhat/nodejs-devel@14.21.3-1.module%2Bel8.4.0%2B18317%2B43f5ac16?arch=s390x&epoch=1&rpmmod=nodejs:14:8040020230306170312:522a0ee4","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-8.6.0.Z.EUS:nodejs-1:14.21.3-1.module+el8.6.0+18532+cbe6f646.s390x::nodejs:14","product":"nodejs-1:14.21.3-1.module+el8.6.0+18532+cbe6f646.s390x (nodejs:14) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:1742"}],"purl":"pkg:rpm/redhat/nodejs@14.21.3-1.module%2Bel8.6.0%2B18532%2Bcbe6f646?arch=s390x&epoch=1&rpmmod=nodejs:14:8060020230306170237:ad008a3a","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-8.6.0.Z.EUS:nodejs-full-i18n-1:14.21.3-1.module+el8.6.0+18532+cbe6f646.s390x::nodejs:14","product":"nodejs-full-i18n-1:14.21.3-1.module+el8.6.0+18532+cbe6f646.s390x (nodejs:14) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:1742"}],"purl":"pkg:rpm/redhat/nodejs-full-i18n@14.21.3-1.module%2Bel8.6.0%2B18532%2Bcbe6f646?arch=s390x&epoch=1&rpmmod=nodejs:14:8060020230306170237:ad008a3a","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-8.7.0.Z.MAIN:nodejs-1:16.19.1-1.module+el8.7.0+18373+704f5cef.src::nodejs:16","product":"nodejs-1:16.19.1-1.module+el8.7.0+18373+704f5cef.src (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:1582"}],"purl":"pkg:rpm/redhat/nodejs@16.19.1-1.module%2Bel8.7.0%2B18373%2B704f5cef?arch=src&epoch=1&rpmmod=nodejs:16:8070020230314140722:bd1311ed","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-8.7.0.Z.MAIN:nodejs-debugsource-1:16.19.1-1.module+el8.7.0+18373+704f5cef.x86_64::nodejs:16","product":"nodejs-debugsource-1:16.19.1-1.module+el8.7.0+18373+704f5cef.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:1582"}],"purl":"pkg:rpm/redhat/nodejs-debugsource@16.19.1-1.module%2Bel8.7.0%2B18373%2B704f5cef?arch=x86_64&epoch=1&rpmmod=nodejs:16:8070020230314140722:bd1311ed","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-8.7.0.Z.MAIN:nodejs-full-i18n-1:16.19.1-1.module+el8.7.0+18373+704f5cef.x86_64::nodejs:16","product":"nodejs-full-i18n-1:16.19.1-1.module+el8.7.0+18373+704f5cef.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:1582"}],"purl":"pkg:rpm/redhat/nodejs-full-i18n@16.19.1-1.module%2Bel8.7.0%2B18373%2B704f5cef?arch=x86_64&epoch=1&rpmmod=nodejs:16:8070020230314140722:bd1311ed","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-8.8.0.Z.MAIN.EUS:nodejs-1:18.14.2-3.module+el8.8.0+19021+4b8b11cc.aarch64::nodejs:18","product":"nodejs-1:18.14.2-3.module+el8.8.0+19021+4b8b11cc.aarch64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:4035"}],"purl":"pkg:rpm/redhat/nodejs@18.14.2-3.module%2Bel8.8.0%2B19021%2B4b8b11cc?arch=aarch64&epoch=1&rpmmod=nodejs:18:8080020230607122508:63b34585","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-8.8.0.Z.MAIN.EUS:nodejs-full-i18n-1:18.14.2-3.module+el8.8.0+19021+4b8b11cc.aarch64::nodejs:18","product":"nodejs-full-i18n-1:18.14.2-3.module+el8.8.0+19021+4b8b11cc.aarch64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:4035"}],"purl":"pkg:rpm/redhat/nodejs-full-i18n@18.14.2-3.module%2Bel8.8.0%2B19021%2B4b8b11cc?arch=aarch64&epoch=1&rpmmod=nodejs:18:8080020230607122508:63b34585","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-9.0.0.Z.EUS:c-ares-debuginfo-0:1.17.1-5.el9_0.2.x86_64","product":"c-ares-debuginfo-0:1.17.1-5.el9_0.2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:6291"}],"purl":"pkg:rpm/redhat/c-ares-debuginfo@1.17.1-5.el9_0.2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-9.0.0.Z.EUS:nodejs-debuginfo-1:16.20.2-1.el9_0.ppc64le","product":"nodejs-debuginfo-1:16.20.2-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:5533"}],"purl":"pkg:rpm/redhat/nodejs-debuginfo@16.20.2-1.el9_0?arch=ppc64le&epoch=1","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-9.0.0.Z.EUS:nodejs-libs-debuginfo-1:16.20.2-1.el9_0.aarch64","product":"nodejs-libs-debuginfo-1:16.20.2-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:5533"}],"purl":"pkg:rpm/redhat/nodejs-libs-debuginfo@16.20.2-1.el9_0?arch=aarch64&epoch=1","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-9.2.0.Z.EUS:c-ares-debugsource-0:1.17.1-5.el9_2.2.s390x","product":"c-ares-debugsource-0:1.17.1-5.el9_2.2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:7368"}],"purl":"pkg:rpm/redhat/c-ares-debugsource@1.17.1-5.el9_2.2?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-9.2.0.Z.MAIN.EUS:nodejs-debuginfo-1:16.19.1-1.el9_2.i686","product":"nodejs-debuginfo-1:16.19.1-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:2655"}],"purl":"pkg:rpm/redhat/nodejs-debuginfo@16.19.1-1.el9_2?arch=i686&epoch=1","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-9.2.0.Z.MAIN.EUS:nodejs-devel-1:18.14.2-2.module+el9.2.0.z+18497+a402347c.aarch64::nodejs:18","product":"nodejs-devel-1:18.14.2-2.module+el9.2.0.z+18497+a402347c.aarch64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:2654"}],"purl":"pkg:rpm/redhat/nodejs-devel@18.14.2-2.module%2Bel9.2.0.z%2B18497%2Ba402347c?arch=aarch64&epoch=1&rpmmod=nodejs:18:9020020230327152102:rhel9","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-9.2.0.Z.MAIN.EUS:nodejs-libs-1:16.19.1-1.el9_2.x86_64","product":"nodejs-libs-1:16.19.1-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:2655"}],"purl":"pkg:rpm/redhat/nodejs-libs@16.19.1-1.el9_2?arch=x86_64&epoch=1","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-9.2.0.Z.MAIN.EUS:npm-1:9.5.0-1.18.14.2.2.module+el9.2.0.z+18497+a402347c.s390x::nodejs:18","product":"npm-1:9.5.0-1.18.14.2.2.module+el9.2.0.z+18497+a402347c.s390x (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:2654"}],"purl":"pkg:rpm/redhat/npm@9.5.0-1.18.14.2.2.module%2Bel9.2.0.z%2B18497%2Ba402347c?arch=s390x&epoch=1&rpmmod=nodejs:18:9020020230327152102:rhel9","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"BaseOS-8.8.0.Z.EUS:c-ares-0:1.13.0-6.el8_8.3.i686","product":"c-ares-0:1.13.0-6.el8_8.3.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:7543"}],"purl":"pkg:rpm/redhat/c-ares@1.13.0-6.el8_8.3?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"BaseOS-8.8.0.Z.EUS:c-ares-devel-0:1.13.0-6.el8_8.3.s390x","product":"c-ares-devel-0:1.13.0-6.el8_8.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:7543"}],"purl":"pkg:rpm/redhat/c-ares-devel@1.13.0-6.el8_8.3?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"BaseOS-8.9.0.GA:c-ares-debugsource-0:1.13.0-8.el8.x86_64","product":"c-ares-debugsource-0:1.13.0-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:7116"}],"purl":"pkg:rpm/redhat/c-ares-debugsource@1.13.0-8.el8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"BaseOS-9.0.0.Z.EUS:c-ares-debugsource-0:1.17.1-5.el9_0.2.i686","product":"c-ares-debugsource-0:1.17.1-5.el9_0.2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:6291"}],"purl":"pkg:rpm/redhat/c-ares-debugsource@1.17.1-5.el9_0.2?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"BaseOS-9.2.0.Z.EUS:c-ares-debugsource-0:1.17.1-5.el9_2.2.ppc64le","product":"c-ares-debugsource-0:1.17.1-5.el9_2.2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:7368"}],"purl":"pkg:rpm/redhat/c-ares-debugsource@1.17.1-5.el9_2.2?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"BaseOS-9.3.0.GA:c-ares-debugsource-0:1.19.1-1.el9.x86_64","product":"c-ares-debugsource-0:1.19.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2023:6635"}],"purl":"pkg:rpm/redhat/c-ares-debugsource@1.19.1-1.el9?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"red_hat_enterprise_linux_6:c-ares-devel","product":"c-ares-devel as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/c-ares-devel","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"red_hat_enterprise_linux_6:c-ares.src","product":"c-ares.src as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/c-ares?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"red_hat_enterprise_linux_7:c-ares","product":"c-ares as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/c-ares","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"red_hat_enterprise_linux_7:c-ares-devel","product":"c-ares-devel as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/c-ares-devel","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"red_hat_enterprise_linux_7:c-ares.src","product":"c-ares.src as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/c-ares?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-9.2.0.Z.MAIN.EUS:nodejs-nodemon-0:2.0.20-3.el9_2.noarch","product":"nodejs-nodemon-0:2.0.20-3.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-nodemon@2.0.20-3.el9_2?arch=noarch","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]},{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json","productId":"AppStream-9.2.0.Z.MAIN.EUS:nodejs-nodemon-0:2.0.20-3.el9_2.src","product":"nodejs-nodemon-0:2.0.20-3.el9_2.src as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-nodemon@2.0.20-3.el9_2?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2022-4904","modified":"2026-06-28T06:28:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4904.json"}]}],"vendorCoverage":{"total":430,"shown":32,"omitted":398,"source":"redhat"}}