PT-2022-23214 · Apache · Apache Skywalking Nodejs Agent

Zhenxu Ke · Published 2022-07-18 · Updated 2025-12-10 · CVE-2022-36127

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apache SkyWalking NodeJS Agent versions prior to 0.5.1

Description The issue causes NodeJS services with the Apache SkyWalking NodeJS Agent installed to become unavailable when the OAP is unhealthy and the NodeJS agent cannot establish a connection.

Recommendations For versions prior to 0.5.1, update to version 0.5.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2022-36127

GHSA-8GPG-466C-5CPJ

Affected Products

Apache Skywalking Nodejs Agent

References · 10

• https://osv.dev/vulnerability/CVE-2022-36127 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36127 · Security Note
• https://lists.apache.org/thread/x238wo4r5goy39dxdjcmlofp6gcdnqr3 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8gpg-466c-5cpj · Vendor Advisory
• https://github.com/apache/skywalking-nodejs · Note
• https://t.me/cveNotify/145311 · Telegram Post
• http://openwall.com/lists/oss-security/2022/07/18/1 · Note
• https://skywalking.apache.org/events/release-apache-skywalking-nodejs-0-5-1 · Note
• https://t.me/cibsecurity/46447 · Telegram Post
• https://t.me/cvenotify/33304 · Telegram Post