{
    "document": {
        "category": "csaf_base",
        "csaf_version": "2.0",
        "distribution": {
            "tlp": {
                "label": "WHITE"
            }
        },
        "lang": "en",
        "notes": [
            {
                "category": "legal_disclaimer",
                "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
            }
        ],
        "publisher": {
            "category": "coordinator",
            "contact_details": "cert@ncsc.nl",
            "name": "National Cyber Security Centre",
            "namespace": "https://www.ncsc.nl/"
        },
        "title": "CVE-2026-21712",
        "tracking": {
            "current_release_date": "2026-04-01T00:28:06.372964Z",
            "generator": {
                "date": "2026-02-17T15:00:00Z",
                "engine": {
                    "name": "V.E.L.M.A",
                    "version": "1.7"
                }
            },
            "id": "CVE-2026-21712",
            "initial_release_date": "2026-03-25T03:25:19.098198Z",
            "revision_history": [
                {
                    "date": "2026-03-25T03:25:19.098198Z",
                    "number": "1",
                    "summary": "CVE created.| Source connected.| CVE status created. (valid)"
                },
                {
                    "date": "2026-03-25T03:25:22.223432Z",
                    "number": "2",
                    "summary": "NCSC Score created."
                },
                {
                    "date": "2026-03-25T12:26:21.027022Z",
                    "number": "3",
                    "summary": "Source connected.| CVE status created. (valid)| Products connected (4).| References created (3)."
                },
                {
                    "date": "2026-03-25T12:26:22.912181Z",
                    "number": "4",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-25T12:44:19.672986Z",
                    "number": "5",
                    "summary": "Source created.| CVE status created. (valid)| Products connected (2)."
                },
                {
                    "date": "2026-03-25T12:44:29.414492Z",
                    "number": "6",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-27T02:27:04.526972Z",
                    "number": "7",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-28T07:41:25.519832Z",
                    "number": "8",
                    "summary": "Products connected (2).| Products removed (2)."
                },
                {
                    "date": "2026-03-28T07:41:28.662104Z",
                    "number": "9",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-29T09:48:50.076639Z",
                    "number": "10",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| Products connected (76).| Product Identifiers created (69).| References created (3)."
                },
                {
                    "date": "2026-03-29T09:49:01.109797Z",
                    "number": "11",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-30T13:29:41.666229Z",
                    "number": "12",
                    "summary": "Products connected (1).| References created (1)."
                },
                {
                    "date": "2026-03-30T13:29:46.953373Z",
                    "number": "13",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-30T16:25:41.512382Z",
                    "number": "14",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (2)."
                },
                {
                    "date": "2026-03-30T16:25:44.290912Z",
                    "number": "15",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-30T16:39:31.056101Z",
                    "number": "16",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| Products created (2).| References created (2).| Unknown change."
                },
                {
                    "date": "2026-03-30T16:39:32.755237Z",
                    "number": "17",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-31T06:44:42.539626Z",
                    "number": "18",
                    "summary": "Description created for source."
                },
                {
                    "date": "2026-03-31T12:19:51.794528Z",
                    "number": "19",
                    "summary": "Source connected.| CVE status created. (valid)| CVSS created.| Products connected (1)."
                },
                {
                    "date": "2026-03-31T12:19:54.150155Z",
                    "number": "20",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-31T17:25:18.799351Z",
                    "number": "21",
                    "summary": "Source connected.| CVE status created. (valid)| EPSS created."
                },
                {
                    "date": "2026-04-01T00:27:59.675283Z",
                    "number": "22",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (7).| Product Identifiers created (3).| Product Remediations created (7).| References created (4).| CWES updated (1).| Vendor_assessment created."
                },
                {
                    "date": "2026-04-01T00:28:03.217879Z",
                    "number": "23",
                    "summary": "NCSC Score updated."
                }
            ],
            "status": "interim",
            "version": "23"
        }
    },
    "product_tree": {
        "branches": [
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-1295663",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Debian Linux"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:deb/*",
                                        "product": {
                                            "name": "vers:deb/*",
                                            "product_id": "CSAFPID-1408879"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "nodejs"
                            }
                        ],
                        "category": "product_family",
                        "name": "bookworm"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:deb/*",
                                        "product": {
                                            "name": "vers:deb/*",
                                            "product_id": "CSAFPID-1408880"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "nodejs"
                            }
                        ],
                        "category": "product_family",
                        "name": "bullseye"
                    }
                ],
                "category": "vendor",
                "name": "Debian"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/<20.20.2",
                                "product": {
                                    "name": "vers:unknown/<20.20.2",
                                    "product_id": "CSAFPID-5905827"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/<22.22.2",
                                "product": {
                                    "name": "vers:unknown/<22.22.2",
                                    "product_id": "CSAFPID-5905828"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/<24.14.1",
                                "product": {
                                    "name": "vers:unknown/<24.14.1",
                                    "product_id": "CSAFPID-5905825"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/<25.8.2",
                                "product": {
                                    "name": "vers:unknown/<25.8.2",
                                    "product_id": "CSAFPID-5905826"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Node.js"
                    }
                ],
                "category": "vendor",
                "name": "Open Source"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:rpm/10",
                                "product": {
                                    "name": "vers:rpm/10",
                                    "product_id": "CSAFPID-2858634",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:redhat:enterprise_linux:10"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Red Hat Enterprise Linux 10"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:rpm/8",
                                "product": {
                                    "name": "vers:rpm/8",
                                    "product_id": "CSAFPID-1439317",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:redhat:enterprise_linux:8"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Red Hat Enterprise Linux 8"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:rpm/9",
                                "product": {
                                    "name": "vers:rpm/9",
                                    "product_id": "CSAFPID-1439319",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:redhat:enterprise_linux:9"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Red Hat Enterprise Linux 9"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:rpm/unknown",
                                        "product": {
                                            "name": "vers:rpm/unknown",
                                            "product_id": "CSAFPID-1706524"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "nodejs"
                            }
                        ],
                        "category": "product_family",
                        "name": "Red Hat Enterprise Linux 8"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:rpm/unknown",
                                        "product": {
                                            "name": "vers:rpm/unknown",
                                            "product_id": "CSAFPID-2652741"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "nodejs"
                            }
                        ],
                        "category": "product_family",
                        "name": "Red Hat Enterprise Linux 9"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:rpm/unknown",
                                        "product": {
                                            "name": "vers:rpm/unknown",
                                            "product_id": "CSAFPID-5438677"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "nodejs22"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:rpm/unknown",
                                        "product": {
                                            "name": "vers:rpm/unknown",
                                            "product_id": "CSAFPID-5438679"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "nodejs24"
                            }
                        ],
                        "category": "product_family",
                        "name": "Red Hat Enterprise Linux 10"
                    }
                ],
                "category": "vendor",
                "name": "Red Hat"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-5874046",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:azl3_nodejs24_24.13.0-3:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "azl3 nodejs24 24.13.0-3 on Azure Linux 3.0"
                            }
                        ],
                        "category": "product_family",
                        "name": "Open Source Software"
                    }
                ],
                "category": "vendor",
                "name": "Microsoft"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/18.13.0+dfsg1-1ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/18.13.0+dfsg1-1ubuntu2",
                                            "product_id": "CSAFPID-3703028",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@18.13.0%2Bdfsg1-1ubuntu2?arch=source&distro=noble"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/18.19.1+dfsg-2ubuntu4",
                                        "product": {
                                            "name": "vers:unknown/18.19.1+dfsg-2ubuntu4",
                                            "product_id": "CSAFPID-3703029",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@18.19.1%2Bdfsg-2ubuntu4"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/18.19.1+dfsg-6ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/18.19.1+dfsg-6ubuntu1",
                                            "product_id": "CSAFPID-3703030",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@18.19.1%2Bdfsg-6ubuntu1"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/18.19.1+dfsg-6ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/18.19.1+dfsg-6ubuntu2",
                                            "product_id": "CSAFPID-3703031",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@18.19.1%2Bdfsg-6ubuntu2?arch=source&distro=noble"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/18.19.1+dfsg-6ubuntu5",
                                        "product": {
                                            "name": "vers:unknown/18.19.1+dfsg-6ubuntu5",
                                            "product_id": "CSAFPID-3703032",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@18.19.1%2Bdfsg-6ubuntu5?arch=source&distro=noble"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=0",
                                        "product": {
                                            "name": "vers:unknown/>=0",
                                            "product_id": "CSAFPID-3703033"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "nodejs"
                            }
                        ],
                        "category": "product_family",
                        "name": "Ubuntu:24.04:LTS"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/20.18.1+dfsg-1ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/20.18.1+dfsg-1ubuntu2",
                                            "product_id": "CSAFPID-5958839",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@20.18.1%2Bdfsg-1ubuntu2?arch=source&distro=questing"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/20.19.2+dfsg-1",
                                        "product": {
                                            "name": "vers:unknown/20.19.2+dfsg-1",
                                            "product_id": "CSAFPID-5958840",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@20.19.2%2Bdfsg-1?arch=source&distro=questing"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/20.19.4+dfsg-1",
                                        "product": {
                                            "name": "vers:unknown/20.19.4+dfsg-1",
                                            "product_id": "CSAFPID-5958841",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@20.19.4%2Bdfsg-1?arch=source&distro=questing"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=0",
                                        "product": {
                                            "name": "vers:unknown/>=0",
                                            "product_id": "CSAFPID-5958842"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "nodejs"
                            }
                        ],
                        "category": "product_family",
                        "name": "Ubuntu:25.10"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/0.10.15~dfsg1-4",
                                        "product": {
                                            "name": "vers:unknown/0.10.15~dfsg1-4",
                                            "product_id": "CSAFPID-3702955",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@0.10.15~dfsg1-4?arch=source&distro=esm-infra-legacy/trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/0.10.21~dfsg1-1",
                                        "product": {
                                            "name": "vers:unknown/0.10.21~dfsg1-1",
                                            "product_id": "CSAFPID-3702956",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@0.10.21~dfsg1-1?arch=source&distro=esm-infra-legacy/trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/0.10.22~dfsg1-2",
                                        "product": {
                                            "name": "vers:unknown/0.10.22~dfsg1-2",
                                            "product_id": "CSAFPID-3702957",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@0.10.22~dfsg1-2?arch=source&distro=esm-infra-legacy/trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/0.10.23~dfsg1-1",
                                        "product": {
                                            "name": "vers:unknown/0.10.23~dfsg1-1",
                                            "product_id": "CSAFPID-3702958",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@0.10.23~dfsg1-1?arch=source&distro=esm-infra-legacy/trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/0.10.23~dfsg1-2",
                                        "product": {
                                            "name": "vers:unknown/0.10.23~dfsg1-2",
                                            "product_id": "CSAFPID-3702959",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@0.10.23~dfsg1-2"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/0.10.23~dfsg1-3",
                                        "product": {
                                            "name": "vers:unknown/0.10.23~dfsg1-3",
                                            "product_id": "CSAFPID-3702960",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@0.10.23~dfsg1-3"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/0.10.24~dfsg1-1",
                                        "product": {
                                            "name": "vers:unknown/0.10.24~dfsg1-1",
                                            "product_id": "CSAFPID-3702961",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@0.10.24~dfsg1-1"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/0.10.25~dfsg2-2",
                                        "product": {
                                            "name": "vers:unknown/0.10.25~dfsg2-2",
                                            "product_id": "CSAFPID-3702962",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@0.10.25~dfsg2-2?arch=source&distro=esm-infra-legacy/trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/0.10.25~dfsg2-2ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/0.10.25~dfsg2-2ubuntu1",
                                            "product_id": "CSAFPID-3702963",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@0.10.25~dfsg2-2ubuntu1?arch=source&distro=esm-infra-legacy/trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/0.10.25~dfsg2-2ubuntu1.2",
                                        "product": {
                                            "name": "vers:unknown/0.10.25~dfsg2-2ubuntu1.2",
                                            "product_id": "CSAFPID-3702964",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@0.10.25~dfsg2-2ubuntu1.2"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/0.10.25~dfsg2-2ubuntu1.2+esm1",
                                        "product": {
                                            "name": "vers:unknown/0.10.25~dfsg2-2ubuntu1.2+esm1",
                                            "product_id": "CSAFPID-3702965",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@0.10.25~dfsg2-2ubuntu1.2%2Besm1"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/0.10.25~dfsg2-2ubuntu1.2+esm2",
                                        "product": {
                                            "name": "vers:unknown/0.10.25~dfsg2-2ubuntu1.2+esm2",
                                            "product_id": "CSAFPID-3702966",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@0.10.25~dfsg2-2ubuntu1.2%2Besm2?arch=source&distro=esm-infra-legacy/trusty"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=0",
                                        "product": {
                                            "name": "vers:unknown/>=0",
                                            "product_id": "CSAFPID-3702967"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "nodejs"
                            }
                        ],
                        "category": "product_family",
                        "name": "Ubuntu:Pro:14.04:LTS"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/0.10.25~dfsg2-2ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/0.10.25~dfsg2-2ubuntu1",
                                            "product_id": "CSAFPID-3702968",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@0.10.25~dfsg2-2ubuntu1"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/4.2.2~dfsg-1",
                                        "product": {
                                            "name": "vers:unknown/4.2.2~dfsg-1",
                                            "product_id": "CSAFPID-3702969",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@4.2.2~dfsg-1?arch=source&distro=esm-apps/xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/4.2.3~dfsg-1",
                                        "product": {
                                            "name": "vers:unknown/4.2.3~dfsg-1",
                                            "product_id": "CSAFPID-3702970",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@4.2.3~dfsg-1"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/4.2.4~dfsg-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/4.2.4~dfsg-1ubuntu1",
                                            "product_id": "CSAFPID-3702971",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@4.2.4~dfsg-1ubuntu1?arch=source&distro=esm-apps/xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/4.2.4~dfsg-2",
                                        "product": {
                                            "name": "vers:unknown/4.2.4~dfsg-2",
                                            "product_id": "CSAFPID-3702972",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@4.2.4~dfsg-2"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/4.2.6~dfsg-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/4.2.6~dfsg-1ubuntu1",
                                            "product_id": "CSAFPID-3702973",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@4.2.6~dfsg-1ubuntu1"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/4.2.6~dfsg-1ubuntu4",
                                        "product": {
                                            "name": "vers:unknown/4.2.6~dfsg-1ubuntu4",
                                            "product_id": "CSAFPID-3702974",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@4.2.6~dfsg-1ubuntu4"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/4.2.6~dfsg-1ubuntu4.1",
                                        "product": {
                                            "name": "vers:unknown/4.2.6~dfsg-1ubuntu4.1",
                                            "product_id": "CSAFPID-3702975",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@4.2.6~dfsg-1ubuntu4.1"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/4.2.6~dfsg-1ubuntu4.2",
                                        "product": {
                                            "name": "vers:unknown/4.2.6~dfsg-1ubuntu4.2",
                                            "product_id": "CSAFPID-3702976",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@4.2.6~dfsg-1ubuntu4.2?arch=source&distro=esm-apps/xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/4.2.6~dfsg-1ubuntu4.2+esm1",
                                        "product": {
                                            "name": "vers:unknown/4.2.6~dfsg-1ubuntu4.2+esm1",
                                            "product_id": "CSAFPID-3702977",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@4.2.6~dfsg-1ubuntu4.2%2Besm1?arch=source&distro=esm-apps/xenial"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/4.2.6~dfsg-1ubuntu4.2+esm2",
                                        "product": {
                                            "name": "vers:unknown/4.2.6~dfsg-1ubuntu4.2+esm2",
                                            "product_id": "CSAFPID-3702978",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@4.2.6~dfsg-1ubuntu4.2%2Besm2"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/4.2.6~dfsg-1ubuntu4.2+esm3",
                                        "product": {
                                            "name": "vers:unknown/4.2.6~dfsg-1ubuntu4.2+esm3",
                                            "product_id": "CSAFPID-3702979",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@4.2.6~dfsg-1ubuntu4.2%2Besm3"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=0",
                                        "product": {
                                            "name": "vers:unknown/>=0",
                                            "product_id": "CSAFPID-3702980"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "nodejs"
                            }
                        ],
                        "category": "product_family",
                        "name": "Ubuntu:Pro:16.04:LTS"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/6.11.4~dfsg-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/6.11.4~dfsg-1ubuntu1",
                                            "product_id": "CSAFPID-3702981",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@6.11.4~dfsg-1ubuntu1?arch=source&distro=esm-apps/bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/6.11.4~dfsg-1ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/6.11.4~dfsg-1ubuntu2",
                                            "product_id": "CSAFPID-3702982",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@6.11.4~dfsg-1ubuntu2?arch=source&distro=esm-apps/bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/6.12.0~dfsg-1ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/6.12.0~dfsg-1ubuntu1",
                                            "product_id": "CSAFPID-3702983",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@6.12.0~dfsg-1ubuntu1"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/6.12.0~dfsg-2ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/6.12.0~dfsg-2ubuntu1",
                                            "product_id": "CSAFPID-3702984",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@6.12.0~dfsg-2ubuntu1?arch=source&distro=esm-apps/bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/6.12.0~dfsg-2ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/6.12.0~dfsg-2ubuntu2",
                                            "product_id": "CSAFPID-3702985",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@6.12.0~dfsg-2ubuntu2"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/8.10.0~dfsg-2",
                                        "product": {
                                            "name": "vers:unknown/8.10.0~dfsg-2",
                                            "product_id": "CSAFPID-3702986",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@8.10.0~dfsg-2"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.2",
                                        "product": {
                                            "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.2",
                                            "product_id": "CSAFPID-3702987",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@8.10.0~dfsg-2ubuntu0.2?arch=source&distro=esm-apps/bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.3",
                                        "product": {
                                            "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.3",
                                            "product_id": "CSAFPID-3702988",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@8.10.0~dfsg-2ubuntu0.3?arch=source&distro=esm-apps/bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.4",
                                        "product": {
                                            "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.4",
                                            "product_id": "CSAFPID-3702989",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@8.10.0~dfsg-2ubuntu0.4?arch=source&distro=esm-apps/bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.4+esm1",
                                        "product": {
                                            "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.4+esm1",
                                            "product_id": "CSAFPID-3702990",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@8.10.0~dfsg-2ubuntu0.4%2Besm1"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.4+esm2",
                                        "product": {
                                            "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.4+esm2",
                                            "product_id": "CSAFPID-3702991",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@8.10.0~dfsg-2ubuntu0.4%2Besm2"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.4+esm3",
                                        "product": {
                                            "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.4+esm3",
                                            "product_id": "CSAFPID-3702992",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@8.10.0~dfsg-2ubuntu0.4%2Besm3"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.4+esm4",
                                        "product": {
                                            "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.4+esm4",
                                            "product_id": "CSAFPID-3702993",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@8.10.0~dfsg-2ubuntu0.4%2Besm4?arch=source&distro=esm-apps/bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.4+esm5",
                                        "product": {
                                            "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.4+esm5",
                                            "product_id": "CSAFPID-3702994",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@8.10.0~dfsg-2ubuntu0.4%2Besm5"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.4+esm6",
                                        "product": {
                                            "name": "vers:unknown/8.10.0~dfsg-2ubuntu0.4+esm6",
                                            "product_id": "CSAFPID-3702995",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@8.10.0~dfsg-2ubuntu0.4%2Besm6?arch=source&distro=esm-apps/bionic"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=0",
                                        "product": {
                                            "name": "vers:unknown/>=0",
                                            "product_id": "CSAFPID-3702996"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "nodejs"
                            }
                        ],
                        "category": "product_family",
                        "name": "Ubuntu:Pro:18.04:LTS"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/10.15.2~dfsg-2ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/10.15.2~dfsg-2ubuntu1",
                                            "product_id": "CSAFPID-5958815",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@10.15.2~dfsg-2ubuntu1?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/10.17.0~dfsg-2ubuntu4",
                                        "product": {
                                            "name": "vers:unknown/10.17.0~dfsg-2ubuntu4",
                                            "product_id": "CSAFPID-5958816",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@10.17.0~dfsg-2ubuntu4?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/10.17.0~dfsg-2ubuntu6",
                                        "product": {
                                            "name": "vers:unknown/10.17.0~dfsg-2ubuntu6",
                                            "product_id": "CSAFPID-5958817",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@10.17.0~dfsg-2ubuntu6?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/10.19.0~dfsg-3ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/10.19.0~dfsg-3ubuntu1",
                                            "product_id": "CSAFPID-5958818",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@10.19.0~dfsg-3ubuntu1?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/10.19.0~dfsg-3ubuntu1.1",
                                        "product": {
                                            "name": "vers:unknown/10.19.0~dfsg-3ubuntu1.1",
                                            "product_id": "CSAFPID-5958819",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@10.19.0~dfsg-3ubuntu1.1?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/10.19.0~dfsg-3ubuntu1.2",
                                        "product": {
                                            "name": "vers:unknown/10.19.0~dfsg-3ubuntu1.2",
                                            "product_id": "CSAFPID-5958820",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@10.19.0~dfsg-3ubuntu1.2?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/10.19.0~dfsg-3ubuntu1.3",
                                        "product": {
                                            "name": "vers:unknown/10.19.0~dfsg-3ubuntu1.3",
                                            "product_id": "CSAFPID-5958821",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@10.19.0~dfsg-3ubuntu1.3?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/10.19.0~dfsg-3ubuntu1.5",
                                        "product": {
                                            "name": "vers:unknown/10.19.0~dfsg-3ubuntu1.5",
                                            "product_id": "CSAFPID-5958822",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@10.19.0~dfsg-3ubuntu1.5?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/10.19.0~dfsg-3ubuntu1.6",
                                        "product": {
                                            "name": "vers:unknown/10.19.0~dfsg-3ubuntu1.6",
                                            "product_id": "CSAFPID-5958823",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@10.19.0~dfsg-3ubuntu1.6?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/10.19.0~dfsg-3ubuntu1.6+esm2",
                                        "product": {
                                            "name": "vers:unknown/10.19.0~dfsg-3ubuntu1.6+esm2",
                                            "product_id": "CSAFPID-5958824",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@10.19.0~dfsg-3ubuntu1.6%2Besm2?arch=source&distro=esm-apps/focal"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=0",
                                        "product": {
                                            "name": "vers:unknown/>=0",
                                            "product_id": "CSAFPID-5958825"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "nodejs"
                            }
                        ],
                        "category": "product_family",
                        "name": "Ubuntu:Pro:20.04:LTS"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/12.22.5~dfsg-5ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/12.22.5~dfsg-5ubuntu1",
                                            "product_id": "CSAFPID-5958826",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@12.22.5~dfsg-5ubuntu1?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/12.22.7~dfsg-2ubuntu1",
                                        "product": {
                                            "name": "vers:unknown/12.22.7~dfsg-2ubuntu1",
                                            "product_id": "CSAFPID-5958827",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@12.22.7~dfsg-2ubuntu1?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/12.22.7~dfsg-2ubuntu3",
                                        "product": {
                                            "name": "vers:unknown/12.22.7~dfsg-2ubuntu3",
                                            "product_id": "CSAFPID-5958828",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@12.22.7~dfsg-2ubuntu3?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/12.22.9~dfsg-1ubuntu2",
                                        "product": {
                                            "name": "vers:unknown/12.22.9~dfsg-1ubuntu2",
                                            "product_id": "CSAFPID-5958829",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu2?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/12.22.9~dfsg-1ubuntu3",
                                        "product": {
                                            "name": "vers:unknown/12.22.9~dfsg-1ubuntu3",
                                            "product_id": "CSAFPID-5958830",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.1",
                                        "product": {
                                            "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.1",
                                            "product_id": "CSAFPID-5958831",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3.1?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.2",
                                        "product": {
                                            "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.2",
                                            "product_id": "CSAFPID-5958832",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3.2?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.3",
                                        "product": {
                                            "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.3",
                                            "product_id": "CSAFPID-5958833",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3.3?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.4",
                                        "product": {
                                            "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.4",
                                            "product_id": "CSAFPID-5958834",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3.4?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.5",
                                        "product": {
                                            "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.5",
                                            "product_id": "CSAFPID-5958835",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3.5?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.6",
                                        "product": {
                                            "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.6",
                                            "product_id": "CSAFPID-5958836",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3.6?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.6+esm2",
                                        "product": {
                                            "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.6+esm2",
                                            "product_id": "CSAFPID-5958837",
                                            "product_identification_helper": {
                                                "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3.6%2Besm2?arch=source&distro=esm-apps/jammy"
                                            }
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=0",
                                        "product": {
                                            "name": "vers:unknown/>=0",
                                            "product_id": "CSAFPID-5958838"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "nodejs"
                            }
                        ],
                        "category": "product_family",
                        "name": "Ubuntu:Pro:22.04:LTS"
                    }
                ],
                "category": "vendor",
                "name": "Ubuntu"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:semver/24.14.0|<=24.14.0",
                                "product": {
                                    "name": "vers:semver/24.14.0|<=24.14.0",
                                    "product_id": "CSAFPID-5965421"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:semver/25.8.1|<=25.8.1",
                                "product": {
                                    "name": "vers:semver/25.8.1|<=25.8.1",
                                    "product_id": "CSAFPID-5965422"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "nodejs"
                    }
                ],
                "category": "vendor",
                "name": "nodejs"
            }
        ]
    },
    "vulnerabilities": [
        {
            "cve": "CVE-2026-21712",
            "cwe": {
                "id": "CWE-168",
                "name": "Improper Handling of Inconsistent Special Elements"
            },
            "notes": [
                {
                    "category": "description",
                    "text": "[Unknown description]",
                    "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUBUNTU-CVE-2026-21712.json?alt=media"
                },
                {
                    "category": "description",
                    "text": "A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.",
                    "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-21712"
                },
                {
                    "category": "description",
                    "text": "A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.",
                    "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21712.json"
                },
                {
                    "category": "description",
                    "text": "A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.",
                    "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-21712"
                },
                {
                    "category": "description",
                    "text": "A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.\nA flaw was found in Node.js. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a malformed Internationalized Domain Name (IDN) to the `url.format()` function. When processed, this malformed input triggers an internal error, causing the Node.js application to crash. This can disrupt services and make them unavailable.",
                    "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-21712.json"
                },
                {
                    "category": "other",
                    "text": "0.00012",
                    "title": "EPSS"
                },
                {
                    "category": "other",
                    "text": "4.0",
                    "title": "NCSC Score"
                },
                {
                    "category": "other",
                    "text": "There is product data available from source Certbundde",
                    "title": "NCSC Score top increasing factors"
                },
                {
                    "category": "other",
                    "text": "Is related to a product by vendor Open Source",
                    "title": "NCSC Score top decreasing factors"
                },
                {
                    "category": "details",
                    "text": "Severity: 2\n",
                    "title": "Vendor assessment"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-5905825",
                    "CSAFPID-5905826",
                    "CSAFPID-5905827",
                    "CSAFPID-5905828",
                    "CSAFPID-3702955",
                    "CSAFPID-3702956",
                    "CSAFPID-3702957",
                    "CSAFPID-3702958",
                    "CSAFPID-3702959",
                    "CSAFPID-3702960",
                    "CSAFPID-3702961",
                    "CSAFPID-3702962",
                    "CSAFPID-3702963",
                    "CSAFPID-3702964",
                    "CSAFPID-3702965",
                    "CSAFPID-3702966",
                    "CSAFPID-3702967",
                    "CSAFPID-3702968",
                    "CSAFPID-3702969",
                    "CSAFPID-3702970",
                    "CSAFPID-3702971",
                    "CSAFPID-3702972",
                    "CSAFPID-3702973",
                    "CSAFPID-3702974",
                    "CSAFPID-3702975",
                    "CSAFPID-3702976",
                    "CSAFPID-3702977",
                    "CSAFPID-3702978",
                    "CSAFPID-3702979",
                    "CSAFPID-3702980",
                    "CSAFPID-3702981",
                    "CSAFPID-3702982",
                    "CSAFPID-3702983",
                    "CSAFPID-3702984",
                    "CSAFPID-3702985",
                    "CSAFPID-3702986",
                    "CSAFPID-3702987",
                    "CSAFPID-3702988",
                    "CSAFPID-3702989",
                    "CSAFPID-3702990",
                    "CSAFPID-3702991",
                    "CSAFPID-3702992",
                    "CSAFPID-3702993",
                    "CSAFPID-3702994",
                    "CSAFPID-3702995",
                    "CSAFPID-3702996",
                    "CSAFPID-3703028",
                    "CSAFPID-3703029",
                    "CSAFPID-3703030",
                    "CSAFPID-3703031",
                    "CSAFPID-3703032",
                    "CSAFPID-3703033",
                    "CSAFPID-5958815",
                    "CSAFPID-5958816",
                    "CSAFPID-5958817",
                    "CSAFPID-5958818",
                    "CSAFPID-5958819",
                    "CSAFPID-5958820",
                    "CSAFPID-5958821",
                    "CSAFPID-5958822",
                    "CSAFPID-5958823",
                    "CSAFPID-5958824",
                    "CSAFPID-5958825",
                    "CSAFPID-5958826",
                    "CSAFPID-5958827",
                    "CSAFPID-5958828",
                    "CSAFPID-5958829",
                    "CSAFPID-5958830",
                    "CSAFPID-5958831",
                    "CSAFPID-5958832",
                    "CSAFPID-5958833",
                    "CSAFPID-5958834",
                    "CSAFPID-5958835",
                    "CSAFPID-5958836",
                    "CSAFPID-5958837",
                    "CSAFPID-5958838",
                    "CSAFPID-5958839",
                    "CSAFPID-5958840",
                    "CSAFPID-5958841",
                    "CSAFPID-5958842",
                    "CSAFPID-1295663",
                    "CSAFPID-5965421",
                    "CSAFPID-5965422",
                    "CSAFPID-5874046",
                    "CSAFPID-1439317",
                    "CSAFPID-1439319",
                    "CSAFPID-1706524",
                    "CSAFPID-2652741",
                    "CSAFPID-2858634",
                    "CSAFPID-5438677",
                    "CSAFPID-5438679"
                ],
                "known_not_affected": [
                    "CSAFPID-1408879",
                    "CSAFPID-1408880"
                ]
            },
            "references": [
                {
                    "category": "external",
                    "summary": "Source - hkcert",
                    "url": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260325"
                },
                {
                    "category": "external",
                    "summary": "Source - certbundde",
                    "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0843.json"
                },
                {
                    "category": "external",
                    "summary": "Source - debian",
                    "url": "https://security-tracker.debian.org/tracker/CVE-2026-21712"
                },
                {
                    "category": "external",
                    "summary": "Source - osv",
                    "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUBUNTU-CVE-2026-21712.json?alt=media"
                },
                {
                    "category": "external",
                    "summary": "Source - nvd",
                    "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-21712"
                },
                {
                    "category": "external",
                    "summary": "Source - cveprojectv5",
                    "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21712.json"
                },
                {
                    "category": "external",
                    "summary": "Source - microsoft",
                    "url": "https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Mar"
                },
                {
                    "category": "external",
                    "summary": "Source - first",
                    "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0"
                },
                {
                    "category": "external",
                    "summary": "Source - redhat",
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-21712.json"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0843.json"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0843"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde; cveprojectv5; nvd; redhat",
                    "url": "https://nodejs.org/en/blog/vulnerability/march-2026-security-releases"
                },
                {
                    "category": "external",
                    "summary": "Reference - osv",
                    "url": "https://ubuntu.com/security/CVE-2026-21712"
                },
                {
                    "category": "external",
                    "summary": "Reference - osv; redhat",
                    "url": "https://www.cve.org/CVERecord?id=CVE-2026-21712"
                },
                {
                    "category": "external",
                    "summary": "Reference - osv",
                    "url": "https://nodejs.org/en/blog/vulnerability/march-2026-security-releases#assertion-error-in-node_urlcc-via-malformed-url-format-leads-to-nodejs-crash-cve-2026-21712---medium"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://lists.debian.org/debian-security-announce/2026/msg00092.html"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd; redhat",
                    "url": "https://hackerone.com/reports/3546390"
                },
                {
                    "category": "external",
                    "summary": "Reference - redhat",
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21712"
                }
            ],
            "remediations": [
                {
                    "category": "mitigation",
                    "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
                    "product_ids": [
                        "CSAFPID-1439317",
                        "CSAFPID-1439319",
                        "CSAFPID-1706524",
                        "CSAFPID-2652741",
                        "CSAFPID-2858634",
                        "CSAFPID-5438677",
                        "CSAFPID-5438679"
                    ]
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                        "baseScore": 6.5,
                        "baseSeverity": "MEDIUM"
                    },
                    "products": [
                        "CSAFPID-1295663",
                        "CSAFPID-1439317",
                        "CSAFPID-1439319",
                        "CSAFPID-1706524",
                        "CSAFPID-2652741",
                        "CSAFPID-2858634",
                        "CSAFPID-3702955",
                        "CSAFPID-3702956",
                        "CSAFPID-3702957",
                        "CSAFPID-3702958",
                        "CSAFPID-3702959",
                        "CSAFPID-3702960",
                        "CSAFPID-3702961",
                        "CSAFPID-3702962",
                        "CSAFPID-3702963",
                        "CSAFPID-3702964",
                        "CSAFPID-3702965",
                        "CSAFPID-3702966",
                        "CSAFPID-3702967",
                        "CSAFPID-3702968",
                        "CSAFPID-3702969",
                        "CSAFPID-3702970",
                        "CSAFPID-3702971",
                        "CSAFPID-3702972",
                        "CSAFPID-3702973",
                        "CSAFPID-3702974",
                        "CSAFPID-3702975",
                        "CSAFPID-3702976",
                        "CSAFPID-3702977",
                        "CSAFPID-3702978",
                        "CSAFPID-3702979",
                        "CSAFPID-3702980",
                        "CSAFPID-3702981",
                        "CSAFPID-3702982",
                        "CSAFPID-3702983",
                        "CSAFPID-3702984",
                        "CSAFPID-3702985",
                        "CSAFPID-3702986",
                        "CSAFPID-3702987",
                        "CSAFPID-3702988",
                        "CSAFPID-3702989",
                        "CSAFPID-3702990",
                        "CSAFPID-3702991",
                        "CSAFPID-3702992",
                        "CSAFPID-3702993",
                        "CSAFPID-3702994",
                        "CSAFPID-3702995",
                        "CSAFPID-3702996",
                        "CSAFPID-3703028",
                        "CSAFPID-3703029",
                        "CSAFPID-3703030",
                        "CSAFPID-3703031",
                        "CSAFPID-3703032",
                        "CSAFPID-3703033",
                        "CSAFPID-5438677",
                        "CSAFPID-5438679",
                        "CSAFPID-5874046",
                        "CSAFPID-5905825",
                        "CSAFPID-5905826",
                        "CSAFPID-5905827",
                        "CSAFPID-5905828",
                        "CSAFPID-5958815",
                        "CSAFPID-5958816",
                        "CSAFPID-5958817",
                        "CSAFPID-5958818",
                        "CSAFPID-5958819",
                        "CSAFPID-5958820",
                        "CSAFPID-5958821",
                        "CSAFPID-5958822",
                        "CSAFPID-5958823",
                        "CSAFPID-5958824",
                        "CSAFPID-5958825",
                        "CSAFPID-5958826",
                        "CSAFPID-5958827",
                        "CSAFPID-5958828",
                        "CSAFPID-5958829",
                        "CSAFPID-5958830",
                        "CSAFPID-5958831",
                        "CSAFPID-5958832",
                        "CSAFPID-5958833",
                        "CSAFPID-5958834",
                        "CSAFPID-5958835",
                        "CSAFPID-5958836",
                        "CSAFPID-5958837",
                        "CSAFPID-5958838",
                        "CSAFPID-5958839",
                        "CSAFPID-5958840",
                        "CSAFPID-5958841",
                        "CSAFPID-5958842",
                        "CSAFPID-5965421",
                        "CSAFPID-5965422"
                    ]
                }
            ],
            "title": "CVE-2026-21712"
        }
    ]
}