{
  "cve": [
    "CVE-2021-44533"
  ],
  "vulnerable": "12.x || 14.x || 16.x || 17.x",
  "patched": "^12.22.9 || ^14.18.3 || ^16.13.2 || ^17.3.1",
  "ref": "https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/",
  "overview": "Node.js did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects containing a single-value Relative Distinguished Name that would be interpreted as a multi-value Relative Distinguished Name, for example, in order to inject a Common Name that would allow bypassing the certificate subject verification. See https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44533 for more details.",
  "affectedEnvironments": [
    "all"
  ],
  "severity": "medium"
}