{"schema_version":"1.6.0","id":"ROOT-OS-DEBIAN-12-CVE-2025-23085","modified":"2026-03-18T11:49:22Z","published":"2025-12-18T13:42:07Z","upstream":["CVE-2025-23085"],"summary":"CVE-2025-23085 in nodejs - Patched by Root","details":"Root has patched CVE-2025-23085 in the nodejs package for Root:Debian:12. Multiple fixed versions available.","affected":[{"package":{"name":"nodejs","ecosystem":"Root:Debian:12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.19.0+dfsg-6~deb12u2.root.io.8"},{"fixed":"18.20.4+dfsg-1~deb12u1.root.io.9"},{"fixed":"18.20.4+dfsg-1~deb12u1.root.io.10"},{"fixed":"18.20.4+dfsg-1~deb12u1.root.io.12"},{"fixed":"18.19.0+dfsg-6~deb12u2.root.io.7"},{"fixed":"18.20.4+dfsg-1~deb12u1.root.io.11"}]}],"database_specific":{"all_fixed_versions":["18.19.0+dfsg-6~deb12u2.root.io.8","18.20.4+dfsg-1~deb12u1.root.io.9","18.20.4+dfsg-1~deb12u1.root.io.10","18.20.4+dfsg-1~deb12u1.root.io.12","18.19.0+dfsg-6~deb12u2.root.io.7","18.20.4+dfsg-1~deb12u1.root.io.11"],"root_patch_version":"root.io.12","root_patched":true,"total_fixed_versions":6,"upstream_version":"18.20.4+dfsg-1~deb12u1"}},{"package":{"name":"rootio-nodejs","ecosystem":"Root:Debian:12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.19.0+dfsg-6~deb12u2.root.io.8"},{"fixed":"18.20.4+dfsg-1~deb12u1.root.io.9"},{"fixed":"18.20.4+dfsg-1~deb12u1.root.io.10"},{"fixed":"18.20.4+dfsg-1~deb12u1.root.io.12"},{"fixed":"18.19.0+dfsg-6~deb12u2.root.io.7"},{"fixed":"18.20.4+dfsg-1~deb12u1.root.io.11"}]}],"database_specific":{"all_fixed_versions":["18.19.0+dfsg-6~deb12u2.root.io.8","18.20.4+dfsg-1~deb12u1.root.io.9","18.20.4+dfsg-1~deb12u1.root.io.10","18.20.4+dfsg-1~deb12u1.root.io.12","18.19.0+dfsg-6~deb12u2.root.io.7","18.20.4+dfsg-1~deb12u1.root.io.11"],"root_patch_version":"root.io.12","root_patched":true,"total_fixed_versions":6,"upstream_version":"18.20.4+dfsg-1~deb12u1"}}],"database_specific":{"distro":"debian","distro_version":"12","severity":"MEDIUM","source":"Root"}}