SDDC Manager 5.2.x is showing vulnerable due to node.js package version before 18.20.8-1.ph4

Products

• VMware SDDC Manager

Issue/Introduction

SDDC Manager 5.2.x is showing vulnerable due to node.js package version before 18.20.8-1.ph4

Related CVEs: 
CVE-2018-7160 
CVE-2022-35255 
CVE-2022-35256 
CVE-2022-3602 
CVE-2022-3786 
CVE-2022-43548 
CVE-2023-23918 
CVE-2023-23919 
CVE-2023-23920 
CVE-2023-23936 
CVE-2023-30581 
CVE-2023-30585 
CVE-2023-30588 
CVE-2023-30589 
CVE-2023-30590 
CVE-2023-32002 
CVE-2023-32006 
CVE-2023-32559 
CVE-2023-38552 
CVE-2023-39333 
CVE-2025-23083 
CVE-2025-23084 
CVE-2025-23085 
CVE-2024-3566 
CVE-2023-44487 

Environment

VCF 5.x

Resolution

Broadcom is aware of these CVEs. 
Please refer to the release notes for existing and forthcoming product releases for any updates in relation to these CVEs.
Should you require further information please contact Broadcom Support.