/ feedA V8 memory corruption vulnerability in Node.js 0.8 and 0.10 can cause a denial of service when deeply recursive workloads trigger garbage collection and an interrupt. The issue is fixed in Node.js v0.8.28 and v0.10.3…
The announcement describes a denial-of-service vulnerability affecting Node.js v0.12.x through v5.x and a V8 out-of-bounds access vulnerability affecting v4.x and v5.x when user-supplied JavaScript can be executed. It…
The announcement says upcoming Node.js releases will include fixes for CVE-2015-8027 across v0.12.x, v4.x, and v5.x, and for CVE-2015-6764 in v4.x and v5.x. It does not specify fixed versions.
Node.js postponed its planned security releases to include upstream OpenSSL fixes and announced vulnerabilities affecting several Node.js release lines. Fixes were planned for v4.x and v5.x for CVE-2015-6764, alongsid…