Node.js 12.8.1 (Current)
Node.js 12.8.1 is a security release addressing HTTP/2 denial-of-service vulnerabilities.
Announced
Machine-extracted · Revision 1Original source
Evidence and details
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This is a security release. Node.js, as well as many other implementations of HTTP/2, have been found vulnerable to Denial of Service attacks.
Node.js
Node.js 12.8.1 (Current)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 12.8.1
Node.js 12.8.1 (Current)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2019-9511
CVE-2019-9511 “Data Dribble”
CVE-2019-9512CVE-2019-9512 “Ping Flood”
CVE-2019-9513CVE-2019-9513 “Resource Loop”
CVE-2019-9514CVE-2019-9514 “Reset Flood”
CVE-2019-9515CVE-2019-9515 “Settings Flood”
CVE-2019-9516CVE-2019-9516 “0-Length Headers Leak”
CVE-2019-9517CVE-2019-9517 “Internal Data Buffering”
CVE-2019-9518CVE-2019-9518 “Empty Frames Flood”
Publisher severity
No explicit severity was extracted.