Security feed

Node.js 14.15.4 (LTS) fixes three listed vulnerabilities involving OpenSSL, TLSWrap, and HTTP request smuggling.

Node.js 10.23.1 (LTS) is a security release fixing TLS use-after-free, HTTP request smuggling, and an OpenSSL null-pointer dereference vulnerability.

Node.js 12.20.1 is a security release that fixes TLS use-after-free, HTTP request smuggling, and an OpenSSL vulnerability reachable through Node.js.

Node.js security releases address multiple vulnerabilities across supported release lines, including TLS use-after-free, HTTP request smuggling, and an OpenSSL issue. Updates are available for the listed Node.js versi…