Node.js 14.11.0 (Current)
Node.js 14.11.0 is a security release fixing two vulnerabilities: denial of service from unfinished HTTP/1.1 requests and HTTP request smuggling.
Announced
Machine-extracted · Revision 1Original source
Evidence and details
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This is a security release. Vulnerabilities fixed: CVE-2020-8251: Denial of Service by resource exhaustion CWE-400 due to unfinished HTTP/1.1 requests (Critical). CVE-2020-8201: HTTP Request Smuggling due to CR-to-Hyphen conversion (High).
Node.js
Node.js 14.11.0 (Current)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 14.11.0
Node.js 14.11.0 (Current)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2020-8251
CVE-2020-8251: Denial of Service by resource exhaustion CWE-400 due to unfinished HTTP/1.1 requests (Critical).
CVE-2020-8201CVE-2020-8201: HTTP Request Smuggling due to CR-to-Hyphen conversion (High).
Publisher severity
No explicit severity was extracted.