Security feed

patchSecurity fix · UnratedNode.js announcements

Node.js 12.18.4 (LTS)

Node.js 12.18.4 is a security release fixing two vulnerabilities.

Announced

Machine-extracted · Revision 1Original source
Evidence and details

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

This is a security release. Vulnerabilities fixed:

Node.js

Node.js 12.18.4 (LTS)
Affected versions
Not stated in this extraction
Fixed versions
12.18.4
Node.js 12.18.4 (LTS)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2020-8201
CVE-2020-8201: HTTP Request Smuggling due to CR-to-Hyphen conversion (High).
CVE-2020-8252
CVE-2020-8252: fs.realpath.native on may cause buffer overflow (Medium).

Publisher severity

No explicit severity was extracted.

Event
#44049 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement