Security feed

Node.js 10.24.0 fixes vulnerabilities involving HTTP/2 unknownProtocol handling, DNS rebinding in --inspect, and an OpenSSL integer overflow.

Node.js 15.10.0 fixes vulnerabilities involving HTTP/2 unknownProtocol handling and DNS rebinding in --inspect, and includes an OpenSSL update related to an integer-overflow vulnerability.

Node.js 12.21.0 (LTS) includes fixes for vulnerabilities involving HTTP/2 resource exhaustion, DNS rebinding in the inspector, and an OpenSSL integer overflow.

Node.js 14.16.0 (LTS) fixes vulnerabilities involving HTTP/2, DNS rebinding in the inspector, and OpenSSL.

Security updates address denial-of-service, DNS rebinding, and OpenSSL integer-overflow vulnerabilities affecting Node.js release lines 10.x, 12.x, 14.x, and 15.x.