Node.js 16.4.1 (Current)
Node.js 16.4.1 fixes two security vulnerabilities: an out-of-bounds read in libuv and Windows installer permission issues that could enable local privilege escalation.
Announced
Machine-extracted · Revision 1Original source
Evidence and details
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Vulnerabilities fixed: CVE-2021-22918: libuv upgrade - Out of bounds read (Medium)
Node.js
Node.js 16.4.1 (Current)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 16.4.1
Node.js 16.4.1 (Current)
- Prerequisites
- Not stated in this extraction
Windows installer
CVE-2021-22921: Windows installer - Node Installer Local Privilege Escalation (Medium)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 16.4.1
Windows 64-bit Installer: https://nodejs.org/dist/v16.4.1/node-v16.4.1-x64.msi
- Prerequisites
- under certain conditions on Windows platforms
Node.js is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms.
- Related CVEs
- CVE-2021-22918
CVE-2021-22918: libuv upgrade - Out of bounds read (Medium)
CVE-2021-22921CVE-2021-22921: Windows installer - Node Installer Local Privilege Escalation (Medium)
Publisher severity
No explicit severity was extracted.