Node.js 14.17.5 (LTS)
Node.js 14.17.5 addresses vulnerabilities involving DNS hostname validation, HTTP/2 stream cancellation, and HTTPS certificate validation. The release also includes a follow-up fix for CVE-2021-22930.
Announced
Machine-extracted · Revision 1Original source
Evidence and details
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This release includes a follow-up fix for CVE-2021-22930 as the issue was not completely resolved by the previous fix.
Node.js
Node.js 14.17.5 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 14.17.5
Node.js 14.17.5 (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2021-3672
CVE-2021-3672/CVE-2021-22931
CVE-2021-22931CVE-2021-3672/CVE-2021-22931
CVE-2021-22940CVE-2021-22940: Use after free on close http2 on stream canceling (High)
CVE-2021-22939CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (Low)
CVE-2021-22930This release includes a follow-up fix for CVE-2021-22930 as the issue was not completely resolved by the previous fix.
Publisher severity
No explicit severity was extracted.