/ feedSecurity updates address three vulnerabilities across the Node.js 12.x, 14.x, and 16.x release lines. Updated releases are Node.js v12.22.5, v14.17.5, and v16.6.2.
Node.js 12.22.5 (LTS) addresses vulnerabilities involving domain-name handling, HTTP/2 stream cancellation, and HTTPS certificate validation.
Node.js 14.17.5 addresses vulnerabilities involving DNS hostname validation, HTTP/2 stream cancellation, and HTTPS certificate validation. The release also includes a follow-up fix for CVE-2021-22930.
Node.js 16.6.2 addresses reported security issues involving DNS hostname handling, HTTP/2 stream cancellation, and HTTPS certificate validation.