Node.js 12.22.6 (LTS)
Node.js 12.22.6 updates npm to 6.14.15 and remediates vulnerabilities in npm CLI dependencies, including issues associated with five listed CVEs.
Announced
Machine-extracted · Revision 1Original source
Evidence and details
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
These are vulnerabilities in the node-tar, arborist, and npm cli modules which are related to the initial reports and subsequent remediation of node-tar vulnerabilities CVE-2021-32803 and CVE-2021-32804.
Node.js
Node.js 12.22.6 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 12.22.6
Node.js 12.22.6 (LTS)
- Prerequisites
- Not stated in this extraction
npm
deps: upgrade npm to 6.14.15
- Affected versions
- Not stated in this extraction
- Fixed versions
- 6.14.15
deps: upgrade npm to 6.14.15
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2021-32803
node-tar vulnerabilities CVE-2021-32803 and CVE-2021-32804
CVE-2021-32804node-tar vulnerabilities CVE-2021-32803 and CVE-2021-32804
CVE-2021-37701CVE-2021-37701
CVE-2021-37712CVE-2021-37712
CVE-2021-37713CVE-2021-37713
CVE-2021-39134CVE-2021-39134
CVE-2021-39135CVE-2021-39135
Publisher severity
No explicit severity was extracted.