Security feed

patchSecurity fix · UnratedNode.js announcements

Node.js 17.3.0 (Current)

Node.js 17.3.0 updates OpenSSL to address CVE-2021-4044, a vulnerability that may be exploited through Node.js.

Announced

Machine-extracted · Revision 1Original source
Evidence and details

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

OpenSSL-3.0.1 contains a fix for CVE-2021-4044: Invalid handling of X509_verify_cert() internal errors in libssl (Moderate). This is a vulnerability in OpenSSL that may be exploited through Node.js.

Node.js

Node.js 17.3.0 (Current)
Affected versions
Not stated in this extraction
Fixed versions
17.3.0
Node.js 17.3.0 (Current)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2021-4044
OpenSSL-3.0.1 contains a fix for CVE-2021-4044

Publisher severity

No explicit severity was extracted.

Event
#35114 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement