OpenSSL and zlib vulnerabilities do not affect Node.js
Node.js assessed the OpenSSL and zlib vulnerabilities and determined that they do not affect Node.js.
Announced
Machine-extracted · Revision 1Original source
Evidence and details
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
The vulnerability in the OpenSSL Security release of Oct 11 2022 does not affect any active Node.js release lines, as well as the zlib vulnerability (CVE-2022-37434) patched on the zlib Security release of Oct 13 2022, does not affect Node.js.
Node.js
The vulnerability in the OpenSSL Security release of Oct 11 2022 does not affect any active Node.js release lines
- Affected versions
- Not stated in this extraction
- Fixed versions
- Not stated in this extraction
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2022-3358
Using a Custom Cipher with NID_undef may lead to NULL encryption (CVE-2022-3358)
CVE-2022-37434the zlib vulnerability (CVE-2022-37434) patched on the zlib Security release of Oct 13 2022
Publisher severity
No explicit severity was extracted.