Node.js 14.21.3 (LTS)
Node.js 14.21.3 fixes security vulnerabilities, includes OpenSSL security updates, and updates npm.
Announced
Machine-extracted · Revision 1Original source
Evidence and details
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
The following CVEs are fixed in this release:
Node.js 14
This security release also includes an npm update for Node.js 14
- Affected versions
- Not stated in this extraction
- Fixed versions
- 14.21.3
Node.js 14.21.3 (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2023-23918
CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
CVE-2023-23920CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)
Publisher severity
No explicit severity was extracted.