UnratedFix available
Node.js 12.18.0 (LTS)
Node.js 12.18.0 (LTS) is a security release that fixes three vulnerabilities, including TLS certificate verification bypass, HTTP/2 denial of service, and memory corruption issues.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This is a security release. Vulnerabilities fixed: CVE-2020-8172: TLS session reuse can lead to host certificate verification bypass (High). CVE-2020-11080: HTTP/2 Large Settings Frame DoS (Low). CVE-2020-8174: napi_get_value_string_*() allows various kinds of memory corruption (High).
Node.js
Node.js 12.18.0 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 12.18.0
Node.js 12.18.0 (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2020-8172
CVE-2020-8172: TLS session reuse can lead to host certificate verification bypass (High).
CVE-2020-11080CVE-2020-11080: HTTP/2 Large Settings Frame DoS (Low).
CVE-2020-8174CVE-2020-8174: napi_get_value_string_*() allows various kinds of memory corruption (High).
Publisher severity
No explicit severity was extracted.
- Event
- #45501 · Revision 1
- Added to Heist Feed
- Publisher date