UnratedFix available
Node.js 14.20.1 (LTS)
Node.js 14.20.1 fixes three listed CVEs, including DNS rebinding in --inspect on macOS and HTTP request smuggling.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
The following CVEs are fixed in this release:
Node.js
Node.js 14.20.1 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 14.20.1
Node.js 14.20.1 (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2022-32212
CVE-2022-32212: DNS rebinding in --inspect on macOS (High)
CVE-2022-32213CVE-2022-32213: bypass via obs-fold mechanic (Medium)
CVE-2022-35256CVE-2022-35256: HTTP Request Smuggling Due to Incorrect Parsing of Header Fields (Medium)
Publisher severity
No explicit severity was extracted.
- Event
- #30913 · Revision 1
- Added to Heist Feed
- Publisher date