UnratedFix available
Node.js 14.16.1 (LTS)
Node.js 14.16.1 updates npm and OpenSSL and fixes listed vulnerabilities affecting Node.js release lines.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Vulnerabilities fixed: CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High)
Node.js
Node.js 14.16.1 (LTS)
- Affected versions
- All versions of the 15.x, 14.x, 12.x and 10.x releases lines
Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines
All versions of the 14.x, 12.x and 10.x releases linesImpacts: All versions of the 14.x, 12.x and 10.x releases lines
- Fixed versions
- 14.16.1
Node.js 14.16.1 (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2021-3450
CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High)
CVE-2021-3449CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing (High)
CVE-2020-7774CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
Publisher severity
No explicit severity was extracted.
- Event
- #40600 · Revision 1
- Added to Heist Feed
- Publisher date