Skip to content
Heist/ feed
UnratedFix available

Node.js 17.3.1 (Current)

Type: patchSource: Node.js announcements1 source record

Node.js 17.3.1 fixes certificate verification and prototype pollution vulnerabilities. The release identifies CVE-2021-44531, CVE-2021-44532, CVE-2021-44533, and CVE-2022-21824.

Announced Group revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

Node.js 17.3.1 (Current)

Node.js

Node.js 17.3.1 (Current)
Affected versions
Not stated in this extraction
Fixed versions
17.3.1
Node.js 17.3.1 (Current)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2021-44531
Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531)
CVE-2021-44532
Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532)
CVE-2021-44533
Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533)
CVE-2022-21824
Prototype pollution via console.table properties (Low)(CVE-2022-21824)

Publisher severity

No explicit severity was extracted.

Event
#34932 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement