Skip to content
Heist/ feed
UnratedFix available

Node.js 17.3.0 (Current)

Type: patchSource: Node.js announcements1 source record

Node.js 17.3.0 updates OpenSSL to address CVE-2021-4044, a vulnerability that may be exploited through Node.js.

Announced Group revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

OpenSSL-3.0.1 contains a fix for CVE-2021-4044: Invalid handling of X509_verify_cert() internal errors in libssl (Moderate). This is a vulnerability in OpenSSL that may be exploited through Node.js.

Node.js

Node.js 17.3.0 (Current)
Affected versions
Not stated in this extraction
Fixed versions
17.3.0
Node.js 17.3.0 (Current)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2021-4044
OpenSSL-3.0.1 contains a fix for CVE-2021-4044

Publisher severity

No explicit severity was extracted.

Event
#35114 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement