UnratedFix available
January 10th 2022 Security Releases
Node.js security updates address three medium-severity issues and one low-severity issue across the 12.x, 14.x, 16.x, and 17.x release lines.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Updates are now available for the v17.x, v16.x, v14.x, and v12.x Node.js release lines for the following issues.
Node.js
Node.js v12.22.9 (LTS)
- Affected versions
- All versions of the 17.x, 16.x, 14.x, and 12.x releases lines.
Impacts: All versions of the 17.x, 16.x, 14.x, and 12.x releases lines.
- Fixed versions
- Node.js v12.22.9 (LTS)
Node.js v12.22.9 (LTS)
Node.js v14.18.3 (LTS)Node.js v14.18.3 (LTS)
Node.js v16.13.2 (LTS)Node.js v16.13.2 (LTS)
Node.js v17.3.1 (Current)Node.js v17.3.1 (Current)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2021-44531
Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531)
CVE-2021-44532Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532)
CVE-2021-44533Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533)
CVE-2022-21824Prototype pollution via console.table properties (Low)(CVE-2022-21824)
Publisher severity
No explicit severity was extracted.
- Event
- #34787 · Revision 1
- Added to Heist Feed
- Publisher date