UnratedFix available
Node.js 10.23.1 (LTS)
Node.js 10.23.1 (LTS) is a security release fixing TLS use-after-free, HTTP request smuggling, and an OpenSSL null-pointer dereference vulnerability.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This is a security release. Vulnerabilities fixed:
Node.js
Node.js 10.23.1 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 10.23.1
Node.js 10.23.1 (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2020-8265
CVE-2020-8265: use-after-free in TLSWrap (High)
CVE-2020-8287CVE-2020-8287: HTTP Request Smuggling in nodejs
CVE-2020-1971CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)
Publisher severity
No explicit severity was extracted.
- Event
- #41610 · Revision 1
- Added to Heist Feed
- Publisher date