Skip to content
Heist/ feed
UnratedFix available

Node.js 12.22.1 (LTS)

Type: patchSource: Node.js announcements1 source record

Node.js 12.22.1 includes fixes for OpenSSL and npm-related vulnerabilities.

Announced Group revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

Vulnerabilities fixed: CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT

Node.js

Node.js 12.22.1 (LTS)
Affected versions
12.x
Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines
Fixed versions
12.22.1
Node.js 12.22.1 (LTS)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2021-3450
CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT
CVE-2021-3449
CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing
CVE-2020-7774
CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution

Publisher severity

No explicit severity was extracted.

Event
#41953 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement