UnratedFix available
Node.js 13.8.0 (Current)
Node.js 13.8.0 is a security release fixing three listed vulnerabilities and tightening HTTP parsing; the release notes describe an option to disable strict checks but advise against using it.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This is a security release. Vulnerabilities fixed:
Node.js
Node.js 13.8.0 (Current)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 13.8.0
Node.js 13.8.0 (Current)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2019-15606
CVE-2019-15606: HTTP header values do not have trailing OWS trimmed.
CVE-2019-15605CVE-2019-15605: HTTP request smuggling using malformed Transfer-Encoding header.
CVE-2019-15604CVE-2019-15604: Remotely trigger an assertion on a TLS server with a malformed certificate string.
Publisher severity
No explicit severity was extracted.
- Event
- #46704 · Revision 1
- Added to Heist Feed
- Publisher date