UnratedFix available
Node.js 16.19.1 (LTS)
Node.js 16.19.1 (LTS) fixes several security vulnerabilities, including issues in permissions policies, crypto, ICU data loading, and the Fetch API.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
The following CVEs are fixed in this release:
Node.js
Node.js 16.19.1 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 16.19.1
Node.js 16.19.1 (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2023-23918
CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
CVE-2023-23919CVE-2023-23919: Node.js OpenSSL error handling issues in nodejs crypto library (Medium)
CVE-2023-23920CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)
CVE-2023-23936CVE-2023-23936: Fetch API in Node.js did not protect against CRLF injection in host headers (Medium)
CVE-2023-24807CVE-2023-24807: Regular Expression Denial of Service in Headers in Node.js fetch API (Low)
Publisher severity
No explicit severity was extracted.
- Event
- #28880 · Revision 1
- Added to Heist Feed
- Publisher date