{"schema_version":"2","view":"grouped","data":[{"id":65264,"cve_ids":["CVE-2014-9748","CVE-2016-1669","CVE-2016-5325"],"payload":{"kind":"patch","title":"Security updates for all active release lines, June 2016","summary":"Node.js published security updates for active release lines, including fixes for V8 and HTTP-processing flaws. The announcement also lists libuv-related impact and available releases.","evidence":"The fixes we are including in this update are:","products":[{"name":{"value":"Node.js","evidence":"Node.js v5.12.0"},"prerequisites":[],"fixed_versions":[{"value":"Node.js v5.12.0","evidence":"Node.js v5.12.0"},{"value":"Node.js v4.4.6 (LTS \"Argon\")","evidence":"Node.js v4.4.6 (LTS \"Argon\")"},{"value":"Node.js v0.12.15 (Maintenance)","evidence":"Node.js v0.12.15 (Maintenance)"},{"value":"Node.js v0.10.46 (Maintenance)","evidence":"Node.js v0.10.46 (Maintenance)"}],"affected_versions":[{"value":"versions prior to v6.2.0","evidence":"versions prior to v6.2.0 are affected"},{"value":"Node.js v5","evidence":"Node.js v5 is affected"},{"value":"Node.js v4 (LTS \"Argon\")","evidence":"Node.js v4 (LTS \"Argon\") is affected"},{"value":"Node.js v0.12 (Maintenance)","evidence":"Node.js v0.12 (Maintenance) is affected"},{"value":"Node.js v0.10 (Maintenance)","evidence":"Node.js v0.10 (Maintenance) is affected"}]},{"name":{"value":"libuv","evidence":"Prior to libuv version 1.7.4"},"prerequisites":[{"value":"Windows XP and Windows 2003","evidence":"for Windows XP and Windows 2003"}],"fixed_versions":[],"affected_versions":[{"value":"Prior to libuv version 1.7.4","evidence":"Prior to libuv version 1.7.4"}]}],"severity":"low","fixed_cves":[],"related_cves":[{"value":"CVE-2016-1669","evidence":"CVE-2016-1669 Buffer overflow in V8"},{"value":"CVE-2014-9748","evidence":"CVE-2014-9748 Unsafe use of read/write locks on Windows 2003 and XP in libuv"},{"value":"CVE-2016-5325","evidence":"HTTP processing security defect (CVE-2016-5325)"}],"security_relevant":true,"severity_evidence":"our assessment is that this is low severity for Node.js users"},"group_id":"advisory:37059526-f2ae-4687-843a-845a7e625fda","priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"low"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/june-2016-security-releases","advisory_id":"37059526-f2ae-4687-843a-845a7e625fda","event_types":["patch"],"published_at":"2026-10-25T20:20:36.738773+00:00","technologies":["libuv","node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2016-06-13T12:57:51+00:00","detail_url":"/advisories/advisory%3A37059526-f2ae-4687-843a-845a7e625fda","group":{"id":"advisory:37059526-f2ae-4687-843a-845a7e625fda","revision":1,"primary_event_id":64586,"change":"published","superseded_by":[],"changed":{"id":64586,"cve_ids":["CVE-2014-9748","CVE-2016-1669","CVE-2016-5325"],"payload":{"kind":"patch","title":"Security updates for all active release lines, June 2016","summary":"Node.js published security updates for active release lines, including fixes for V8 and HTTP-processing flaws. The announcement also lists libuv-related impact and available releases.","evidence":"The fixes we are including in this update are:","products":[{"name":{"value":"Node.js","evidence":"Node.js v5.12.0"},"prerequisites":[],"fixed_versions":[{"value":"Node.js v5.12.0","evidence":"Node.js v5.12.0"},{"value":"Node.js v4.4.6 (LTS \"Argon\")","evidence":"Node.js v4.4.6 (LTS \"Argon\")"},{"value":"Node.js v0.12.15 (Maintenance)","evidence":"Node.js v0.12.15 (Maintenance)"},{"value":"Node.js v0.10.46 (Maintenance)","evidence":"Node.js v0.10.46 (Maintenance)"}],"affected_versions":[{"value":"versions prior to v6.2.0","evidence":"versions prior to v6.2.0 are affected"},{"value":"Node.js v5","evidence":"Node.js v5 is affected"},{"value":"Node.js v4 (LTS \"Argon\")","evidence":"Node.js v4 (LTS \"Argon\") is affected"},{"value":"Node.js v0.12 (Maintenance)","evidence":"Node.js v0.12 (Maintenance) is affected"},{"value":"Node.js v0.10 (Maintenance)","evidence":"Node.js v0.10 (Maintenance) is affected"}]},{"name":{"value":"libuv","evidence":"Prior to libuv version 1.7.4"},"prerequisites":[{"value":"Windows XP and Windows 2003","evidence":"for Windows XP and Windows 2003"}],"fixed_versions":[],"affected_versions":[{"value":"Prior to libuv version 1.7.4","evidence":"Prior to libuv version 1.7.4"}]}],"severity":"low","fixed_cves":[],"related_cves":[{"value":"CVE-2016-1669","evidence":"CVE-2016-1669 Buffer overflow in V8"},{"value":"CVE-2014-9748","evidence":"CVE-2014-9748 Unsafe use of read/write locks on Windows 2003 and XP in libuv"},{"value":"CVE-2016-5325","evidence":"HTTP processing security defect (CVE-2016-5325)"}],"security_relevant":true,"severity_evidence":"our assessment is that this is low severity for Node.js users"},"group_id":"advisory:37059526-f2ae-4687-843a-845a7e625fda","priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"low"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/june-2016-security-releases","advisory_id":"37059526-f2ae-4687-843a-845a7e625fda","event_types":["patch"],"published_at":"2026-10-25T20:20:36.738773+00:00","technologies":["libuv","node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2016-06-13T12:57:51+00:00","detail_url":"/events/64586"},"members":[{"id":64586,"cve_ids":["CVE-2014-9748","CVE-2016-1669","CVE-2016-5325"],"payload":{"kind":"patch","title":"Security updates for all active release lines, June 2016","summary":"Node.js published security updates for active release lines, including fixes for V8 and HTTP-processing flaws. The announcement also lists libuv-related impact and available releases.","evidence":"The fixes we are including in this update are:","products":[{"name":{"value":"Node.js","evidence":"Node.js v5.12.0"},"prerequisites":[],"fixed_versions":[{"value":"Node.js v5.12.0","evidence":"Node.js v5.12.0"},{"value":"Node.js v4.4.6 (LTS \"Argon\")","evidence":"Node.js v4.4.6 (LTS \"Argon\")"},{"value":"Node.js v0.12.15 (Maintenance)","evidence":"Node.js v0.12.15 (Maintenance)"},{"value":"Node.js v0.10.46 (Maintenance)","evidence":"Node.js v0.10.46 (Maintenance)"}],"affected_versions":[{"value":"versions prior to v6.2.0","evidence":"versions prior to v6.2.0 are affected"},{"value":"Node.js v5","evidence":"Node.js v5 is affected"},{"value":"Node.js v4 (LTS \"Argon\")","evidence":"Node.js v4 (LTS \"Argon\") is affected"},{"value":"Node.js v0.12 (Maintenance)","evidence":"Node.js v0.12 (Maintenance) is affected"},{"value":"Node.js v0.10 (Maintenance)","evidence":"Node.js v0.10 (Maintenance) is affected"}]},{"name":{"value":"libuv","evidence":"Prior to libuv version 1.7.4"},"prerequisites":[{"value":"Windows XP and Windows 2003","evidence":"for Windows XP and Windows 2003"}],"fixed_versions":[],"affected_versions":[{"value":"Prior to libuv version 1.7.4","evidence":"Prior to libuv version 1.7.4"}]}],"severity":"low","fixed_cves":[],"related_cves":[{"value":"CVE-2016-1669","evidence":"CVE-2016-1669 Buffer overflow in V8"},{"value":"CVE-2014-9748","evidence":"CVE-2014-9748 Unsafe use of read/write locks on Windows 2003 and XP in libuv"},{"value":"CVE-2016-5325","evidence":"HTTP processing security defect (CVE-2016-5325)"}],"security_relevant":true,"severity_evidence":"our assessment is that this is low severity for Node.js users"},"group_id":"advisory:37059526-f2ae-4687-843a-845a7e625fda","priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"low"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/june-2016-security-releases","advisory_id":"37059526-f2ae-4687-843a-845a7e625fda","event_types":["patch"],"published_at":"2026-10-25T20:20:36.738773+00:00","technologies":["libuv","node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2016-06-13T12:57:51+00:00","detail_url":"/events/64586"}]}}],"next_after":65264,"next_before":65264}