{"schema_version":"2","view":"grouped","data":[{"id":71843,"cve_ids":["CVE-2015-1788"],"payload":{"kind":"patch","title":"io.js security patches 1.8.3 and 2.3.3","summary":"io.js released versions 1.8.3 and 2.3.3 to fix an out-of-band write in the utf8 decoder that could cause denial of service. The announcement also describes an OpenSSL upgrade in 1.8.3.","evidence":"v1.8.3 and v2.3.3, complete changelog from previous releases can be found on GitHub","products":[{"name":{"value":"io.js","evidence":"all versions of io.js"},"prerequisites":[],"fixed_versions":[{"value":"1.8.3","evidence":"please update them to io.js versions 1.8.3 and 2.3.3"}],"affected_versions":[{"value":"v1.8.2 or below","evidence":"If you're running v1.8.2 or below, or v2.3.2 or below"}]},{"name":{"value":"io.js","evidence":"all versions of io.js"},"prerequisites":[],"fixed_versions":[{"value":"2.3.3","evidence":"please update them to io.js versions 1.8.3 and 2.3.3"}],"affected_versions":[{"value":"v2.3.2 or below","evidence":"If you're running v1.8.2 or below, or v2.3.2 or below"}]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2015-1788","evidence":"fixes malformed ECParameters causing infinite loop (CVE-2015-1788)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1d712dd0-fc71-44aa-969f-1e00652a9eba","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-07-03","advisory_id":"1d712dd0-fc71-44aa-969f-1e00652a9eba","event_types":["patch"],"published_at":"2026-10-25T23:43:12.819232+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-07-03T12:00:00+00:00","detail_url":"/advisories/advisory%3A1d712dd0-fc71-44aa-969f-1e00652a9eba","group":{"id":"advisory:1d712dd0-fc71-44aa-969f-1e00652a9eba","revision":1,"primary_event_id":72328,"change":"published","superseded_by":[],"changed":{"id":72328,"cve_ids":["CVE-2015-1788"],"payload":{"kind":"patch","title":"io.js security patches 1.8.3 and 2.3.3","summary":"io.js released versions 1.8.3 and 2.3.3 to fix an out-of-band write in the utf8 decoder that could cause denial of service. The announcement also describes an OpenSSL upgrade in 1.8.3.","evidence":"v1.8.3 and v2.3.3, complete changelog from previous releases can be found on GitHub","products":[{"name":{"value":"io.js","evidence":"all versions of io.js"},"prerequisites":[],"fixed_versions":[{"value":"1.8.3","evidence":"please update them to io.js versions 1.8.3 and 2.3.3"}],"affected_versions":[{"value":"v1.8.2 or below","evidence":"If you're running v1.8.2 or below, or v2.3.2 or below"}]},{"name":{"value":"io.js","evidence":"all versions of io.js"},"prerequisites":[],"fixed_versions":[{"value":"2.3.3","evidence":"please update them to io.js versions 1.8.3 and 2.3.3"}],"affected_versions":[{"value":"v2.3.2 or below","evidence":"If you're running v1.8.2 or below, or v2.3.2 or below"}]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2015-1788","evidence":"fixes malformed ECParameters causing infinite loop (CVE-2015-1788)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1d712dd0-fc71-44aa-969f-1e00652a9eba","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-07-03","advisory_id":"1d712dd0-fc71-44aa-969f-1e00652a9eba","event_types":["patch"],"published_at":"2026-10-25T23:43:12.819232+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-07-03T12:00:00+00:00","detail_url":"/events/72328"},"members":[{"id":72328,"cve_ids":["CVE-2015-1788"],"payload":{"kind":"patch","title":"io.js security patches 1.8.3 and 2.3.3","summary":"io.js released versions 1.8.3 and 2.3.3 to fix an out-of-band write in the utf8 decoder that could cause denial of service. The announcement also describes an OpenSSL upgrade in 1.8.3.","evidence":"v1.8.3 and v2.3.3, complete changelog from previous releases can be found on GitHub","products":[{"name":{"value":"io.js","evidence":"all versions of io.js"},"prerequisites":[],"fixed_versions":[{"value":"1.8.3","evidence":"please update them to io.js versions 1.8.3 and 2.3.3"}],"affected_versions":[{"value":"v1.8.2 or below","evidence":"If you're running v1.8.2 or below, or v2.3.2 or below"}]},{"name":{"value":"io.js","evidence":"all versions of io.js"},"prerequisites":[],"fixed_versions":[{"value":"2.3.3","evidence":"please update them to io.js versions 1.8.3 and 2.3.3"}],"affected_versions":[{"value":"v2.3.2 or below","evidence":"If you're running v1.8.2 or below, or v2.3.2 or below"}]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2015-1788","evidence":"fixes malformed ECParameters causing infinite loop (CVE-2015-1788)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1d712dd0-fc71-44aa-969f-1e00652a9eba","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-07-03","advisory_id":"1d712dd0-fc71-44aa-969f-1e00652a9eba","event_types":["patch"],"published_at":"2026-10-25T23:43:12.819232+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-07-03T12:00:00+00:00","detail_url":"/events/72328"}]}}],"next_after":71843,"next_before":71843}