{"schema_version":"2","view":"grouped","data":[{"id":57794,"cve_ids":["CVE-2017-3735","CVE-2017-3736"],"payload":{"kind":"patch","title":"OpenSSL update, 1.0.2m","summary":"Node.js releases for active lines include the OpenSSL 1.0.2m update, addressing OpenSSL security flaws. The announcement says the impact is low and does not classify these as strictly security releases.","evidence":"Node v4.8.6 \"Argon\" (Maintenance LTS) Node v6.12.0 \"Boron\" (Active LTS) Node v8.9.1 \"Carbon\" (Active LTS) Node v9.1.0 (Current)","products":[{"name":{"value":"Node.js","evidence":"Node.js Releases"},"prerequisites":[],"fixed_versions":[{"value":"v4.8.6","evidence":"Node v4.8.6 \"Argon\" (Maintenance LTS)"},{"value":"v6.12.0","evidence":"Node v6.12.0 \"Boron\" (Active LTS)"},{"value":"v8.9.1","evidence":"Node v8.9.1 \"Carbon\" (Active LTS)"},{"value":"v9.1.0","evidence":"Node v9.1.0 (Current)"}],"affected_versions":[]},{"name":{"value":"OpenSSL","evidence":"each including the OpenSSL 1.0.2m update."},"prerequisites":[],"fixed_versions":[{"value":"1.0.2m","evidence":"each including the OpenSSL 1.0.2m update."}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2017-3735","evidence":"CVE-2017-3735: OOB read parsing IPAdressFamily in an X.509 certificate"},{"value":"CVE-2017-3736","evidence":"CVE-2017-3736: Carry propagating bug in the x86_64 Montgomery squaring procedure"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2de0b07d-11c3-4bfd-9bce-debda716a00b","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/openssl-november-2017","advisory_id":"2de0b07d-11c3-4bfd-9bce-debda716a00b","event_types":["patch"],"published_at":"2026-10-25T17:08:23.858703+00:00","technologies":["node-js","nodejs","openssl"],"context_update":false,"extraction_method":"llm","source_published_at":"2017-10-30T23:30:01+00:00","detail_url":"/advisories/advisory%3A2de0b07d-11c3-4bfd-9bce-debda716a00b","group":{"id":"advisory:2de0b07d-11c3-4bfd-9bce-debda716a00b","revision":1,"primary_event_id":57299,"change":"published","superseded_by":[],"changed":{"id":57299,"cve_ids":["CVE-2017-3735","CVE-2017-3736"],"payload":{"kind":"patch","title":"OpenSSL update, 1.0.2m","summary":"Node.js releases for active lines include the OpenSSL 1.0.2m update, addressing OpenSSL security flaws. The announcement says the impact is low and does not classify these as strictly security releases.","evidence":"Node v4.8.6 \"Argon\" (Maintenance LTS) Node v6.12.0 \"Boron\" (Active LTS) Node v8.9.1 \"Carbon\" (Active LTS) Node v9.1.0 (Current)","products":[{"name":{"value":"Node.js","evidence":"Node.js Releases"},"prerequisites":[],"fixed_versions":[{"value":"v4.8.6","evidence":"Node v4.8.6 \"Argon\" (Maintenance LTS)"},{"value":"v6.12.0","evidence":"Node v6.12.0 \"Boron\" (Active LTS)"},{"value":"v8.9.1","evidence":"Node v8.9.1 \"Carbon\" (Active LTS)"},{"value":"v9.1.0","evidence":"Node v9.1.0 (Current)"}],"affected_versions":[]},{"name":{"value":"OpenSSL","evidence":"each including the OpenSSL 1.0.2m update."},"prerequisites":[],"fixed_versions":[{"value":"1.0.2m","evidence":"each including the OpenSSL 1.0.2m update."}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2017-3735","evidence":"CVE-2017-3735: OOB read parsing IPAdressFamily in an X.509 certificate"},{"value":"CVE-2017-3736","evidence":"CVE-2017-3736: Carry propagating bug in the x86_64 Montgomery squaring procedure"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2de0b07d-11c3-4bfd-9bce-debda716a00b","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/openssl-november-2017","advisory_id":"2de0b07d-11c3-4bfd-9bce-debda716a00b","event_types":["patch"],"published_at":"2026-10-25T17:08:23.858703+00:00","technologies":["node-js","nodejs","openssl"],"context_update":false,"extraction_method":"llm","source_published_at":"2017-10-30T23:30:01+00:00","detail_url":"/events/57299"},"members":[{"id":57299,"cve_ids":["CVE-2017-3735","CVE-2017-3736"],"payload":{"kind":"patch","title":"OpenSSL update, 1.0.2m","summary":"Node.js releases for active lines include the OpenSSL 1.0.2m update, addressing OpenSSL security flaws. The announcement says the impact is low and does not classify these as strictly security releases.","evidence":"Node v4.8.6 \"Argon\" (Maintenance LTS) Node v6.12.0 \"Boron\" (Active LTS) Node v8.9.1 \"Carbon\" (Active LTS) Node v9.1.0 (Current)","products":[{"name":{"value":"Node.js","evidence":"Node.js Releases"},"prerequisites":[],"fixed_versions":[{"value":"v4.8.6","evidence":"Node v4.8.6 \"Argon\" (Maintenance LTS)"},{"value":"v6.12.0","evidence":"Node v6.12.0 \"Boron\" (Active LTS)"},{"value":"v8.9.1","evidence":"Node v8.9.1 \"Carbon\" (Active LTS)"},{"value":"v9.1.0","evidence":"Node v9.1.0 (Current)"}],"affected_versions":[]},{"name":{"value":"OpenSSL","evidence":"each including the OpenSSL 1.0.2m update."},"prerequisites":[],"fixed_versions":[{"value":"1.0.2m","evidence":"each including the OpenSSL 1.0.2m update."}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2017-3735","evidence":"CVE-2017-3735: OOB read parsing IPAdressFamily in an X.509 certificate"},{"value":"CVE-2017-3736","evidence":"CVE-2017-3736: Carry propagating bug in the x86_64 Montgomery squaring procedure"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2de0b07d-11c3-4bfd-9bce-debda716a00b","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/openssl-november-2017","advisory_id":"2de0b07d-11c3-4bfd-9bce-debda716a00b","event_types":["patch"],"published_at":"2026-10-25T17:08:23.858703+00:00","technologies":["node-js","nodejs","openssl"],"context_update":false,"extraction_method":"llm","source_published_at":"2017-10-30T23:30:01+00:00","detail_url":"/events/57299"}]}}],"next_after":57794,"next_before":57794}