{"schema_version":"1","data":[{"id":48592,"advisory_id":"4a3ac421-72e4-485c-b111-1389f69c623b","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v12.8.1","source_published_at":"2019-08-15T13:15:32+00:00","published_at":"2026-10-25T13:35:27.668732+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2019-9511","CVE-2019-9512","CVE-2019-9513","CVE-2019-9514","CVE-2019-9515","CVE-2019-9516","CVE-2019-9517","CVE-2019-9518"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 12.8.1 (Current)","summary":"Node.js 12.8.1 is a security release addressing HTTP/2 denial-of-service vulnerabilities.","evidence":"This is a security release. Node.js, as well as many other implementations of HTTP/2, have been found vulnerable to Denial of Service attacks.","products":[{"name":{"value":"Node.js","evidence":"Node.js 12.8.1 (Current)"},"prerequisites":[],"fixed_versions":[{"value":"12.8.1","evidence":"Node.js 12.8.1 (Current)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2019-9511","evidence":"CVE-2019-9511 “Data Dribble”"},{"value":"CVE-2019-9512","evidence":"CVE-2019-9512 “Ping Flood”"},{"value":"CVE-2019-9513","evidence":"CVE-2019-9513 “Resource Loop”"},{"value":"CVE-2019-9514","evidence":"CVE-2019-9514 “Reset Flood”"},{"value":"CVE-2019-9515","evidence":"CVE-2019-9515 “Settings Flood”"},{"value":"CVE-2019-9516","evidence":"CVE-2019-9516 “0-Length Headers Leak”"},{"value":"CVE-2019-9517","evidence":"CVE-2019-9517 “Internal Data Buffering”"},{"value":"CVE-2019-9518","evidence":"CVE-2019-9518 “Empty Frames Flood”"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":48505,"advisory_id":"5f187f3d-90c2-4258-8078-366f25e63a7c","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v8.16.1","source_published_at":"2019-08-15T22:38:49+00:00","published_at":"2026-10-25T13:34:23.669722+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2019-9511","CVE-2019-9512","CVE-2019-9513","CVE-2019-9514","CVE-2019-9515","CVE-2019-9516","CVE-2019-9517","CVE-2019-9518"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 8.16.1 (LTS)","summary":"Node.js 8.16.1 (LTS) is a security release addressing HTTP/2 denial-of-service vulnerabilities.","evidence":"This is a security release. Node.js, as well as many other implementations of HTTP/2, have been found vulnerable to Denial of Service attacks.","products":[{"name":{"value":"Node.js","evidence":"Node.js 8.16.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"8.16.1","evidence":"Node.js 8.16.1 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2019-9511","evidence":"CVE-2019-9511 “Data Dribble”"},{"value":"CVE-2019-9512","evidence":"CVE-2019-9512 “Ping Flood”"},{"value":"CVE-2019-9513","evidence":"CVE-2019-9513 “Resource Loop”"},{"value":"CVE-2019-9514","evidence":"CVE-2019-9514 “Reset Flood”"},{"value":"CVE-2019-9515","evidence":"CVE-2019-9515 “Settings Flood”"},{"value":"CVE-2019-9516","evidence":"CVE-2019-9516 “0-Length Headers Leak”"},{"value":"CVE-2019-9517","evidence":"CVE-2019-9517 “Internal Data Buffering”"},{"value":"CVE-2019-9518","evidence":"CVE-2019-9518 “Empty Frames Flood”"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":48410,"advisory_id":"ead1ad8c-7cac-4ad6-b1a7-d4c6da1fb550","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v10.16.3","source_published_at":"2019-08-15T22:41:03+00:00","published_at":"2026-10-25T13:32:32.871656+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2019-9511","CVE-2019-9512","CVE-2019-9513","CVE-2019-9514","CVE-2019-9515","CVE-2019-9516","CVE-2019-9517","CVE-2019-9518"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 10.16.3 (LTS)","summary":"Node.js 10.16.3 is a security release addressing HTTP/2 denial-of-service vulnerabilities.","evidence":"This is a security release. Node.js, as well as many other implementations of HTTP/2, have been found vulnerable to Denial of Service attacks.","products":[{"name":{"value":"Node.js","evidence":"Node.js 10.16.3 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"10.16.3","evidence":"Node.js 10.16.3 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2019-9511","evidence":"CVE-2019-9511 “Data Dribble”"},{"value":"CVE-2019-9512","evidence":"CVE-2019-9512 “Ping Flood”"},{"value":"CVE-2019-9513","evidence":"CVE-2019-9513 “Resource Loop”"},{"value":"CVE-2019-9514","evidence":"CVE-2019-9514 “Reset Flood”"},{"value":"CVE-2019-9515","evidence":"CVE-2019-9515 “Settings Flood”"},{"value":"CVE-2019-9516","evidence":"CVE-2019-9516 “0-Length Headers Leak”"},{"value":"CVE-2019-9517","evidence":"CVE-2019-9517 “Internal Data Buffering”"},{"value":"CVE-2019-9518","evidence":"CVE-2019-9518 “Empty Frames Flood”"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":48592,"next_before":48410}