{"schema_version":"1","data":[{"id":41729,"advisory_id":"21f0fcf8-48ea-4447-8e76-f1c94227486e","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v14.15.4","source_published_at":"2021-01-04T18:17:46+00:00","published_at":"2026-10-25T11:24:23.597488+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 14.15.4 (LTS)","summary":"Node.js 14.15.4 (LTS) fixes three listed vulnerabilities involving OpenSSL, TLSWrap, and HTTP request smuggling.","evidence":"Vulnerabilities fixed: CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)","products":[{"name":{"value":"Node.js","evidence":"Node.js 14.15.4 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"14.15.4","evidence":"Node.js 14.15.4 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-1971","evidence":"CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)"},{"value":"CVE-2020-8265","evidence":"CVE-2020-8265: use-after-free in TLSWrap (High)"},{"value":"CVE-2020-8287","evidence":"CVE-2020-8287: HTTP Request Smuggling in nodejs (Low)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41610,"advisory_id":"c372d67a-4fc6-482d-ad53-4d0b6d0e216e","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v10.23.1","source_published_at":"2021-01-04T18:20:48+00:00","published_at":"2026-10-25T11:22:25.390691+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 10.23.1 (LTS)","summary":"Node.js 10.23.1 (LTS) is a security release fixing TLS use-after-free, HTTP request smuggling, and an OpenSSL null-pointer dereference vulnerability.","evidence":"This is a security release. Vulnerabilities fixed:","products":[{"name":{"value":"Node.js","evidence":"Node.js 10.23.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"10.23.1","evidence":"Node.js 10.23.1 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-8265","evidence":"CVE-2020-8265: use-after-free in TLSWrap (High)"},{"value":"CVE-2020-8287","evidence":"CVE-2020-8287: HTTP Request Smuggling in nodejs"},{"value":"CVE-2020-1971","evidence":"CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41505,"advisory_id":"fb020adf-958f-4859-b2dd-76f8bc84ed6c","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v12.20.1","source_published_at":"2021-01-04T18:23:08+00:00","published_at":"2026-10-25T11:20:33.924218+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 12.20.1 (LTS)","summary":"Node.js 12.20.1 is a security release that fixes TLS use-after-free, HTTP request smuggling, and an OpenSSL vulnerability reachable through Node.js.","evidence":"This is a security release.","products":[{"name":{"value":"Node.js","evidence":"Node.js 12.20.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"12.20.1","evidence":"Node.js 12.20.1 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-8265","evidence":"CVE-2020-8265: use-after-free in TLSWrap (High)"},{"value":"CVE-2020-8287","evidence":"CVE-2020-8287: HTTP Request Smuggling in nodejs"},{"value":"CVE-2020-1971","evidence":"CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41324,"advisory_id":"f22ba73e-66ab-40c2-8e6a-927a472e85be","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/january-2021-security-releases","source_published_at":"2021-01-04T19:30:00+00:00","published_at":"2026-10-25T11:17:46.926244+00:00","extraction_method":"llm","technologies":["node-js","nodejs","openssl"],"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"event_types":["patch"],"payload":{"kind":"patch","title":"January 2021 Security Releases","summary":"Node.js security releases address multiple vulnerabilities across supported release lines, including TLS use-after-free, HTTP request smuggling, and an OpenSSL issue. Updates are available for the listed Node.js versions.","evidence":"Security releases available Updates are now available for v10,x, v12.x, v14.x and v15.x Node.js release lines for the following issues.","products":[{"name":{"value":"Node.js","evidence":"Node.js v10.23.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"Node.js v10.23.1 (LTS)","evidence":"Node.js v10.23.1 (LTS)"},{"value":"Node.js v12.20.1 (LTS)","evidence":"Node.js v12.20.1 (LTS)"},{"value":"Node.js v14.15.4 (LTS)","evidence":"Node.js v14.15.4 (LTS)"},{"value":"Node.js v15.5.1 (Current)","evidence":"Node.js v15.5.1 (Current)"}],"affected_versions":[{"value":"All versions of the 15.x, 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines"}]},{"name":{"value":"OpenSSL","evidence":"OpenSSL - EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"All versions of the 14.x, 12.x and 10.x release lines","evidence":"Impacts: All versions of the 14.x, 12.x and 10.x release lines"},{"value":"Versions of the 15.x line before 15.5.0","evidence":"Versions of the 15.x line before 15.5.0 which included an update to the latest OpenSSL."}]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-8265","evidence":"use-after-free in TLSWrap (High) (CVE-2020-8265)"},{"value":"CVE-2020-8287","evidence":"HTTP Request Smuggling in nodejs (Low) (CVE-2020-8287)"},{"value":"CVE-2020-1971","evidence":"OpenSSL - EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":41729,"next_before":41324}