{"schema_version":"2","view":"grouped","data":[{"id":42121,"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"payload":{"kind":"patch","title":"Node.js 14.15.4 (LTS)","summary":"Node.js 14.15.4 (LTS) fixes three listed vulnerabilities involving OpenSSL, TLSWrap, and HTTP request smuggling.","evidence":"Vulnerabilities fixed: CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)","products":[{"name":{"value":"Node.js","evidence":"Node.js 14.15.4 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"14.15.4","evidence":"Node.js 14.15.4 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-1971","evidence":"CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)"},{"value":"CVE-2020-8265","evidence":"CVE-2020-8265: use-after-free in TLSWrap (High)"},{"value":"CVE-2020-8287","evidence":"CVE-2020-8287: HTTP Request Smuggling in nodejs (Low)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:21f0fcf8-48ea-4447-8e76-f1c94227486e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v14.15.4","advisory_id":"21f0fcf8-48ea-4447-8e76-f1c94227486e","event_types":["patch"],"published_at":"2026-10-25T11:24:23.597488+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-01-04T18:17:46+00:00","detail_url":"/advisories/advisory%3A21f0fcf8-48ea-4447-8e76-f1c94227486e","group":{"id":"advisory:21f0fcf8-48ea-4447-8e76-f1c94227486e","revision":1,"primary_event_id":41729,"change":"published","superseded_by":[],"changed":{"id":41729,"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"payload":{"kind":"patch","title":"Node.js 14.15.4 (LTS)","summary":"Node.js 14.15.4 (LTS) fixes three listed vulnerabilities involving OpenSSL, TLSWrap, and HTTP request smuggling.","evidence":"Vulnerabilities fixed: CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)","products":[{"name":{"value":"Node.js","evidence":"Node.js 14.15.4 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"14.15.4","evidence":"Node.js 14.15.4 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-1971","evidence":"CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)"},{"value":"CVE-2020-8265","evidence":"CVE-2020-8265: use-after-free in TLSWrap (High)"},{"value":"CVE-2020-8287","evidence":"CVE-2020-8287: HTTP Request Smuggling in nodejs (Low)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:21f0fcf8-48ea-4447-8e76-f1c94227486e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v14.15.4","advisory_id":"21f0fcf8-48ea-4447-8e76-f1c94227486e","event_types":["patch"],"published_at":"2026-10-25T11:24:23.597488+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-01-04T18:17:46+00:00","detail_url":"/events/41729"},"members":[{"id":41729,"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"payload":{"kind":"patch","title":"Node.js 14.15.4 (LTS)","summary":"Node.js 14.15.4 (LTS) fixes three listed vulnerabilities involving OpenSSL, TLSWrap, and HTTP request smuggling.","evidence":"Vulnerabilities fixed: CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)","products":[{"name":{"value":"Node.js","evidence":"Node.js 14.15.4 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"14.15.4","evidence":"Node.js 14.15.4 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-1971","evidence":"CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)"},{"value":"CVE-2020-8265","evidence":"CVE-2020-8265: use-after-free in TLSWrap (High)"},{"value":"CVE-2020-8287","evidence":"CVE-2020-8287: HTTP Request Smuggling in nodejs (Low)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:21f0fcf8-48ea-4447-8e76-f1c94227486e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v14.15.4","advisory_id":"21f0fcf8-48ea-4447-8e76-f1c94227486e","event_types":["patch"],"published_at":"2026-10-25T11:24:23.597488+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-01-04T18:17:46+00:00","detail_url":"/events/41729"}]}},{"id":42001,"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"payload":{"kind":"patch","title":"Node.js 10.23.1 (LTS)","summary":"Node.js 10.23.1 (LTS) is a security release fixing TLS use-after-free, HTTP request smuggling, and an OpenSSL null-pointer dereference vulnerability.","evidence":"This is a security release. Vulnerabilities fixed:","products":[{"name":{"value":"Node.js","evidence":"Node.js 10.23.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"10.23.1","evidence":"Node.js 10.23.1 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-8265","evidence":"CVE-2020-8265: use-after-free in TLSWrap (High)"},{"value":"CVE-2020-8287","evidence":"CVE-2020-8287: HTTP Request Smuggling in nodejs"},{"value":"CVE-2020-1971","evidence":"CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c372d67a-4fc6-482d-ad53-4d0b6d0e216e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v10.23.1","advisory_id":"c372d67a-4fc6-482d-ad53-4d0b6d0e216e","event_types":["patch"],"published_at":"2026-10-25T11:22:25.390691+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-01-04T18:20:48+00:00","detail_url":"/advisories/advisory%3Ac372d67a-4fc6-482d-ad53-4d0b6d0e216e","group":{"id":"advisory:c372d67a-4fc6-482d-ad53-4d0b6d0e216e","revision":1,"primary_event_id":41610,"change":"published","superseded_by":[],"changed":{"id":41610,"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"payload":{"kind":"patch","title":"Node.js 10.23.1 (LTS)","summary":"Node.js 10.23.1 (LTS) is a security release fixing TLS use-after-free, HTTP request smuggling, and an OpenSSL null-pointer dereference vulnerability.","evidence":"This is a security release. Vulnerabilities fixed:","products":[{"name":{"value":"Node.js","evidence":"Node.js 10.23.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"10.23.1","evidence":"Node.js 10.23.1 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-8265","evidence":"CVE-2020-8265: use-after-free in TLSWrap (High)"},{"value":"CVE-2020-8287","evidence":"CVE-2020-8287: HTTP Request Smuggling in nodejs"},{"value":"CVE-2020-1971","evidence":"CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c372d67a-4fc6-482d-ad53-4d0b6d0e216e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v10.23.1","advisory_id":"c372d67a-4fc6-482d-ad53-4d0b6d0e216e","event_types":["patch"],"published_at":"2026-10-25T11:22:25.390691+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-01-04T18:20:48+00:00","detail_url":"/events/41610"},"members":[{"id":41610,"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"payload":{"kind":"patch","title":"Node.js 10.23.1 (LTS)","summary":"Node.js 10.23.1 (LTS) is a security release fixing TLS use-after-free, HTTP request smuggling, and an OpenSSL null-pointer dereference vulnerability.","evidence":"This is a security release. Vulnerabilities fixed:","products":[{"name":{"value":"Node.js","evidence":"Node.js 10.23.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"10.23.1","evidence":"Node.js 10.23.1 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-8265","evidence":"CVE-2020-8265: use-after-free in TLSWrap (High)"},{"value":"CVE-2020-8287","evidence":"CVE-2020-8287: HTTP Request Smuggling in nodejs"},{"value":"CVE-2020-1971","evidence":"CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c372d67a-4fc6-482d-ad53-4d0b6d0e216e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v10.23.1","advisory_id":"c372d67a-4fc6-482d-ad53-4d0b6d0e216e","event_types":["patch"],"published_at":"2026-10-25T11:22:25.390691+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-01-04T18:20:48+00:00","detail_url":"/events/41610"}]}},{"id":41895,"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"payload":{"kind":"patch","title":"Node.js 12.20.1 (LTS)","summary":"Node.js 12.20.1 is a security release that fixes TLS use-after-free, HTTP request smuggling, and an OpenSSL vulnerability reachable through Node.js.","evidence":"This is a security release.","products":[{"name":{"value":"Node.js","evidence":"Node.js 12.20.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"12.20.1","evidence":"Node.js 12.20.1 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-8265","evidence":"CVE-2020-8265: use-after-free in TLSWrap (High)"},{"value":"CVE-2020-8287","evidence":"CVE-2020-8287: HTTP Request Smuggling in nodejs"},{"value":"CVE-2020-1971","evidence":"CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:fb020adf-958f-4859-b2dd-76f8bc84ed6c","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v12.20.1","advisory_id":"fb020adf-958f-4859-b2dd-76f8bc84ed6c","event_types":["patch"],"published_at":"2026-10-25T11:20:33.924218+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-01-04T18:23:08+00:00","detail_url":"/advisories/advisory%3Afb020adf-958f-4859-b2dd-76f8bc84ed6c","group":{"id":"advisory:fb020adf-958f-4859-b2dd-76f8bc84ed6c","revision":1,"primary_event_id":41505,"change":"published","superseded_by":[],"changed":{"id":41505,"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"payload":{"kind":"patch","title":"Node.js 12.20.1 (LTS)","summary":"Node.js 12.20.1 is a security release that fixes TLS use-after-free, HTTP request smuggling, and an OpenSSL vulnerability reachable through Node.js.","evidence":"This is a security release.","products":[{"name":{"value":"Node.js","evidence":"Node.js 12.20.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"12.20.1","evidence":"Node.js 12.20.1 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-8265","evidence":"CVE-2020-8265: use-after-free in TLSWrap (High)"},{"value":"CVE-2020-8287","evidence":"CVE-2020-8287: HTTP Request Smuggling in nodejs"},{"value":"CVE-2020-1971","evidence":"CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:fb020adf-958f-4859-b2dd-76f8bc84ed6c","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v12.20.1","advisory_id":"fb020adf-958f-4859-b2dd-76f8bc84ed6c","event_types":["patch"],"published_at":"2026-10-25T11:20:33.924218+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-01-04T18:23:08+00:00","detail_url":"/events/41505"},"members":[{"id":41505,"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"payload":{"kind":"patch","title":"Node.js 12.20.1 (LTS)","summary":"Node.js 12.20.1 is a security release that fixes TLS use-after-free, HTTP request smuggling, and an OpenSSL vulnerability reachable through Node.js.","evidence":"This is a security release.","products":[{"name":{"value":"Node.js","evidence":"Node.js 12.20.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"12.20.1","evidence":"Node.js 12.20.1 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-8265","evidence":"CVE-2020-8265: use-after-free in TLSWrap (High)"},{"value":"CVE-2020-8287","evidence":"CVE-2020-8287: HTTP Request Smuggling in nodejs"},{"value":"CVE-2020-1971","evidence":"CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:fb020adf-958f-4859-b2dd-76f8bc84ed6c","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v12.20.1","advisory_id":"fb020adf-958f-4859-b2dd-76f8bc84ed6c","event_types":["patch"],"published_at":"2026-10-25T11:20:33.924218+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-01-04T18:23:08+00:00","detail_url":"/events/41505"}]}},{"id":41711,"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"payload":{"kind":"patch","title":"January 2021 Security Releases","summary":"Node.js security releases address multiple vulnerabilities across supported release lines, including TLS use-after-free, HTTP request smuggling, and an OpenSSL issue. Updates are available for the listed Node.js versions.","evidence":"Security releases available Updates are now available for v10,x, v12.x, v14.x and v15.x Node.js release lines for the following issues.","products":[{"name":{"value":"Node.js","evidence":"Node.js v10.23.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"Node.js v10.23.1 (LTS)","evidence":"Node.js v10.23.1 (LTS)"},{"value":"Node.js v12.20.1 (LTS)","evidence":"Node.js v12.20.1 (LTS)"},{"value":"Node.js v14.15.4 (LTS)","evidence":"Node.js v14.15.4 (LTS)"},{"value":"Node.js v15.5.1 (Current)","evidence":"Node.js v15.5.1 (Current)"}],"affected_versions":[{"value":"All versions of the 15.x, 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines"}]},{"name":{"value":"OpenSSL","evidence":"OpenSSL - EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"All versions of the 14.x, 12.x and 10.x release lines","evidence":"Impacts: All versions of the 14.x, 12.x and 10.x release lines"},{"value":"Versions of the 15.x line before 15.5.0","evidence":"Versions of the 15.x line before 15.5.0 which included an update to the latest OpenSSL."}]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-8265","evidence":"use-after-free in TLSWrap (High) (CVE-2020-8265)"},{"value":"CVE-2020-8287","evidence":"HTTP Request Smuggling in nodejs (Low) (CVE-2020-8287)"},{"value":"CVE-2020-1971","evidence":"OpenSSL - EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f22ba73e-66ab-40c2-8e6a-927a472e85be","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/january-2021-security-releases","advisory_id":"f22ba73e-66ab-40c2-8e6a-927a472e85be","event_types":["patch"],"published_at":"2026-10-25T11:17:46.926244+00:00","technologies":["node-js","nodejs","openssl"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-01-04T19:30:00+00:00","detail_url":"/advisories/advisory%3Af22ba73e-66ab-40c2-8e6a-927a472e85be","group":{"id":"advisory:f22ba73e-66ab-40c2-8e6a-927a472e85be","revision":1,"primary_event_id":41324,"change":"published","superseded_by":[],"changed":{"id":41324,"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"payload":{"kind":"patch","title":"January 2021 Security Releases","summary":"Node.js security releases address multiple vulnerabilities across supported release lines, including TLS use-after-free, HTTP request smuggling, and an OpenSSL issue. Updates are available for the listed Node.js versions.","evidence":"Security releases available Updates are now available for v10,x, v12.x, v14.x and v15.x Node.js release lines for the following issues.","products":[{"name":{"value":"Node.js","evidence":"Node.js v10.23.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"Node.js v10.23.1 (LTS)","evidence":"Node.js v10.23.1 (LTS)"},{"value":"Node.js v12.20.1 (LTS)","evidence":"Node.js v12.20.1 (LTS)"},{"value":"Node.js v14.15.4 (LTS)","evidence":"Node.js v14.15.4 (LTS)"},{"value":"Node.js v15.5.1 (Current)","evidence":"Node.js v15.5.1 (Current)"}],"affected_versions":[{"value":"All versions of the 15.x, 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines"}]},{"name":{"value":"OpenSSL","evidence":"OpenSSL - EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"All versions of the 14.x, 12.x and 10.x release lines","evidence":"Impacts: All versions of the 14.x, 12.x and 10.x release lines"},{"value":"Versions of the 15.x line before 15.5.0","evidence":"Versions of the 15.x line before 15.5.0 which included an update to the latest OpenSSL."}]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-8265","evidence":"use-after-free in TLSWrap (High) (CVE-2020-8265)"},{"value":"CVE-2020-8287","evidence":"HTTP Request Smuggling in nodejs (Low) (CVE-2020-8287)"},{"value":"CVE-2020-1971","evidence":"OpenSSL - EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f22ba73e-66ab-40c2-8e6a-927a472e85be","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/january-2021-security-releases","advisory_id":"f22ba73e-66ab-40c2-8e6a-927a472e85be","event_types":["patch"],"published_at":"2026-10-25T11:17:46.926244+00:00","technologies":["node-js","nodejs","openssl"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-01-04T19:30:00+00:00","detail_url":"/events/41324"},"members":[{"id":41324,"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"payload":{"kind":"patch","title":"January 2021 Security Releases","summary":"Node.js security releases address multiple vulnerabilities across supported release lines, including TLS use-after-free, HTTP request smuggling, and an OpenSSL issue. Updates are available for the listed Node.js versions.","evidence":"Security releases available Updates are now available for v10,x, v12.x, v14.x and v15.x Node.js release lines for the following issues.","products":[{"name":{"value":"Node.js","evidence":"Node.js v10.23.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"Node.js v10.23.1 (LTS)","evidence":"Node.js v10.23.1 (LTS)"},{"value":"Node.js v12.20.1 (LTS)","evidence":"Node.js v12.20.1 (LTS)"},{"value":"Node.js v14.15.4 (LTS)","evidence":"Node.js v14.15.4 (LTS)"},{"value":"Node.js v15.5.1 (Current)","evidence":"Node.js v15.5.1 (Current)"}],"affected_versions":[{"value":"All versions of the 15.x, 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines"}]},{"name":{"value":"OpenSSL","evidence":"OpenSSL - EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"All versions of the 14.x, 12.x and 10.x release lines","evidence":"Impacts: All versions of the 14.x, 12.x and 10.x release lines"},{"value":"Versions of the 15.x line before 15.5.0","evidence":"Versions of the 15.x line before 15.5.0 which included an update to the latest OpenSSL."}]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-8265","evidence":"use-after-free in TLSWrap (High) (CVE-2020-8265)"},{"value":"CVE-2020-8287","evidence":"HTTP Request Smuggling in nodejs (Low) (CVE-2020-8287)"},{"value":"CVE-2020-1971","evidence":"OpenSSL - EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f22ba73e-66ab-40c2-8e6a-927a472e85be","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/january-2021-security-releases","advisory_id":"f22ba73e-66ab-40c2-8e6a-927a472e85be","event_types":["patch"],"published_at":"2026-10-25T11:17:46.926244+00:00","technologies":["node-js","nodejs","openssl"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-01-04T19:30:00+00:00","detail_url":"/events/41324"}]}}],"next_after":42121,"next_before":41711}