{"schema_version":"1","data":[{"id":39735,"advisory_id":"f1b56b83-428e-48cd-81a5-4f8f788835e1","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/april-2021-security-releases","source_published_at":"2021-04-06T20:51:00+00:00","published_at":"2026-10-25T10:51:27.041456+00:00","extraction_method":"llm","technologies":["node-js","nodejs","npm"],"cve_ids":["CVE-2020-7774","CVE-2021-3449","CVE-2021-3450"],"event_types":["patch"],"payload":{"kind":"patch","title":"April 2021 Security Releases","summary":"Node.js security updates address OpenSSL certificate-check and signature-processing vulnerabilities, plus an npm y18n prototype-pollution issue. Updates are available for the listed Node.js release lines.","evidence":"Updates are now available for v10,x, v12.x, v14.x and v15.x Node.js release lines for the following issues.","products":[{"name":{"value":"Node.js","evidence":"Node.js v10.24.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"v10.24.1","evidence":"Node.js v10.24.1 (LTS)"},{"value":"v12.22.1","evidence":"Node.js v12.22.1 (LTS)"},{"value":"v14.16.1","evidence":"Node.js v14.16.1 (LTS)"},{"value":"v15.14.0","evidence":"Node.js v15.14.0 (Current)"}],"affected_versions":[{"value":"All versions of the 15.x, 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines"}]},{"name":{"value":"npm","evidence":"npm upgrade - Update y18n to fix Prototype-Pollution (High) (CVE-2020-7774)"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"All versions of the 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 14.x, 12.x and 10.x releases lines"}]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-3450","evidence":"CA certificate check bypass with X509_V_FLAG_X509_STRICT (High) (CVE-2021-3450)"},{"value":"CVE-2021-3449","evidence":"NULL pointer deref in signature_algorithms processing (High) (CVE-2021-3449)"},{"value":"CVE-2020-7774","evidence":"Update y18n to fix Prototype-Pollution (High) (CVE-2020-7774)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":39735,"next_before":39735}