{"schema_version":"1","data":[{"id":44049,"advisory_id":"806af4df-e311-4174-946f-e5447cd87801","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v12.18.4","source_published_at":"2020-09-15T21:06:31+00:00","published_at":"2026-10-25T12:10:21.989923+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2020-8201","CVE-2020-8252"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 12.18.4 (LTS)","summary":"Node.js 12.18.4 is a security release fixing two vulnerabilities.","evidence":"This is a security release. Vulnerabilities fixed:","products":[{"name":{"value":"Node.js","evidence":"Node.js 12.18.4 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"12.18.4","evidence":"Node.js 12.18.4 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-8201","evidence":"CVE-2020-8201: HTTP Request Smuggling due to CR-to-Hyphen conversion (High)."},{"value":"CVE-2020-8252","evidence":"CVE-2020-8252: fs.realpath.native on may cause buffer overflow (Medium)."}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":44049,"next_before":44049}