{"schema_version":"1","data":[{"id":41324,"advisory_id":"f22ba73e-66ab-40c2-8e6a-927a472e85be","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/january-2021-security-releases","source_published_at":"2021-01-04T19:30:00+00:00","published_at":"2026-10-25T11:17:46.926244+00:00","extraction_method":"llm","technologies":["node-js","nodejs","openssl"],"cve_ids":["CVE-2020-1971","CVE-2020-8265","CVE-2020-8287"],"event_types":["patch"],"payload":{"kind":"patch","title":"January 2021 Security Releases","summary":"Node.js security releases address multiple vulnerabilities across supported release lines, including TLS use-after-free, HTTP request smuggling, and an OpenSSL issue. Updates are available for the listed Node.js versions.","evidence":"Security releases available Updates are now available for v10,x, v12.x, v14.x and v15.x Node.js release lines for the following issues.","products":[{"name":{"value":"Node.js","evidence":"Node.js v10.23.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"Node.js v10.23.1 (LTS)","evidence":"Node.js v10.23.1 (LTS)"},{"value":"Node.js v12.20.1 (LTS)","evidence":"Node.js v12.20.1 (LTS)"},{"value":"Node.js v14.15.4 (LTS)","evidence":"Node.js v14.15.4 (LTS)"},{"value":"Node.js v15.5.1 (Current)","evidence":"Node.js v15.5.1 (Current)"}],"affected_versions":[{"value":"All versions of the 15.x, 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines"}]},{"name":{"value":"OpenSSL","evidence":"OpenSSL - EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"All versions of the 14.x, 12.x and 10.x release lines","evidence":"Impacts: All versions of the 14.x, 12.x and 10.x release lines"},{"value":"Versions of the 15.x line before 15.5.0","evidence":"Versions of the 15.x line before 15.5.0 which included an update to the latest OpenSSL."}]}],"severity":"unknown","related_cves":[{"value":"CVE-2020-8265","evidence":"use-after-free in TLSWrap (High) (CVE-2020-8265)"},{"value":"CVE-2020-8287","evidence":"HTTP Request Smuggling in nodejs (Low) (CVE-2020-8287)"},{"value":"CVE-2020-1971","evidence":"OpenSSL - EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":41324,"next_before":41324}