{"schema_version":"2","view":"grouped","data":[{"id":41224,"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"payload":{"kind":"patch","title":"Node.js 10.24.0 (LTS)","summary":"Node.js 10.24.0 fixes vulnerabilities involving HTTP/2 unknownProtocol handling, DNS rebinding in --inspect, and an OpenSSL integer overflow.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 10.24.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"10.24.0","evidence":"Node.js 10.24.0 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:72b20c10-0bf0-4981-a937-a693644b7343","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v10.24.0","advisory_id":"72b20c10-0bf0-4981-a937-a693644b7343","event_types":["patch"],"published_at":"2026-10-25T11:09:31.409154+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-02-23T12:58:46+00:00","detail_url":"/advisories/advisory%3A72b20c10-0bf0-4981-a937-a693644b7343","group":{"id":"advisory:72b20c10-0bf0-4981-a937-a693644b7343","revision":1,"primary_event_id":40842,"change":"published","superseded_by":[],"changed":{"id":40842,"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"payload":{"kind":"patch","title":"Node.js 10.24.0 (LTS)","summary":"Node.js 10.24.0 fixes vulnerabilities involving HTTP/2 unknownProtocol handling, DNS rebinding in --inspect, and an OpenSSL integer overflow.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 10.24.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"10.24.0","evidence":"Node.js 10.24.0 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:72b20c10-0bf0-4981-a937-a693644b7343","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v10.24.0","advisory_id":"72b20c10-0bf0-4981-a937-a693644b7343","event_types":["patch"],"published_at":"2026-10-25T11:09:31.409154+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-02-23T12:58:46+00:00","detail_url":"/events/40842"},"members":[{"id":40842,"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"payload":{"kind":"patch","title":"Node.js 10.24.0 (LTS)","summary":"Node.js 10.24.0 fixes vulnerabilities involving HTTP/2 unknownProtocol handling, DNS rebinding in --inspect, and an OpenSSL integer overflow.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 10.24.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"10.24.0","evidence":"Node.js 10.24.0 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:72b20c10-0bf0-4981-a937-a693644b7343","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v10.24.0","advisory_id":"72b20c10-0bf0-4981-a937-a693644b7343","event_types":["patch"],"published_at":"2026-10-25T11:09:31.409154+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-02-23T12:58:46+00:00","detail_url":"/events/40842"}]}},{"id":41106,"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"payload":{"kind":"patch","title":"Node.js 15.10.0 (Current)","summary":"Node.js 15.10.0 fixes vulnerabilities involving HTTP/2 unknownProtocol handling and DNS rebinding in --inspect, and includes an OpenSSL update related to an integer-overflow vulnerability.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 15.10.0 (Current)"},"prerequisites":[],"fixed_versions":[{"value":"15.10.0","evidence":"Node.js 15.10.0 (Current)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:295b3292-cb35-4a2b-9146-c0835796130a","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v15.10.0","advisory_id":"295b3292-cb35-4a2b-9146-c0835796130a","event_types":["patch"],"published_at":"2026-10-25T11:07:44.819435+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-02-23T13:01:31+00:00","detail_url":"/advisories/advisory%3A295b3292-cb35-4a2b-9146-c0835796130a","group":{"id":"advisory:295b3292-cb35-4a2b-9146-c0835796130a","revision":1,"primary_event_id":40725,"change":"published","superseded_by":[],"changed":{"id":40725,"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"payload":{"kind":"patch","title":"Node.js 15.10.0 (Current)","summary":"Node.js 15.10.0 fixes vulnerabilities involving HTTP/2 unknownProtocol handling and DNS rebinding in --inspect, and includes an OpenSSL update related to an integer-overflow vulnerability.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 15.10.0 (Current)"},"prerequisites":[],"fixed_versions":[{"value":"15.10.0","evidence":"Node.js 15.10.0 (Current)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:295b3292-cb35-4a2b-9146-c0835796130a","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v15.10.0","advisory_id":"295b3292-cb35-4a2b-9146-c0835796130a","event_types":["patch"],"published_at":"2026-10-25T11:07:44.819435+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-02-23T13:01:31+00:00","detail_url":"/events/40725"},"members":[{"id":40725,"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"payload":{"kind":"patch","title":"Node.js 15.10.0 (Current)","summary":"Node.js 15.10.0 fixes vulnerabilities involving HTTP/2 unknownProtocol handling and DNS rebinding in --inspect, and includes an OpenSSL update related to an integer-overflow vulnerability.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 15.10.0 (Current)"},"prerequisites":[],"fixed_versions":[{"value":"15.10.0","evidence":"Node.js 15.10.0 (Current)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:295b3292-cb35-4a2b-9146-c0835796130a","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v15.10.0","advisory_id":"295b3292-cb35-4a2b-9146-c0835796130a","event_types":["patch"],"published_at":"2026-10-25T11:07:44.819435+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-02-23T13:01:31+00:00","detail_url":"/events/40725"}]}},{"id":41081,"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"payload":{"kind":"patch","title":"Node.js 12.21.0 (LTS)","summary":"Node.js 12.21.0 (LTS) includes fixes for vulnerabilities involving HTTP/2 resource exhaustion, DNS rebinding in the inspector, and an OpenSSL integer overflow.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 12.21.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"12.21.0","evidence":"Node.js 12.21.0 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:87f63e28-9330-4d8d-8ce1-8a075fda515e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v12.21.0","advisory_id":"87f63e28-9330-4d8d-8ce1-8a075fda515e","event_types":["patch"],"published_at":"2026-10-25T11:07:24.368546+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-02-23T13:01:45+00:00","detail_url":"/advisories/advisory%3A87f63e28-9330-4d8d-8ce1-8a075fda515e","group":{"id":"advisory:87f63e28-9330-4d8d-8ce1-8a075fda515e","revision":1,"primary_event_id":40700,"change":"published","superseded_by":[],"changed":{"id":40700,"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"payload":{"kind":"patch","title":"Node.js 12.21.0 (LTS)","summary":"Node.js 12.21.0 (LTS) includes fixes for vulnerabilities involving HTTP/2 resource exhaustion, DNS rebinding in the inspector, and an OpenSSL integer overflow.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 12.21.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"12.21.0","evidence":"Node.js 12.21.0 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:87f63e28-9330-4d8d-8ce1-8a075fda515e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v12.21.0","advisory_id":"87f63e28-9330-4d8d-8ce1-8a075fda515e","event_types":["patch"],"published_at":"2026-10-25T11:07:24.368546+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-02-23T13:01:45+00:00","detail_url":"/events/40700"},"members":[{"id":40700,"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"payload":{"kind":"patch","title":"Node.js 12.21.0 (LTS)","summary":"Node.js 12.21.0 (LTS) includes fixes for vulnerabilities involving HTTP/2 resource exhaustion, DNS rebinding in the inspector, and an OpenSSL integer overflow.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 12.21.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"12.21.0","evidence":"Node.js 12.21.0 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:87f63e28-9330-4d8d-8ce1-8a075fda515e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v12.21.0","advisory_id":"87f63e28-9330-4d8d-8ce1-8a075fda515e","event_types":["patch"],"published_at":"2026-10-25T11:07:24.368546+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-02-23T13:01:45+00:00","detail_url":"/events/40700"}]}},{"id":40942,"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"payload":{"kind":"patch","title":"Node.js 14.16.0 (LTS)","summary":"Node.js 14.16.0 (LTS) fixes vulnerabilities involving HTTP/2, DNS rebinding in the inspector, and OpenSSL.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 14.16.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"14.16.0","evidence":"Node.js 14.16.0 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:21d775d1-fda5-4175-97fe-109cb7b9cd8e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v14.16.0","advisory_id":"21d775d1-fda5-4175-97fe-109cb7b9cd8e","event_types":["patch"],"published_at":"2026-10-25T11:05:22.26809+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-02-23T13:02:35+00:00","detail_url":"/advisories/advisory%3A21d775d1-fda5-4175-97fe-109cb7b9cd8e","group":{"id":"advisory:21d775d1-fda5-4175-97fe-109cb7b9cd8e","revision":1,"primary_event_id":40563,"change":"published","superseded_by":[],"changed":{"id":40563,"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"payload":{"kind":"patch","title":"Node.js 14.16.0 (LTS)","summary":"Node.js 14.16.0 (LTS) fixes vulnerabilities involving HTTP/2, DNS rebinding in the inspector, and OpenSSL.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 14.16.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"14.16.0","evidence":"Node.js 14.16.0 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:21d775d1-fda5-4175-97fe-109cb7b9cd8e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v14.16.0","advisory_id":"21d775d1-fda5-4175-97fe-109cb7b9cd8e","event_types":["patch"],"published_at":"2026-10-25T11:05:22.26809+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-02-23T13:02:35+00:00","detail_url":"/events/40563"},"members":[{"id":40563,"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"payload":{"kind":"patch","title":"Node.js 14.16.0 (LTS)","summary":"Node.js 14.16.0 (LTS) fixes vulnerabilities involving HTTP/2, DNS rebinding in the inspector, and OpenSSL.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 14.16.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"14.16.0","evidence":"Node.js 14.16.0 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:21d775d1-fda5-4175-97fe-109cb7b9cd8e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v14.16.0","advisory_id":"21d775d1-fda5-4175-97fe-109cb7b9cd8e","event_types":["patch"],"published_at":"2026-10-25T11:05:22.26809+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-02-23T13:02:35+00:00","detail_url":"/events/40563"}]}},{"id":40854,"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"payload":{"kind":"patch","title":"February 2021 Security Releases","summary":"Security updates address denial-of-service, DNS rebinding, and OpenSSL integer-overflow vulnerabilities affecting Node.js release lines 10.x, 12.x, 14.x, and 15.x.","evidence":"Security releases available Updates are now available for v10.x, v12.x, v14.x and v15.x Node.js release lines for the following issues.","products":[{"name":{"value":"Node.js","evidence":"Node.js v10.24.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"Node.js v10.24.0 (LTS)","evidence":"Node.js v10.24.0 (LTS)"},{"value":"Node.js v12.21.0 (LTS)","evidence":"Node.js v12.21.0 (LTS)"},{"value":"Node.js v14.16.0 (LTS)","evidence":"Node.js v14.16.0 (LTS)"},{"value":"Node.js v15.10.0 (Current)","evidence":"Node.js v15.10.0 (Current)"}],"affected_versions":[{"value":"All versions of the 15.x, 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines"}]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (Critical) (CVE-2021-22883)"},{"value":"CVE-2021-22884","evidence":"DNS rebinding in --inspect (CVE-2021-22884)"},{"value":"CVE-2021-23840","evidence":"OpenSSL - Integer overflow in CipherUpdate (CVE-2021-23840)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:17c79133-5ecd-40d8-858d-8f9a6b717793","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/february-2021-security-releases","advisory_id":"17c79133-5ecd-40d8-858d-8f9a6b717793","event_types":["patch"],"published_at":"2026-10-25T11:03:23.323106+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-02-23T13:30:00+00:00","detail_url":"/advisories/advisory%3A17c79133-5ecd-40d8-858d-8f9a6b717793","group":{"id":"advisory:17c79133-5ecd-40d8-858d-8f9a6b717793","revision":1,"primary_event_id":40477,"change":"published","superseded_by":[],"changed":{"id":40477,"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"payload":{"kind":"patch","title":"February 2021 Security Releases","summary":"Security updates address denial-of-service, DNS rebinding, and OpenSSL integer-overflow vulnerabilities affecting Node.js release lines 10.x, 12.x, 14.x, and 15.x.","evidence":"Security releases available Updates are now available for v10.x, v12.x, v14.x and v15.x Node.js release lines for the following issues.","products":[{"name":{"value":"Node.js","evidence":"Node.js v10.24.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"Node.js v10.24.0 (LTS)","evidence":"Node.js v10.24.0 (LTS)"},{"value":"Node.js v12.21.0 (LTS)","evidence":"Node.js v12.21.0 (LTS)"},{"value":"Node.js v14.16.0 (LTS)","evidence":"Node.js v14.16.0 (LTS)"},{"value":"Node.js v15.10.0 (Current)","evidence":"Node.js v15.10.0 (Current)"}],"affected_versions":[{"value":"All versions of the 15.x, 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines"}]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (Critical) (CVE-2021-22883)"},{"value":"CVE-2021-22884","evidence":"DNS rebinding in --inspect (CVE-2021-22884)"},{"value":"CVE-2021-23840","evidence":"OpenSSL - Integer overflow in CipherUpdate (CVE-2021-23840)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:17c79133-5ecd-40d8-858d-8f9a6b717793","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/february-2021-security-releases","advisory_id":"17c79133-5ecd-40d8-858d-8f9a6b717793","event_types":["patch"],"published_at":"2026-10-25T11:03:23.323106+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-02-23T13:30:00+00:00","detail_url":"/events/40477"},"members":[{"id":40477,"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"payload":{"kind":"patch","title":"February 2021 Security Releases","summary":"Security updates address denial-of-service, DNS rebinding, and OpenSSL integer-overflow vulnerabilities affecting Node.js release lines 10.x, 12.x, 14.x, and 15.x.","evidence":"Security releases available Updates are now available for v10.x, v12.x, v14.x and v15.x Node.js release lines for the following issues.","products":[{"name":{"value":"Node.js","evidence":"Node.js v10.24.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"Node.js v10.24.0 (LTS)","evidence":"Node.js v10.24.0 (LTS)"},{"value":"Node.js v12.21.0 (LTS)","evidence":"Node.js v12.21.0 (LTS)"},{"value":"Node.js v14.16.0 (LTS)","evidence":"Node.js v14.16.0 (LTS)"},{"value":"Node.js v15.10.0 (Current)","evidence":"Node.js v15.10.0 (Current)"}],"affected_versions":[{"value":"All versions of the 15.x, 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines"}]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (Critical) (CVE-2021-22883)"},{"value":"CVE-2021-22884","evidence":"DNS rebinding in --inspect (CVE-2021-22884)"},{"value":"CVE-2021-23840","evidence":"OpenSSL - Integer overflow in CipherUpdate (CVE-2021-23840)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:17c79133-5ecd-40d8-858d-8f9a6b717793","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/february-2021-security-releases","advisory_id":"17c79133-5ecd-40d8-858d-8f9a6b717793","event_types":["patch"],"published_at":"2026-10-25T11:03:23.323106+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2021-02-23T13:30:00+00:00","detail_url":"/events/40477"}]}}],"next_after":41224,"next_before":40854}