{"schema_version":"1","data":[{"id":40842,"advisory_id":"72b20c10-0bf0-4981-a937-a693644b7343","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v10.24.0","source_published_at":"2021-02-23T12:58:46+00:00","published_at":"2026-10-25T11:09:31.409154+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 10.24.0 (LTS)","summary":"Node.js 10.24.0 fixes vulnerabilities involving HTTP/2 unknownProtocol handling, DNS rebinding in --inspect, and an OpenSSL integer overflow.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 10.24.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"10.24.0","evidence":"Node.js 10.24.0 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":40725,"advisory_id":"295b3292-cb35-4a2b-9146-c0835796130a","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v15.10.0","source_published_at":"2021-02-23T13:01:31+00:00","published_at":"2026-10-25T11:07:44.819435+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 15.10.0 (Current)","summary":"Node.js 15.10.0 fixes vulnerabilities involving HTTP/2 unknownProtocol handling and DNS rebinding in --inspect, and includes an OpenSSL update related to an integer-overflow vulnerability.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 15.10.0 (Current)"},"prerequisites":[],"fixed_versions":[{"value":"15.10.0","evidence":"Node.js 15.10.0 (Current)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":40700,"advisory_id":"87f63e28-9330-4d8d-8ce1-8a075fda515e","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v12.21.0","source_published_at":"2021-02-23T13:01:45+00:00","published_at":"2026-10-25T11:07:24.368546+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 12.21.0 (LTS)","summary":"Node.js 12.21.0 (LTS) includes fixes for vulnerabilities involving HTTP/2 resource exhaustion, DNS rebinding in the inspector, and an OpenSSL integer overflow.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 12.21.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"12.21.0","evidence":"Node.js 12.21.0 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":40563,"advisory_id":"21d775d1-fda5-4175-97fe-109cb7b9cd8e","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v14.16.0","source_published_at":"2021-02-23T13:02:35+00:00","published_at":"2026-10-25T11:05:22.26809+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 14.16.0 (LTS)","summary":"Node.js 14.16.0 (LTS) fixes vulnerabilities involving HTTP/2, DNS rebinding in the inspector, and OpenSSL.","evidence":"Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion","products":[{"name":{"value":"Node.js","evidence":"Node.js 14.16.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"14.16.0","evidence":"Node.js 14.16.0 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"},{"value":"CVE-2021-22884","evidence":"CVE-2021-22884: DNS rebinding in --inspect"},{"value":"CVE-2021-23840","evidence":"CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":40477,"advisory_id":"17c79133-5ecd-40d8-858d-8f9a6b717793","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/february-2021-security-releases","source_published_at":"2021-02-23T13:30:00+00:00","published_at":"2026-10-25T11:03:23.323106+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2021-22883","CVE-2021-22884","CVE-2021-23840"],"event_types":["patch"],"payload":{"kind":"patch","title":"February 2021 Security Releases","summary":"Security updates address denial-of-service, DNS rebinding, and OpenSSL integer-overflow vulnerabilities affecting Node.js release lines 10.x, 12.x, 14.x, and 15.x.","evidence":"Security releases available Updates are now available for v10.x, v12.x, v14.x and v15.x Node.js release lines for the following issues.","products":[{"name":{"value":"Node.js","evidence":"Node.js v10.24.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"Node.js v10.24.0 (LTS)","evidence":"Node.js v10.24.0 (LTS)"},{"value":"Node.js v12.21.0 (LTS)","evidence":"Node.js v12.21.0 (LTS)"},{"value":"Node.js v14.16.0 (LTS)","evidence":"Node.js v14.16.0 (LTS)"},{"value":"Node.js v15.10.0 (Current)","evidence":"Node.js v15.10.0 (Current)"}],"affected_versions":[{"value":"All versions of the 15.x, 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines"}]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22883","evidence":"HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (Critical) (CVE-2021-22883)"},{"value":"CVE-2021-22884","evidence":"DNS rebinding in --inspect (CVE-2021-22884)"},{"value":"CVE-2021-23840","evidence":"OpenSSL - Integer overflow in CipherUpdate (CVE-2021-23840)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":40842,"next_before":40477}