{"schema_version":"1","data":[{"id":35029,"advisory_id":"37466c8e-f153-4d85-921d-20613fe89ebf","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v12.22.9","source_published_at":"2022-01-11T00:00:46+00:00","published_at":"2026-10-25T09:32:23.354118+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2021-44531","CVE-2021-44532","CVE-2021-44533","CVE-2022-21824"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 12.22.9 (LTS)","summary":"Node.js 12.22.9 includes fixes for certificate verification and prototype pollution vulnerabilities.","evidence":"Node.js 12.22.9 (LTS)","products":[{"name":{"value":"Node.js","evidence":"Node.js 12.22.9 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"12.22.9","evidence":"Node.js 12.22.9 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-44531","evidence":"Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531)"},{"value":"CVE-2021-44532","evidence":"Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532)"},{"value":"CVE-2021-44533","evidence":"Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533)"},{"value":"CVE-2022-21824","evidence":"Prototype pollution via console.table properties (Low)(CVE-2022-21824)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":34932,"advisory_id":"75c743c6-0f8b-4bfc-89f5-e7a9fbaea46d","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v17.3.1","source_published_at":"2022-01-11T00:02:14+00:00","published_at":"2026-10-25T09:30:50.814097+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2021-44531","CVE-2021-44532","CVE-2021-44533","CVE-2022-21824"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 17.3.1 (Current)","summary":"Node.js 17.3.1 fixes certificate verification and prototype pollution vulnerabilities. The release identifies CVE-2021-44531, CVE-2021-44532, CVE-2021-44533, and CVE-2022-21824.","evidence":"Node.js 17.3.1 (Current)","products":[{"name":{"value":"Node.js","evidence":"Node.js 17.3.1 (Current)"},"prerequisites":[],"fixed_versions":[{"value":"17.3.1","evidence":"Node.js 17.3.1 (Current)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-44531","evidence":"Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531)"},{"value":"CVE-2021-44532","evidence":"Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532)"},{"value":"CVE-2021-44533","evidence":"Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533)"},{"value":"CVE-2022-21824","evidence":"Prototype pollution via console.table properties (Low)(CVE-2022-21824)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":34898,"advisory_id":"98e387a1-2d00-45f2-b980-69cf7454d9a4","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v14.18.3","source_published_at":"2022-01-11T00:02:52+00:00","published_at":"2026-10-25T09:30:23.071456+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2021-44531","CVE-2021-44532","CVE-2021-44533","CVE-2022-21824"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 14.18.3 (LTS)","summary":"Node.js 14.18.3 includes fixes for certificate verification and prototype pollution vulnerabilities.","evidence":"Node.js 14.18.3 (LTS) Notable changes","products":[{"name":{"value":"Node.js","evidence":"Node.js 14.18.3 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"14.18.3","evidence":"Node.js 14.18.3 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-44531","evidence":"Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531)"},{"value":"CVE-2021-44532","evidence":"Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532)"},{"value":"CVE-2021-44533","evidence":"Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533)"},{"value":"CVE-2022-21824","evidence":"Prototype pollution via console.table properties (Low)(CVE-2022-21824)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":34810,"advisory_id":"d4e2f986-a81f-4b36-8714-de3ead72b44a","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v16.13.2","source_published_at":"2022-01-11T00:27:39+00:00","published_at":"2026-10-25T09:28:41.316552+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2021-44531","CVE-2021-44532","CVE-2021-44533","CVE-2022-21824"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 16.13.2 (LTS)","summary":"Node.js 16.13.2 (LTS) includes fixes for certificate verification and prototype pollution vulnerabilities. The release identifies medium and low severity issues.","evidence":"Node.js 16.13.2 (LTS) Notable changes","products":[{"name":{"value":"Node.js","evidence":"Node.js 16.13.2 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"16.13.2","evidence":"Node.js 16.13.2 (LTS)"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-44531","evidence":"Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531)"},{"value":"CVE-2021-44532","evidence":"Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532)"},{"value":"CVE-2021-44533","evidence":"Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533)"},{"value":"CVE-2022-21824","evidence":"Prototype pollution via console.table properties (Low)(CVE-2022-21824)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":34787,"advisory_id":"9e80ea28-ddae-49a9-bf1f-32c5d86b4fcb","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases","source_published_at":"2022-01-11T00:50:00+00:00","published_at":"2026-10-25T09:28:23.728459+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2021-44531","CVE-2021-44532","CVE-2021-44533","CVE-2022-21824"],"event_types":["patch"],"payload":{"kind":"patch","title":"January 10th 2022 Security Releases","summary":"Node.js security updates address three medium-severity issues and one low-severity issue across the 12.x, 14.x, 16.x, and 17.x release lines.","evidence":"Updates are now available for the v17.x, v16.x, v14.x, and v12.x Node.js release lines for the following issues.","products":[{"name":{"value":"Node.js","evidence":"Node.js v12.22.9 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"Node.js v12.22.9 (LTS)","evidence":"Node.js v12.22.9 (LTS)"},{"value":"Node.js v14.18.3 (LTS)","evidence":"Node.js v14.18.3 (LTS)"},{"value":"Node.js v16.13.2 (LTS)","evidence":"Node.js v16.13.2 (LTS)"},{"value":"Node.js v17.3.1 (Current)","evidence":"Node.js v17.3.1 (Current)"}],"affected_versions":[{"value":"All versions of the 17.x, 16.x, 14.x, and 12.x releases lines.","evidence":"Impacts: All versions of the 17.x, 16.x, 14.x, and 12.x releases lines."}]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-44531","evidence":"Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531)"},{"value":"CVE-2021-44532","evidence":"Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532)"},{"value":"CVE-2021-44533","evidence":"Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533)"},{"value":"CVE-2022-21824","evidence":"Prototype pollution via console.table properties (Low)(CVE-2022-21824)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":35029,"next_before":34787}