{"schema_version":"2","view":"grouped","data":[{"id":72547,"cve_ids":[],"payload":{"kind":"patch","title":"io.js Releases 1.3.0","summary":"io.js 1.3.0 changes the default TLS and HTTPS cipher suite to provide Perfect Forward Secrecy with modern browsers and excludes insecure RC4 ciphers.","evidence":"The default cipher suite used by tls and https has been changed to one that achieves Perfect Forward Secrecy with all modern browsers. Additionally, insecure RC4 ciphers have been excluded.","products":[{"name":{"value":"io.js","evidence":"io.js Releases 1.3.0"},"prerequisites":[],"fixed_versions":[{"value":"1.3.0","evidence":"io.js Releases 1.3.0"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-02-20","advisory_id":"e5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","event_types":["patch"],"published_at":"2026-10-26T00:31:13.20713+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-02-20T12:00:00+00:00","detail_url":"/advisories/advisory%3Ae5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","group":{"id":"advisory:e5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","revision":1,"primary_event_id":73221,"change":"published","superseded_by":[],"changed":{"id":73221,"cve_ids":[],"payload":{"kind":"patch","title":"io.js Releases 1.3.0","summary":"io.js 1.3.0 changes the default TLS and HTTPS cipher suite to provide Perfect Forward Secrecy with modern browsers and excludes insecure RC4 ciphers.","evidence":"The default cipher suite used by tls and https has been changed to one that achieves Perfect Forward Secrecy with all modern browsers. Additionally, insecure RC4 ciphers have been excluded.","products":[{"name":{"value":"io.js","evidence":"io.js Releases 1.3.0"},"prerequisites":[],"fixed_versions":[{"value":"1.3.0","evidence":"io.js Releases 1.3.0"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-02-20","advisory_id":"e5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","event_types":["patch"],"published_at":"2026-10-26T00:31:13.20713+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-02-20T12:00:00+00:00","detail_url":"/events/73221"},"members":[{"id":73221,"cve_ids":[],"payload":{"kind":"patch","title":"io.js Releases 1.3.0","summary":"io.js 1.3.0 changes the default TLS and HTTPS cipher suite to provide Perfect Forward Secrecy with modern browsers and excludes insecure RC4 ciphers.","evidence":"The default cipher suite used by tls and https has been changed to one that achieves Perfect Forward Secrecy with all modern browsers. Additionally, insecure RC4 ciphers have been excluded.","products":[{"name":{"value":"io.js","evidence":"io.js Releases 1.3.0"},"prerequisites":[],"fixed_versions":[{"value":"1.3.0","evidence":"io.js Releases 1.3.0"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-02-20","advisory_id":"e5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","event_types":["patch"],"published_at":"2026-10-26T00:31:13.20713+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-02-20T12:00:00+00:00","detail_url":"/events/73221"}]}},{"id":72537,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.4.1 Release","summary":"io.js 1.4.1 updates V8 to 4.1.0.21, including an embargoed fix, and updates libuv to 1.4.2. The announcement does not identify the security issue or provide severity details.","evidence":"io.js 1.4.1 Release Note: version 1.4.0 was tagged and built but not released.","products":[{"name":{"value":"io.js","evidence":"io.js 1.4.1 Release"},"prerequisites":[],"fixed_versions":[{"value":"1.4.1","evidence":"io.js 1.4.1 Release"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f8698240-dcc9-4476-8681-245a38268674","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-02-27","advisory_id":"f8698240-dcc9-4476-8681-245a38268674","event_types":["patch"],"published_at":"2026-10-26T00:29:23.596473+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-02-27T12:00:00+00:00","detail_url":"/advisories/advisory%3Af8698240-dcc9-4476-8681-245a38268674","group":{"id":"advisory:f8698240-dcc9-4476-8681-245a38268674","revision":1,"primary_event_id":73200,"change":"published","superseded_by":[],"changed":{"id":73200,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.4.1 Release","summary":"io.js 1.4.1 updates V8 to 4.1.0.21, including an embargoed fix, and updates libuv to 1.4.2. The announcement does not identify the security issue or provide severity details.","evidence":"io.js 1.4.1 Release Note: version 1.4.0 was tagged and built but not released.","products":[{"name":{"value":"io.js","evidence":"io.js 1.4.1 Release"},"prerequisites":[],"fixed_versions":[{"value":"1.4.1","evidence":"io.js 1.4.1 Release"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f8698240-dcc9-4476-8681-245a38268674","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-02-27","advisory_id":"f8698240-dcc9-4476-8681-245a38268674","event_types":["patch"],"published_at":"2026-10-26T00:29:23.596473+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-02-27T12:00:00+00:00","detail_url":"/events/73200"},"members":[{"id":73200,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.4.1 Release","summary":"io.js 1.4.1 updates V8 to 4.1.0.21, including an embargoed fix, and updates libuv to 1.4.2. The announcement does not identify the security issue or provide severity details.","evidence":"io.js 1.4.1 Release Note: version 1.4.0 was tagged and built but not released.","products":[{"name":{"value":"io.js","evidence":"io.js 1.4.1 Release"},"prerequisites":[],"fixed_versions":[{"value":"1.4.1","evidence":"io.js 1.4.1 Release"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f8698240-dcc9-4476-8681-245a38268674","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-02-27","advisory_id":"f8698240-dcc9-4476-8681-245a38268674","event_types":["patch"],"published_at":"2026-10-26T00:29:23.596473+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-02-27T12:00:00+00:00","detail_url":"/events/73200"}]}},{"id":72507,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.5.1 Release","summary":"io.js 1.5.1 reports resolving a TLS memory leak, though testing indicated some leak problems may remain.","evidence":"The reported TLS memory leak has been resolved via various commits in this release.","products":[{"name":{"value":"io.js","evidence":"io.js v1.5.1"},"prerequisites":[],"fixed_versions":[{"value":"1.5.1","evidence":"io.js v1.5.1"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d5245327-9bb0-412a-b275-292b2f648194","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-03-13","advisory_id":"d5245327-9bb0-412a-b275-292b2f648194","event_types":["patch"],"published_at":"2026-10-26T00:25:51.253002+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-03-13T12:00:00+00:00","detail_url":"/advisories/advisory%3Ad5245327-9bb0-412a-b275-292b2f648194","group":{"id":"advisory:d5245327-9bb0-412a-b275-292b2f648194","revision":1,"primary_event_id":73160,"change":"published","superseded_by":[],"changed":{"id":73160,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.5.1 Release","summary":"io.js 1.5.1 reports resolving a TLS memory leak, though testing indicated some leak problems may remain.","evidence":"The reported TLS memory leak has been resolved via various commits in this release.","products":[{"name":{"value":"io.js","evidence":"io.js v1.5.1"},"prerequisites":[],"fixed_versions":[{"value":"1.5.1","evidence":"io.js v1.5.1"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d5245327-9bb0-412a-b275-292b2f648194","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-03-13","advisory_id":"d5245327-9bb0-412a-b275-292b2f648194","event_types":["patch"],"published_at":"2026-10-26T00:25:51.253002+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-03-13T12:00:00+00:00","detail_url":"/events/73160"},"members":[{"id":73160,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.5.1 Release","summary":"io.js 1.5.1 reports resolving a TLS memory leak, though testing indicated some leak problems may remain.","evidence":"The reported TLS memory leak has been resolved via various commits in this release.","products":[{"name":{"value":"io.js","evidence":"io.js v1.5.1"},"prerequisites":[],"fixed_versions":[{"value":"1.5.1","evidence":"io.js v1.5.1"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d5245327-9bb0-412a-b275-292b2f648194","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-03-13","advisory_id":"d5245327-9bb0-412a-b275-292b2f648194","event_types":["patch"],"published_at":"2026-10-26T00:25:51.253002+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-03-13T12:00:00+00:00","detail_url":"/events/73160"}]}},{"id":72129,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.6.4 release","summary":"io.js 1.6.4 upgrades npm to 2.7.5, which includes two important security fixes.","evidence":"This week we had one io.js release v1.6.4","products":[{"name":{"value":"io.js","evidence":"io.js 1.6.4 release"},"prerequisites":[],"fixed_versions":[{"value":"v1.6.4","evidence":"This week we had one io.js release v1.6.4"}],"affected_versions":[]},{"name":{"value":"npm","evidence":"npm: upgrade npm to 2.7.5."},"prerequisites":[],"fixed_versions":[{"value":"2.7.5","evidence":"npm: upgrade npm to 2.7.5."}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1eaf683a-cd6c-485c-a5e8-d338763c1329","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-04-10","advisory_id":"1eaf683a-cd6c-485c-a5e8-d338763c1329","event_types":["patch"],"published_at":"2026-10-26T00:17:24.352826+00:00","technologies":["io-js","nodejs","npm"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-04-10T12:00:00+00:00","detail_url":"/advisories/advisory%3A1eaf683a-cd6c-485c-a5e8-d338763c1329","group":{"id":"advisory:1eaf683a-cd6c-485c-a5e8-d338763c1329","revision":1,"primary_event_id":72760,"change":"published","superseded_by":[],"changed":{"id":72760,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.6.4 release","summary":"io.js 1.6.4 upgrades npm to 2.7.5, which includes two important security fixes.","evidence":"This week we had one io.js release v1.6.4","products":[{"name":{"value":"io.js","evidence":"io.js 1.6.4 release"},"prerequisites":[],"fixed_versions":[{"value":"v1.6.4","evidence":"This week we had one io.js release v1.6.4"}],"affected_versions":[]},{"name":{"value":"npm","evidence":"npm: upgrade npm to 2.7.5."},"prerequisites":[],"fixed_versions":[{"value":"2.7.5","evidence":"npm: upgrade npm to 2.7.5."}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1eaf683a-cd6c-485c-a5e8-d338763c1329","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-04-10","advisory_id":"1eaf683a-cd6c-485c-a5e8-d338763c1329","event_types":["patch"],"published_at":"2026-10-26T00:17:24.352826+00:00","technologies":["io-js","nodejs","npm"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-04-10T12:00:00+00:00","detail_url":"/events/72760"},"members":[{"id":72760,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.6.4 release","summary":"io.js 1.6.4 upgrades npm to 2.7.5, which includes two important security fixes.","evidence":"This week we had one io.js release v1.6.4","products":[{"name":{"value":"io.js","evidence":"io.js 1.6.4 release"},"prerequisites":[],"fixed_versions":[{"value":"v1.6.4","evidence":"This week we had one io.js release v1.6.4"}],"affected_versions":[]},{"name":{"value":"npm","evidence":"npm: upgrade npm to 2.7.5."},"prerequisites":[],"fixed_versions":[{"value":"2.7.5","evidence":"npm: upgrade npm to 2.7.5."}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1eaf683a-cd6c-485c-a5e8-d338763c1329","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-04-10","advisory_id":"1eaf683a-cd6c-485c-a5e8-d338763c1329","event_types":["patch"],"published_at":"2026-10-26T00:17:24.352826+00:00","technologies":["io-js","nodejs","npm"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-04-10T12:00:00+00:00","detail_url":"/events/72760"}]}},{"id":71952,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 2.1.0 fixes the Logjam vulnerability","summary":"io.js 2.1.0 requires Diffie-Hellman parameters to be at least 1024 bits and is reported to fix the Logjam vulnerability.","evidence":"Logjam attack vulnerability detected on Diffie-Hellman Key exchange. io.js fixed the vulnerability on v2.1.0.","products":[{"name":{"value":"io.js","evidence":"io.js fixed the vulnerability on v2.1.0."},"prerequisites":[],"fixed_versions":[{"value":"v2.1.0","evidence":"io.js fixed the vulnerability on v2.1.0."}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:82578073-bebc-49f6-8f42-47e9a1d97f19","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-05-22","advisory_id":"82578073-bebc-49f6-8f42-47e9a1d97f19","event_types":["patch"],"published_at":"2026-10-25T23:59:22.620592+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-05-22T12:00:00+00:00","detail_url":"/advisories/advisory%3A82578073-bebc-49f6-8f42-47e9a1d97f19","group":{"id":"advisory:82578073-bebc-49f6-8f42-47e9a1d97f19","revision":1,"primary_event_id":72508,"change":"published","superseded_by":[],"changed":{"id":72508,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 2.1.0 fixes the Logjam vulnerability","summary":"io.js 2.1.0 requires Diffie-Hellman parameters to be at least 1024 bits and is reported to fix the Logjam vulnerability.","evidence":"Logjam attack vulnerability detected on Diffie-Hellman Key exchange. io.js fixed the vulnerability on v2.1.0.","products":[{"name":{"value":"io.js","evidence":"io.js fixed the vulnerability on v2.1.0."},"prerequisites":[],"fixed_versions":[{"value":"v2.1.0","evidence":"io.js fixed the vulnerability on v2.1.0."}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:82578073-bebc-49f6-8f42-47e9a1d97f19","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-05-22","advisory_id":"82578073-bebc-49f6-8f42-47e9a1d97f19","event_types":["patch"],"published_at":"2026-10-25T23:59:22.620592+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-05-22T12:00:00+00:00","detail_url":"/events/72508"},"members":[{"id":72508,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 2.1.0 fixes the Logjam vulnerability","summary":"io.js 2.1.0 requires Diffie-Hellman parameters to be at least 1024 bits and is reported to fix the Logjam vulnerability.","evidence":"Logjam attack vulnerability detected on Diffie-Hellman Key exchange. io.js fixed the vulnerability on v2.1.0.","products":[{"name":{"value":"io.js","evidence":"io.js fixed the vulnerability on v2.1.0."},"prerequisites":[],"fixed_versions":[{"value":"v2.1.0","evidence":"io.js fixed the vulnerability on v2.1.0."}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:82578073-bebc-49f6-8f42-47e9a1d97f19","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-05-22","advisory_id":"82578073-bebc-49f6-8f42-47e9a1d97f19","event_types":["patch"],"published_at":"2026-10-25T23:59:22.620592+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-05-22T12:00:00+00:00","detail_url":"/events/72508"}]}},{"id":71843,"cve_ids":["CVE-2015-1788"],"payload":{"kind":"patch","title":"io.js security patches 1.8.3 and 2.3.3","summary":"io.js released versions 1.8.3 and 2.3.3 to fix an out-of-band write in the utf8 decoder that could cause denial of service. The announcement also describes an OpenSSL upgrade in 1.8.3.","evidence":"v1.8.3 and v2.3.3, complete changelog from previous releases can be found on GitHub","products":[{"name":{"value":"io.js","evidence":"all versions of io.js"},"prerequisites":[],"fixed_versions":[{"value":"1.8.3","evidence":"please update them to io.js versions 1.8.3 and 2.3.3"}],"affected_versions":[{"value":"v1.8.2 or below","evidence":"If you're running v1.8.2 or below, or v2.3.2 or below"}]},{"name":{"value":"io.js","evidence":"all versions of io.js"},"prerequisites":[],"fixed_versions":[{"value":"2.3.3","evidence":"please update them to io.js versions 1.8.3 and 2.3.3"}],"affected_versions":[{"value":"v2.3.2 or below","evidence":"If you're running v1.8.2 or below, or v2.3.2 or below"}]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2015-1788","evidence":"fixes malformed ECParameters causing infinite loop (CVE-2015-1788)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1d712dd0-fc71-44aa-969f-1e00652a9eba","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-07-03","advisory_id":"1d712dd0-fc71-44aa-969f-1e00652a9eba","event_types":["patch"],"published_at":"2026-10-25T23:43:12.819232+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-07-03T12:00:00+00:00","detail_url":"/advisories/advisory%3A1d712dd0-fc71-44aa-969f-1e00652a9eba","group":{"id":"advisory:1d712dd0-fc71-44aa-969f-1e00652a9eba","revision":1,"primary_event_id":72328,"change":"published","superseded_by":[],"changed":{"id":72328,"cve_ids":["CVE-2015-1788"],"payload":{"kind":"patch","title":"io.js security patches 1.8.3 and 2.3.3","summary":"io.js released versions 1.8.3 and 2.3.3 to fix an out-of-band write in the utf8 decoder that could cause denial of service. The announcement also describes an OpenSSL upgrade in 1.8.3.","evidence":"v1.8.3 and v2.3.3, complete changelog from previous releases can be found on GitHub","products":[{"name":{"value":"io.js","evidence":"all versions of io.js"},"prerequisites":[],"fixed_versions":[{"value":"1.8.3","evidence":"please update them to io.js versions 1.8.3 and 2.3.3"}],"affected_versions":[{"value":"v1.8.2 or below","evidence":"If you're running v1.8.2 or below, or v2.3.2 or below"}]},{"name":{"value":"io.js","evidence":"all versions of io.js"},"prerequisites":[],"fixed_versions":[{"value":"2.3.3","evidence":"please update them to io.js versions 1.8.3 and 2.3.3"}],"affected_versions":[{"value":"v2.3.2 or below","evidence":"If you're running v1.8.2 or below, or v2.3.2 or below"}]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2015-1788","evidence":"fixes malformed ECParameters causing infinite loop (CVE-2015-1788)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1d712dd0-fc71-44aa-969f-1e00652a9eba","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-07-03","advisory_id":"1d712dd0-fc71-44aa-969f-1e00652a9eba","event_types":["patch"],"published_at":"2026-10-25T23:43:12.819232+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-07-03T12:00:00+00:00","detail_url":"/events/72328"},"members":[{"id":72328,"cve_ids":["CVE-2015-1788"],"payload":{"kind":"patch","title":"io.js security patches 1.8.3 and 2.3.3","summary":"io.js released versions 1.8.3 and 2.3.3 to fix an out-of-band write in the utf8 decoder that could cause denial of service. The announcement also describes an OpenSSL upgrade in 1.8.3.","evidence":"v1.8.3 and v2.3.3, complete changelog from previous releases can be found on GitHub","products":[{"name":{"value":"io.js","evidence":"all versions of io.js"},"prerequisites":[],"fixed_versions":[{"value":"1.8.3","evidence":"please update them to io.js versions 1.8.3 and 2.3.3"}],"affected_versions":[{"value":"v1.8.2 or below","evidence":"If you're running v1.8.2 or below, or v2.3.2 or below"}]},{"name":{"value":"io.js","evidence":"all versions of io.js"},"prerequisites":[],"fixed_versions":[{"value":"2.3.3","evidence":"please update them to io.js versions 1.8.3 and 2.3.3"}],"affected_versions":[{"value":"v2.3.2 or below","evidence":"If you're running v1.8.2 or below, or v2.3.2 or below"}]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2015-1788","evidence":"fixes malformed ECParameters causing infinite loop (CVE-2015-1788)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1d712dd0-fc71-44aa-969f-1e00652a9eba","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-07-03","advisory_id":"1d712dd0-fc71-44aa-969f-1e00652a9eba","event_types":["patch"],"published_at":"2026-10-25T23:43:12.819232+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-07-03T12:00:00+00:00","detail_url":"/events/72328"}]}},{"id":71366,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js v4.1.0 and io.js v3.3.1 releases","summary":"io.js v3.3.1 updates npm to version 2.14.3, which the announcement describes as including a security update. The announcement does not identify a specific vulnerability or affected versions.","evidence":"npm: Upgrade to version 2.14.3 from 2.13.3, includes a security update","products":[{"name":{"value":"io.js","evidence":"io.js v3.3.1 Notable changes"},"prerequisites":[],"fixed_versions":[{"value":"io.js v3.3.1","evidence":"io.js v3.3.1 Notable changes"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4351b876-8fff-483f-9e5f-53abc676c6bb","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-09-11","advisory_id":"4351b876-8fff-483f-9e5f-53abc676c6bb","event_types":["patch"],"published_at":"2026-10-25T23:05:22.235044+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-09-11T12:00:00+00:00","detail_url":"/advisories/advisory%3A4351b876-8fff-483f-9e5f-53abc676c6bb","group":{"id":"advisory:4351b876-8fff-483f-9e5f-53abc676c6bb","revision":1,"primary_event_id":71757,"change":"published","superseded_by":[],"changed":{"id":71757,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js v4.1.0 and io.js v3.3.1 releases","summary":"io.js v3.3.1 updates npm to version 2.14.3, which the announcement describes as including a security update. The announcement does not identify a specific vulnerability or affected versions.","evidence":"npm: Upgrade to version 2.14.3 from 2.13.3, includes a security update","products":[{"name":{"value":"io.js","evidence":"io.js v3.3.1 Notable changes"},"prerequisites":[],"fixed_versions":[{"value":"io.js v3.3.1","evidence":"io.js v3.3.1 Notable changes"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4351b876-8fff-483f-9e5f-53abc676c6bb","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-09-11","advisory_id":"4351b876-8fff-483f-9e5f-53abc676c6bb","event_types":["patch"],"published_at":"2026-10-25T23:05:22.235044+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-09-11T12:00:00+00:00","detail_url":"/events/71757"},"members":[{"id":71757,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js v4.1.0 and io.js v3.3.1 releases","summary":"io.js v3.3.1 updates npm to version 2.14.3, which the announcement describes as including a security update. The announcement does not identify a specific vulnerability or affected versions.","evidence":"npm: Upgrade to version 2.14.3 from 2.13.3, includes a security update","products":[{"name":{"value":"io.js","evidence":"io.js v3.3.1 Notable changes"},"prerequisites":[],"fixed_versions":[{"value":"io.js v3.3.1","evidence":"io.js v3.3.1 Notable changes"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4351b876-8fff-483f-9e5f-53abc676c6bb","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-09-11","advisory_id":"4351b876-8fff-483f-9e5f-53abc676c6bb","event_types":["patch"],"published_at":"2026-10-25T23:05:22.235044+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-09-11T12:00:00+00:00","detail_url":"/events/71757"}]}}],"next_after":72547,"next_before":71366}