{"schema_version":"1","data":[{"id":38959,"advisory_id":"24f30f8d-0424-491e-9c57-78bd74b9b83d","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v16.4.1","source_published_at":"2021-07-01T15:40:16+00:00","published_at":"2026-10-25T10:38:23.064965+00:00","extraction_method":"llm","technologies":["node-js","nodejs","windows-installer"],"cve_ids":["CVE-2021-22918","CVE-2021-22921"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 16.4.1 (Current)","summary":"Node.js 16.4.1 fixes two security vulnerabilities: an out-of-bounds read in libuv and Windows installer permission issues that could enable local privilege escalation.","evidence":"Vulnerabilities fixed: CVE-2021-22918: libuv upgrade - Out of bounds read (Medium)","products":[{"name":{"value":"Node.js","evidence":"Node.js 16.4.1 (Current)"},"prerequisites":[],"fixed_versions":[{"value":"16.4.1","evidence":"Node.js 16.4.1 (Current)"}],"affected_versions":[]},{"name":{"value":"Windows installer","evidence":"CVE-2021-22921: Windows installer - Node Installer Local Privilege Escalation (Medium)"},"prerequisites":[{"value":"under certain conditions on Windows platforms","evidence":"Node.js is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms."}],"fixed_versions":[{"value":"16.4.1","evidence":"Windows 64-bit Installer: https://nodejs.org/dist/v16.4.1/node-v16.4.1-x64.msi"}],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-22918","evidence":"CVE-2021-22918: libuv upgrade - Out of bounds read (Medium)"},{"value":"CVE-2021-22921","evidence":"CVE-2021-22921: Windows installer - Node Installer Local Privilege Escalation (Medium)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":38959,"next_before":38959}