{"schema_version":"2","view":"grouped","data":[{"id":73227,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.5.5","summary":"Node.js 0.5.5 fixes a buffer overflow in the child_process module.","evidence":"fix buffer overflow in child_process module","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.5.5"},"prerequisites":[],"fixed_versions":[{"value":"0.5.5","evidence":"Version 0.5.5 (unstable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2b0bef96-9bc9-43eb-a3b0-6a51440de12d","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.5.5","advisory_id":"2b0bef96-9bc9-43eb-a3b0-6a51440de12d","event_types":["patch"],"published_at":"2026-10-26T03:45:27.230636+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2011-08-27T06:20:10+00:00","detail_url":"/advisories/advisory%3A2b0bef96-9bc9-43eb-a3b0-6a51440de12d","group":{"id":"advisory:2b0bef96-9bc9-43eb-a3b0-6a51440de12d","revision":1,"primary_event_id":75300,"change":"published","superseded_by":[],"changed":{"id":75300,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.5.5","summary":"Node.js 0.5.5 fixes a buffer overflow in the child_process module.","evidence":"fix buffer overflow in child_process module","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.5.5"},"prerequisites":[],"fixed_versions":[{"value":"0.5.5","evidence":"Version 0.5.5 (unstable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2b0bef96-9bc9-43eb-a3b0-6a51440de12d","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.5.5","advisory_id":"2b0bef96-9bc9-43eb-a3b0-6a51440de12d","event_types":["patch"],"published_at":"2026-10-26T03:45:27.230636+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2011-08-27T06:20:10+00:00","detail_url":"/events/75300"},"members":[{"id":75300,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.5.5","summary":"Node.js 0.5.5 fixes a buffer overflow in the child_process module.","evidence":"fix buffer overflow in child_process module","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.5.5"},"prerequisites":[],"fixed_versions":[{"value":"0.5.5","evidence":"Version 0.5.5 (unstable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2b0bef96-9bc9-43eb-a3b0-6a51440de12d","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.5.5","advisory_id":"2b0bef96-9bc9-43eb-a3b0-6a51440de12d","event_types":["patch"],"published_at":"2026-10-26T03:45:27.230636+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2011-08-27T06:20:10+00:00","detail_url":"/events/75300"}]}},{"id":73222,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.5.7 (unstable)","summary":"Node.js 0.5.7 includes a fix for a security problem in querystring's hasOwnProperty handling.","evidence":"Fix hasOwnProperty security problem in querystring","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.5.7 (unstable)"},"prerequisites":[],"fixed_versions":[{"value":"0.5.7","evidence":"Version 0.5.7 (unstable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b8ca4581-1a99-446a-b7f1-4223042d9f19","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.5.7","advisory_id":"b8ca4581-1a99-446a-b7f1-4223042d9f19","event_types":["patch"],"published_at":"2026-10-26T03:41:42.951234+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2011-09-17T01:57:03+00:00","detail_url":"/advisories/advisory%3Ab8ca4581-1a99-446a-b7f1-4223042d9f19","group":{"id":"advisory:b8ca4581-1a99-446a-b7f1-4223042d9f19","revision":1,"primary_event_id":75259,"change":"published","superseded_by":[],"changed":{"id":75259,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.5.7 (unstable)","summary":"Node.js 0.5.7 includes a fix for a security problem in querystring's hasOwnProperty handling.","evidence":"Fix hasOwnProperty security problem in querystring","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.5.7 (unstable)"},"prerequisites":[],"fixed_versions":[{"value":"0.5.7","evidence":"Version 0.5.7 (unstable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b8ca4581-1a99-446a-b7f1-4223042d9f19","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.5.7","advisory_id":"b8ca4581-1a99-446a-b7f1-4223042d9f19","event_types":["patch"],"published_at":"2026-10-26T03:41:42.951234+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2011-09-17T01:57:03+00:00","detail_url":"/events/75259"},"members":[{"id":75259,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.5.7 (unstable)","summary":"Node.js 0.5.7 includes a fix for a security problem in querystring's hasOwnProperty handling.","evidence":"Fix hasOwnProperty security problem in querystring","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.5.7 (unstable)"},"prerequisites":[],"fixed_versions":[{"value":"0.5.7","evidence":"Version 0.5.7 (unstable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b8ca4581-1a99-446a-b7f1-4223042d9f19","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.5.7","advisory_id":"b8ca4581-1a99-446a-b7f1-4223042d9f19","event_types":["patch"],"published_at":"2026-10-26T03:41:42.951234+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2011-09-17T01:57:03+00:00","detail_url":"/events/75259"}]}},{"id":73219,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.4.12","summary":"Node.js 0.4.12 includes a security-related fix for a hasOwnProperty usage security hole in querystring.","evidence":"#1707 hasOwnProperty usage security hole in querystring (isaacs)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.4.12"},"prerequisites":[],"fixed_versions":[{"value":"0.4.12","evidence":"Version 0.4.12 (stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b89728de-2b3f-42b1-a523-760030e27d74","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.4.12","advisory_id":"b89728de-2b3f-42b1-a523-760030e27d74","event_types":["patch"],"published_at":"2026-10-26T03:40:23.614129+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2011-09-16T00:32:07+00:00","detail_url":"/advisories/advisory%3Ab89728de-2b3f-42b1-a523-760030e27d74","group":{"id":"advisory:b89728de-2b3f-42b1-a523-760030e27d74","revision":1,"primary_event_id":75246,"change":"published","superseded_by":[],"changed":{"id":75246,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.4.12","summary":"Node.js 0.4.12 includes a security-related fix for a hasOwnProperty usage security hole in querystring.","evidence":"#1707 hasOwnProperty usage security hole in querystring (isaacs)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.4.12"},"prerequisites":[],"fixed_versions":[{"value":"0.4.12","evidence":"Version 0.4.12 (stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b89728de-2b3f-42b1-a523-760030e27d74","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.4.12","advisory_id":"b89728de-2b3f-42b1-a523-760030e27d74","event_types":["patch"],"published_at":"2026-10-26T03:40:23.614129+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2011-09-16T00:32:07+00:00","detail_url":"/events/75246"},"members":[{"id":75246,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.4.12","summary":"Node.js 0.4.12 includes a security-related fix for a hasOwnProperty usage security hole in querystring.","evidence":"#1707 hasOwnProperty usage security hole in querystring (isaacs)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.4.12"},"prerequisites":[],"fixed_versions":[{"value":"0.4.12","evidence":"Version 0.4.12 (stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b89728de-2b3f-42b1-a523-760030e27d74","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.4.12","advisory_id":"b89728de-2b3f-42b1-a523-760030e27d74","event_types":["patch"],"published_at":"2026-10-26T03:40:23.614129+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2011-09-16T00:32:07+00:00","detail_url":"/events/75246"}]}},{"id":73147,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.6.7","summary":"Node.js 0.6.7 includes a V8 hash collision fix and other fixes, including a change to crypto DH initialization error handling.","evidence":"V8 hash collision fix (Breaks MIPS)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.6.7"},"prerequisites":[],"fixed_versions":[{"value":"0.6.7","evidence":"Version 0.6.7 (stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f47ba670-c4a1-472a-b025-ea80971104a1","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.6.7","advisory_id":"f47ba670-c4a1-472a-b025-ea80971104a1","event_types":["patch"],"published_at":"2026-10-26T03:24:26.054551+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-01-07T01:54:49+00:00","detail_url":"/advisories/advisory%3Af47ba670-c4a1-472a-b025-ea80971104a1","group":{"id":"advisory:f47ba670-c4a1-472a-b025-ea80971104a1","revision":1,"primary_event_id":75060,"change":"published","superseded_by":[],"changed":{"id":75060,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.6.7","summary":"Node.js 0.6.7 includes a V8 hash collision fix and other fixes, including a change to crypto DH initialization error handling.","evidence":"V8 hash collision fix (Breaks MIPS)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.6.7"},"prerequisites":[],"fixed_versions":[{"value":"0.6.7","evidence":"Version 0.6.7 (stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f47ba670-c4a1-472a-b025-ea80971104a1","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.6.7","advisory_id":"f47ba670-c4a1-472a-b025-ea80971104a1","event_types":["patch"],"published_at":"2026-10-26T03:24:26.054551+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-01-07T01:54:49+00:00","detail_url":"/events/75060"},"members":[{"id":75060,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.6.7","summary":"Node.js 0.6.7 includes a V8 hash collision fix and other fixes, including a change to crypto DH initialization error handling.","evidence":"V8 hash collision fix (Breaks MIPS)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.6.7"},"prerequisites":[],"fixed_versions":[{"value":"0.6.7","evidence":"Version 0.6.7 (stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f47ba670-c4a1-472a-b025-ea80971104a1","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.6.7","advisory_id":"f47ba670-c4a1-472a-b025-ea80971104a1","event_types":["patch"],"published_at":"2026-10-26T03:24:26.054551+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-01-07T01:54:49+00:00","detail_url":"/events/75060"}]}},{"id":73132,"cve_ids":[],"payload":{"kind":"patch","title":"Version 0.6.11 (stable)","summary":"Node.js 0.6.11 includes a TLS change to mitigate session renegotiation attacks.","evidence":"tls: mitigate session renegotiation attacks","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.7.4 (unstable)"},"prerequisites":[],"fixed_versions":[{"value":"0.6.11","evidence":"Version 0.6.11 (stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:05009465-5c94-43dc-aea3-80232c894b52","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.6.11","advisory_id":"05009465-5c94-43dc-aea3-80232c894b52","event_types":["patch"],"published_at":"2026-10-26T03:13:26.356641+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-02-17T21:32:55+00:00","detail_url":"/advisories/advisory%3A05009465-5c94-43dc-aea3-80232c894b52","group":{"id":"advisory:05009465-5c94-43dc-aea3-80232c894b52","revision":1,"primary_event_id":74958,"change":"published","superseded_by":[],"changed":{"id":74958,"cve_ids":[],"payload":{"kind":"patch","title":"Version 0.6.11 (stable)","summary":"Node.js 0.6.11 includes a TLS change to mitigate session renegotiation attacks.","evidence":"tls: mitigate session renegotiation attacks","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.7.4 (unstable)"},"prerequisites":[],"fixed_versions":[{"value":"0.6.11","evidence":"Version 0.6.11 (stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:05009465-5c94-43dc-aea3-80232c894b52","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.6.11","advisory_id":"05009465-5c94-43dc-aea3-80232c894b52","event_types":["patch"],"published_at":"2026-10-26T03:13:26.356641+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-02-17T21:32:55+00:00","detail_url":"/events/74958"},"members":[{"id":74958,"cve_ids":[],"payload":{"kind":"patch","title":"Version 0.6.11 (stable)","summary":"Node.js 0.6.11 includes a TLS change to mitigate session renegotiation attacks.","evidence":"tls: mitigate session renegotiation attacks","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.7.4 (unstable)"},"prerequisites":[],"fixed_versions":[{"value":"0.6.11","evidence":"Version 0.6.11 (stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:05009465-5c94-43dc-aea3-80232c894b52","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.6.11","advisory_id":"05009465-5c94-43dc-aea3-80232c894b52","event_types":["patch"],"published_at":"2026-10-26T03:13:26.356641+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-02-17T21:32:55+00:00","detail_url":"/events/74958"}]}},{"id":73128,"cve_ids":[],"payload":{"kind":"patch","title":"Version 0.7.5 (unstable)","summary":"Node.js 0.7.5 includes a dgram fix for an out-of-bounds memory read.","evidence":"dgram: fix out-of-bound memory read (Ben Noordhuis)","products":[{"name":{"value":"node","evidence":"https://nodejs.org/dist/v0.7.5/node-v0.7.5.tar.gz"},"prerequisites":[],"fixed_versions":[{"value":"0.7.5","evidence":"https://nodejs.org/dist/v0.7.5/node-v0.7.5.tar.gz"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e6d8d768-935f-44d3-8578-0871d04ba4a9","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.7.5","advisory_id":"e6d8d768-935f-44d3-8578-0871d04ba4a9","event_types":["patch"],"published_at":"2026-10-26T03:11:24.525809+00:00","technologies":["node","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-02-23T22:45:21+00:00","detail_url":"/advisories/advisory%3Ae6d8d768-935f-44d3-8578-0871d04ba4a9","group":{"id":"advisory:e6d8d768-935f-44d3-8578-0871d04ba4a9","revision":1,"primary_event_id":74935,"change":"published","superseded_by":[],"changed":{"id":74935,"cve_ids":[],"payload":{"kind":"patch","title":"Version 0.7.5 (unstable)","summary":"Node.js 0.7.5 includes a dgram fix for an out-of-bounds memory read.","evidence":"dgram: fix out-of-bound memory read (Ben Noordhuis)","products":[{"name":{"value":"node","evidence":"https://nodejs.org/dist/v0.7.5/node-v0.7.5.tar.gz"},"prerequisites":[],"fixed_versions":[{"value":"0.7.5","evidence":"https://nodejs.org/dist/v0.7.5/node-v0.7.5.tar.gz"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e6d8d768-935f-44d3-8578-0871d04ba4a9","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.7.5","advisory_id":"e6d8d768-935f-44d3-8578-0871d04ba4a9","event_types":["patch"],"published_at":"2026-10-26T03:11:24.525809+00:00","technologies":["node","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-02-23T22:45:21+00:00","detail_url":"/events/74935"},"members":[{"id":74935,"cve_ids":[],"payload":{"kind":"patch","title":"Version 0.7.5 (unstable)","summary":"Node.js 0.7.5 includes a dgram fix for an out-of-bounds memory read.","evidence":"dgram: fix out-of-bound memory read (Ben Noordhuis)","products":[{"name":{"value":"node","evidence":"https://nodejs.org/dist/v0.7.5/node-v0.7.5.tar.gz"},"prerequisites":[],"fixed_versions":[{"value":"0.7.5","evidence":"https://nodejs.org/dist/v0.7.5/node-v0.7.5.tar.gz"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e6d8d768-935f-44d3-8578-0871d04ba4a9","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.7.5","advisory_id":"e6d8d768-935f-44d3-8578-0871d04ba4a9","event_types":["patch"],"published_at":"2026-10-26T03:11:24.525809+00:00","technologies":["node","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-02-23T22:45:21+00:00","detail_url":"/events/74935"}]}},{"id":73069,"cve_ids":[],"payload":{"kind":"patch","title":"Version 0.8.4 (Stable)","summary":"Node.js 0.8.4 includes a TLS change to verify the server's identity.","evidence":"tls: verify server's identity (Fedor Indutny)","products":[{"name":{"value":"Node.js","evidence":"The Node.js Project"},"prerequisites":[],"fixed_versions":[{"value":"0.8.4","evidence":"Version 0.8.4 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ed587d40-1dd4-4e48-bbe1-4ee397c235d0","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.4","advisory_id":"ed587d40-1dd4-4e48-bbe1-4ee397c235d0","event_types":["patch"],"published_at":"2026-10-26T02:38:24.748511+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-07-25T17:21:16+00:00","detail_url":"/advisories/advisory%3Aed587d40-1dd4-4e48-bbe1-4ee397c235d0","group":{"id":"advisory:ed587d40-1dd4-4e48-bbe1-4ee397c235d0","revision":1,"primary_event_id":74609,"change":"published","superseded_by":[],"changed":{"id":74609,"cve_ids":[],"payload":{"kind":"patch","title":"Version 0.8.4 (Stable)","summary":"Node.js 0.8.4 includes a TLS change to verify the server's identity.","evidence":"tls: verify server's identity (Fedor Indutny)","products":[{"name":{"value":"Node.js","evidence":"The Node.js Project"},"prerequisites":[],"fixed_versions":[{"value":"0.8.4","evidence":"Version 0.8.4 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ed587d40-1dd4-4e48-bbe1-4ee397c235d0","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.4","advisory_id":"ed587d40-1dd4-4e48-bbe1-4ee397c235d0","event_types":["patch"],"published_at":"2026-10-26T02:38:24.748511+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-07-25T17:21:16+00:00","detail_url":"/events/74609"},"members":[{"id":74609,"cve_ids":[],"payload":{"kind":"patch","title":"Version 0.8.4 (Stable)","summary":"Node.js 0.8.4 includes a TLS change to verify the server's identity.","evidence":"tls: verify server's identity (Fedor Indutny)","products":[{"name":{"value":"Node.js","evidence":"The Node.js Project"},"prerequisites":[],"fixed_versions":[{"value":"0.8.4","evidence":"Version 0.8.4 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ed587d40-1dd4-4e48-bbe1-4ee397c235d0","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.4","advisory_id":"ed587d40-1dd4-4e48-bbe1-4ee397c235d0","event_types":["patch"],"published_at":"2026-10-26T02:38:24.748511+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-07-25T17:21:16+00:00","detail_url":"/events/74609"}]}},{"id":73053,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.8.8 (stable)","summary":"Node.js 0.8.8 fixes uninitialized memory access on Windows, memory corruption in fs-poll.c, and a use-after-free in the stat watcher.","evidence":"windows: fix uninitialized memory access in uv_update_time() (Bert Belder)","products":[{"name":{"value":"Node.js","evidence":"The Node.js Project"},"prerequisites":[],"fixed_versions":[{"value":"0.8.8","evidence":"Version 0.8.8 (stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c9dc2463-2a65-4efc-be77-c4b69b599a9d","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.8","advisory_id":"c9dc2463-2a65-4efc-be77-c4b69b599a9d","event_types":["patch"],"published_at":"2026-10-26T02:33:25.616268+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-08-22T19:50:38+00:00","detail_url":"/advisories/advisory%3Ac9dc2463-2a65-4efc-be77-c4b69b599a9d","group":{"id":"advisory:c9dc2463-2a65-4efc-be77-c4b69b599a9d","revision":1,"primary_event_id":74551,"change":"published","superseded_by":[],"changed":{"id":74551,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.8.8 (stable)","summary":"Node.js 0.8.8 fixes uninitialized memory access on Windows, memory corruption in fs-poll.c, and a use-after-free in the stat watcher.","evidence":"windows: fix uninitialized memory access in uv_update_time() (Bert Belder)","products":[{"name":{"value":"Node.js","evidence":"The Node.js Project"},"prerequisites":[],"fixed_versions":[{"value":"0.8.8","evidence":"Version 0.8.8 (stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c9dc2463-2a65-4efc-be77-c4b69b599a9d","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.8","advisory_id":"c9dc2463-2a65-4efc-be77-c4b69b599a9d","event_types":["patch"],"published_at":"2026-10-26T02:33:25.616268+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-08-22T19:50:38+00:00","detail_url":"/events/74551"},"members":[{"id":74551,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.8.8 (stable)","summary":"Node.js 0.8.8 fixes uninitialized memory access on Windows, memory corruption in fs-poll.c, and a use-after-free in the stat watcher.","evidence":"windows: fix uninitialized memory access in uv_update_time() (Bert Belder)","products":[{"name":{"value":"Node.js","evidence":"The Node.js Project"},"prerequisites":[],"fixed_versions":[{"value":"0.8.8","evidence":"Version 0.8.8 (stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c9dc2463-2a65-4efc-be77-c4b69b599a9d","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.8","advisory_id":"c9dc2463-2a65-4efc-be77-c4b69b599a9d","event_types":["patch"],"published_at":"2026-10-26T02:33:25.616268+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-08-22T19:50:38+00:00","detail_url":"/events/74551"}]}},{"id":73048,"cve_ids":[],"payload":{"kind":"patch","title":"Version 0.8.7 (stable)","summary":"Node.js 0.8.7 includes a fix for uninitialized memory access in OpenSSL.","evidence":"crypto: fix uninitialized memory access in openssl","products":[{"name":{"value":"Node.js","evidence":"The Node.js Project"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7","evidence":"Version 0.8.7 (stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:912b4466-51a1-46ea-9adb-9f2ad70e0cbc","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.7","advisory_id":"912b4466-51a1-46ea-9adb-9f2ad70e0cbc","event_types":["patch"],"published_at":"2026-10-26T02:32:28.244102+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-08-15T23:23:16+00:00","detail_url":"/advisories/advisory%3A912b4466-51a1-46ea-9adb-9f2ad70e0cbc","group":{"id":"advisory:912b4466-51a1-46ea-9adb-9f2ad70e0cbc","revision":1,"primary_event_id":74541,"change":"published","superseded_by":[],"changed":{"id":74541,"cve_ids":[],"payload":{"kind":"patch","title":"Version 0.8.7 (stable)","summary":"Node.js 0.8.7 includes a fix for uninitialized memory access in OpenSSL.","evidence":"crypto: fix uninitialized memory access in openssl","products":[{"name":{"value":"Node.js","evidence":"The Node.js Project"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7","evidence":"Version 0.8.7 (stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:912b4466-51a1-46ea-9adb-9f2ad70e0cbc","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.7","advisory_id":"912b4466-51a1-46ea-9adb-9f2ad70e0cbc","event_types":["patch"],"published_at":"2026-10-26T02:32:28.244102+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-08-15T23:23:16+00:00","detail_url":"/events/74541"},"members":[{"id":74541,"cve_ids":[],"payload":{"kind":"patch","title":"Version 0.8.7 (stable)","summary":"Node.js 0.8.7 includes a fix for uninitialized memory access in OpenSSL.","evidence":"crypto: fix uninitialized memory access in openssl","products":[{"name":{"value":"Node.js","evidence":"The Node.js Project"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7","evidence":"Version 0.8.7 (stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:912b4466-51a1-46ea-9adb-9f2ad70e0cbc","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.7","advisory_id":"912b4466-51a1-46ea-9adb-9f2ad70e0cbc","event_types":["patch"],"published_at":"2026-10-26T02:32:28.244102+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-08-15T23:23:16+00:00","detail_url":"/events/74541"}]}},{"id":73041,"cve_ids":[],"payload":{"kind":"patch","title":"Version 0.8.9 (Stable)","summary":"Node.js 0.8.9 includes a fix to prevent npm from creating world-writable files.","evidence":"npm: Don't create world-writable files (isaacs)","products":[{"name":{"value":"Node.js","evidence":"The Node.js Project"},"prerequisites":[],"fixed_versions":[{"value":"0.8.9","evidence":"Version 0.8.9 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c0f95c40-f5cc-4f2d-a8da-63ade8c76039","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.9","advisory_id":"c0f95c40-f5cc-4f2d-a8da-63ade8c76039","event_types":["patch"],"published_at":"2026-10-26T02:29:29.337115+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-09-11T18:50:17+00:00","detail_url":"/advisories/advisory%3Ac0f95c40-f5cc-4f2d-a8da-63ade8c76039","group":{"id":"advisory:c0f95c40-f5cc-4f2d-a8da-63ade8c76039","revision":1,"primary_event_id":74509,"change":"published","superseded_by":[],"changed":{"id":74509,"cve_ids":[],"payload":{"kind":"patch","title":"Version 0.8.9 (Stable)","summary":"Node.js 0.8.9 includes a fix to prevent npm from creating world-writable files.","evidence":"npm: Don't create world-writable files (isaacs)","products":[{"name":{"value":"Node.js","evidence":"The Node.js Project"},"prerequisites":[],"fixed_versions":[{"value":"0.8.9","evidence":"Version 0.8.9 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c0f95c40-f5cc-4f2d-a8da-63ade8c76039","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.9","advisory_id":"c0f95c40-f5cc-4f2d-a8da-63ade8c76039","event_types":["patch"],"published_at":"2026-10-26T02:29:29.337115+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-09-11T18:50:17+00:00","detail_url":"/events/74509"},"members":[{"id":74509,"cve_ids":[],"payload":{"kind":"patch","title":"Version 0.8.9 (Stable)","summary":"Node.js 0.8.9 includes a fix to prevent npm from creating world-writable files.","evidence":"npm: Don't create world-writable files (isaacs)","products":[{"name":{"value":"Node.js","evidence":"The Node.js Project"},"prerequisites":[],"fixed_versions":[{"value":"0.8.9","evidence":"Version 0.8.9 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c0f95c40-f5cc-4f2d-a8da-63ade8c76039","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.9","advisory_id":"c0f95c40-f5cc-4f2d-a8da-63ade8c76039","event_types":["patch"],"published_at":"2026-10-26T02:29:29.337115+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-09-11T18:50:17+00:00","detail_url":"/events/74509"}]}},{"id":73024,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.9.3 (Unstable)","summary":"Node.js 0.9.3 includes a fix for HTTPS renegotiation attack protection.","evidence":"https: fix renegotation attack protection (Ben Noordhuis)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.9.3 (Unstable)"},"prerequisites":[],"fixed_versions":[{"value":"0.9.3","evidence":"Node.js 0.9.3 (Unstable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:58f059a5-7826-47ae-94b9-db8e54a6308f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.9.3","advisory_id":"58f059a5-7826-47ae-94b9-db8e54a6308f","event_types":["patch"],"published_at":"2026-10-26T02:22:29.807822+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-10-24T17:04:08+00:00","detail_url":"/advisories/advisory%3A58f059a5-7826-47ae-94b9-db8e54a6308f","group":{"id":"advisory:58f059a5-7826-47ae-94b9-db8e54a6308f","revision":1,"primary_event_id":74437,"change":"published","superseded_by":[],"changed":{"id":74437,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.9.3 (Unstable)","summary":"Node.js 0.9.3 includes a fix for HTTPS renegotiation attack protection.","evidence":"https: fix renegotation attack protection (Ben Noordhuis)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.9.3 (Unstable)"},"prerequisites":[],"fixed_versions":[{"value":"0.9.3","evidence":"Node.js 0.9.3 (Unstable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:58f059a5-7826-47ae-94b9-db8e54a6308f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.9.3","advisory_id":"58f059a5-7826-47ae-94b9-db8e54a6308f","event_types":["patch"],"published_at":"2026-10-26T02:22:29.807822+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-10-24T17:04:08+00:00","detail_url":"/events/74437"},"members":[{"id":74437,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.9.3 (Unstable)","summary":"Node.js 0.9.3 includes a fix for HTTPS renegotiation attack protection.","evidence":"https: fix renegotation attack protection (Ben Noordhuis)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.9.3 (Unstable)"},"prerequisites":[],"fixed_versions":[{"value":"0.9.3","evidence":"Node.js 0.9.3 (Unstable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:58f059a5-7826-47ae-94b9-db8e54a6308f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.9.3","advisory_id":"58f059a5-7826-47ae-94b9-db8e54a6308f","event_types":["patch"],"published_at":"2026-10-26T02:22:29.807822+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-10-24T17:04:08+00:00","detail_url":"/events/74437"}]}},{"id":73002,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.9.4 (Unstable)","summary":"Node.js 0.9.4 includes an HTTP change to protect against response splitting attacks.","evidence":"http: protect against response splitting attacks (Bert Belder)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.9.4 (Unstable)"},"prerequisites":[],"fixed_versions":[{"value":"0.9.4","evidence":"Version 0.9.4 (Unstable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1a5ff9bc-3cef-4c8b-a85f-0f6faa591552","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.9.4","advisory_id":"1a5ff9bc-3cef-4c8b-a85f-0f6faa591552","event_types":["patch"],"published_at":"2026-10-26T02:16:25.059214+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-12-21T20:30:15+00:00","detail_url":"/advisories/advisory%3A1a5ff9bc-3cef-4c8b-a85f-0f6faa591552","group":{"id":"advisory:1a5ff9bc-3cef-4c8b-a85f-0f6faa591552","revision":1,"primary_event_id":74361,"change":"published","superseded_by":[],"changed":{"id":74361,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.9.4 (Unstable)","summary":"Node.js 0.9.4 includes an HTTP change to protect against response splitting attacks.","evidence":"http: protect against response splitting attacks (Bert Belder)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.9.4 (Unstable)"},"prerequisites":[],"fixed_versions":[{"value":"0.9.4","evidence":"Version 0.9.4 (Unstable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1a5ff9bc-3cef-4c8b-a85f-0f6faa591552","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.9.4","advisory_id":"1a5ff9bc-3cef-4c8b-a85f-0f6faa591552","event_types":["patch"],"published_at":"2026-10-26T02:16:25.059214+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-12-21T20:30:15+00:00","detail_url":"/events/74361"},"members":[{"id":74361,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.9.4 (Unstable)","summary":"Node.js 0.9.4 includes an HTTP change to protect against response splitting attacks.","evidence":"http: protect against response splitting attacks (Bert Belder)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.9.4 (Unstable)"},"prerequisites":[],"fixed_versions":[{"value":"0.9.4","evidence":"Version 0.9.4 (Unstable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1a5ff9bc-3cef-4c8b-a85f-0f6faa591552","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.9.4","advisory_id":"1a5ff9bc-3cef-4c8b-a85f-0f6faa591552","event_types":["patch"],"published_at":"2026-10-26T02:16:25.059214+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2012-12-21T20:30:15+00:00","detail_url":"/events/74361"}]}},{"id":72984,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.8.20 (Stable)","summary":"Node.js 0.8.20 includes an HTTP fix to protect against response splitting attacks.","evidence":"http: protect against response splitting attacks (Bert Belder)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.8.20 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.8.20","evidence":"Node.js 0.8.20 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:16c94b19-826a-4d05-a475-50eba7fc6768","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.20","advisory_id":"16c94b19-826a-4d05-a475-50eba7fc6768","event_types":["patch"],"published_at":"2026-10-26T02:06:21.797341+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-02-15T19:21:42+00:00","detail_url":"/advisories/advisory%3A16c94b19-826a-4d05-a475-50eba7fc6768","group":{"id":"advisory:16c94b19-826a-4d05-a475-50eba7fc6768","revision":1,"primary_event_id":74256,"change":"published","superseded_by":[],"changed":{"id":74256,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.8.20 (Stable)","summary":"Node.js 0.8.20 includes an HTTP fix to protect against response splitting attacks.","evidence":"http: protect against response splitting attacks (Bert Belder)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.8.20 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.8.20","evidence":"Node.js 0.8.20 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:16c94b19-826a-4d05-a475-50eba7fc6768","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.20","advisory_id":"16c94b19-826a-4d05-a475-50eba7fc6768","event_types":["patch"],"published_at":"2026-10-26T02:06:21.797341+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-02-15T19:21:42+00:00","detail_url":"/events/74256"},"members":[{"id":74256,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.8.20 (Stable)","summary":"Node.js 0.8.20 includes an HTTP fix to protect against response splitting attacks.","evidence":"http: protect against response splitting attacks (Bert Belder)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.8.20 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.8.20","evidence":"Node.js 0.8.20 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:16c94b19-826a-4d05-a475-50eba7fc6768","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.20","advisory_id":"16c94b19-826a-4d05-a475-50eba7fc6768","event_types":["patch"],"published_at":"2026-10-26T02:06:21.797341+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-02-15T19:21:42+00:00","detail_url":"/events/74256"}]}},{"id":72970,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.9.11 (Unstable)","summary":"Node.js 0.9.11 includes a fix for uninitialized memory access in OpenSSL.","evidence":"crypto: fix uninitialized memory access in openssl (Ben Noordhuis)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.9.11 (Unstable)"},"prerequisites":[],"fixed_versions":[{"value":"0.9.11","evidence":"Version 0.9.11 (Unstable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a5e39371-fe95-442e-b1eb-2504170f2b00","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.9.11","advisory_id":"a5e39371-fe95-442e-b1eb-2504170f2b00","event_types":["patch"],"published_at":"2026-10-26T02:01:30.897017+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-03-01T19:17:40+00:00","detail_url":"/advisories/advisory%3Aa5e39371-fe95-442e-b1eb-2504170f2b00","group":{"id":"advisory:a5e39371-fe95-442e-b1eb-2504170f2b00","revision":1,"primary_event_id":74206,"change":"published","superseded_by":[],"changed":{"id":74206,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.9.11 (Unstable)","summary":"Node.js 0.9.11 includes a fix for uninitialized memory access in OpenSSL.","evidence":"crypto: fix uninitialized memory access in openssl (Ben Noordhuis)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.9.11 (Unstable)"},"prerequisites":[],"fixed_versions":[{"value":"0.9.11","evidence":"Version 0.9.11 (Unstable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a5e39371-fe95-442e-b1eb-2504170f2b00","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.9.11","advisory_id":"a5e39371-fe95-442e-b1eb-2504170f2b00","event_types":["patch"],"published_at":"2026-10-26T02:01:30.897017+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-03-01T19:17:40+00:00","detail_url":"/events/74206"},"members":[{"id":74206,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.9.11 (Unstable)","summary":"Node.js 0.9.11 includes a fix for uninitialized memory access in OpenSSL.","evidence":"crypto: fix uninitialized memory access in openssl (Ben Noordhuis)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.9.11 (Unstable)"},"prerequisites":[],"fixed_versions":[{"value":"0.9.11","evidence":"Version 0.9.11 (Unstable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a5e39371-fe95-442e-b1eb-2504170f2b00","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.9.11","advisory_id":"a5e39371-fe95-442e-b1eb-2504170f2b00","event_types":["patch"],"published_at":"2026-10-26T02:01:30.897017+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-03-01T19:17:40+00:00","detail_url":"/events/74206"}]}},{"id":72955,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.8.23 (Legacy)","summary":"Node.js 0.8.23 includes a TLS change that re-enables CN-ID checking during certificate verification.","evidence":"tls: Re-enable check of CN-ID in cert verification (Tobias Müllerleile)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.8.23 (Legacy)"},"prerequisites":[],"fixed_versions":[{"value":"0.8.23","evidence":"Version 0.8.23 (Legacy)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7b3a4f95-e48f-4c47-8d9d-4cdacdf53778","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.23","advisory_id":"7b3a4f95-e48f-4c47-8d9d-4cdacdf53778","event_types":["patch"],"published_at":"2026-10-26T01:52:35.60624+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-04-09T00:32:26+00:00","detail_url":"/advisories/advisory%3A7b3a4f95-e48f-4c47-8d9d-4cdacdf53778","group":{"id":"advisory:7b3a4f95-e48f-4c47-8d9d-4cdacdf53778","revision":1,"primary_event_id":74110,"change":"published","superseded_by":[],"changed":{"id":74110,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.8.23 (Legacy)","summary":"Node.js 0.8.23 includes a TLS change that re-enables CN-ID checking during certificate verification.","evidence":"tls: Re-enable check of CN-ID in cert verification (Tobias Müllerleile)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.8.23 (Legacy)"},"prerequisites":[],"fixed_versions":[{"value":"0.8.23","evidence":"Version 0.8.23 (Legacy)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7b3a4f95-e48f-4c47-8d9d-4cdacdf53778","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.23","advisory_id":"7b3a4f95-e48f-4c47-8d9d-4cdacdf53778","event_types":["patch"],"published_at":"2026-10-26T01:52:35.60624+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-04-09T00:32:26+00:00","detail_url":"/events/74110"},"members":[{"id":74110,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.8.23 (Legacy)","summary":"Node.js 0.8.23 includes a TLS change that re-enables CN-ID checking during certificate verification.","evidence":"tls: Re-enable check of CN-ID in cert verification (Tobias Müllerleile)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.8.23 (Legacy)"},"prerequisites":[],"fixed_versions":[{"value":"0.8.23","evidence":"Version 0.8.23 (Legacy)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7b3a4f95-e48f-4c47-8d9d-4cdacdf53778","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.23","advisory_id":"7b3a4f95-e48f-4c47-8d9d-4cdacdf53778","event_types":["patch"],"published_at":"2026-10-26T01:52:35.60624+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-04-09T00:32:26+00:00","detail_url":"/events/74110"}]}},{"id":72954,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.10.5 (Stable)","summary":"Node.js 0.10.5 includes fixes for a NULL pointer dereference and a possible buffer overflow.","evidence":"handle_wrap: fix NULL pointer dereference (Ben Noordhuis) os: fix unlikely buffer overflow in os.type() (Ben Noordhuis)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.5 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.5","evidence":"Version 0.10.5 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a30536e2-85c8-4241-8817-8f55aa5401e4","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.5","advisory_id":"a30536e2-85c8-4241-8817-8f55aa5401e4","event_types":["patch"],"published_at":"2026-10-26T01:50:34.601823+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-04-23T21:05:49+00:00","detail_url":"/advisories/advisory%3Aa30536e2-85c8-4241-8817-8f55aa5401e4","group":{"id":"advisory:a30536e2-85c8-4241-8817-8f55aa5401e4","revision":1,"primary_event_id":74096,"change":"published","superseded_by":[],"changed":{"id":74096,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.10.5 (Stable)","summary":"Node.js 0.10.5 includes fixes for a NULL pointer dereference and a possible buffer overflow.","evidence":"handle_wrap: fix NULL pointer dereference (Ben Noordhuis) os: fix unlikely buffer overflow in os.type() (Ben Noordhuis)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.5 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.5","evidence":"Version 0.10.5 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a30536e2-85c8-4241-8817-8f55aa5401e4","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.5","advisory_id":"a30536e2-85c8-4241-8817-8f55aa5401e4","event_types":["patch"],"published_at":"2026-10-26T01:50:34.601823+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-04-23T21:05:49+00:00","detail_url":"/events/74096"},"members":[{"id":74096,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.10.5 (Stable)","summary":"Node.js 0.10.5 includes fixes for a NULL pointer dereference and a possible buffer overflow.","evidence":"handle_wrap: fix NULL pointer dereference (Ben Noordhuis) os: fix unlikely buffer overflow in os.type() (Ben Noordhuis)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.5 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.5","evidence":"Version 0.10.5 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a30536e2-85c8-4241-8817-8f55aa5401e4","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.5","advisory_id":"a30536e2-85c8-4241-8817-8f55aa5401e4","event_types":["patch"],"published_at":"2026-10-26T01:50:34.601823+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-04-23T21:05:49+00:00","detail_url":"/events/74096"}]}},{"id":72853,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.8.26 (Maintenance)","summary":"Node.js 0.8.26 includes a security fix for the HTTP server implementation; users are urged to upgrade.","evidence":"This release contains a security fix for the http server implementation, please upgrade as soon as possible.","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.8.26 (Maintenance)"},"prerequisites":[],"fixed_versions":[{"value":"0.8.26","evidence":"Node.js 0.8.26 (Maintenance)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ac5ad2c9-cce7-4841-8b2b-157fcf3e0be2","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.26","advisory_id":"ac5ad2c9-cce7-4841-8b2b-157fcf3e0be2","event_types":["patch"],"published_at":"2026-10-26T01:17:31.325598+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-10-18T21:52:30+00:00","detail_url":"/advisories/advisory%3Aac5ad2c9-cce7-4841-8b2b-157fcf3e0be2","group":{"id":"advisory:ac5ad2c9-cce7-4841-8b2b-157fcf3e0be2","revision":1,"primary_event_id":73721,"change":"published","superseded_by":[],"changed":{"id":73721,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.8.26 (Maintenance)","summary":"Node.js 0.8.26 includes a security fix for the HTTP server implementation; users are urged to upgrade.","evidence":"This release contains a security fix for the http server implementation, please upgrade as soon as possible.","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.8.26 (Maintenance)"},"prerequisites":[],"fixed_versions":[{"value":"0.8.26","evidence":"Node.js 0.8.26 (Maintenance)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ac5ad2c9-cce7-4841-8b2b-157fcf3e0be2","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.26","advisory_id":"ac5ad2c9-cce7-4841-8b2b-157fcf3e0be2","event_types":["patch"],"published_at":"2026-10-26T01:17:31.325598+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-10-18T21:52:30+00:00","detail_url":"/events/73721"},"members":[{"id":73721,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.8.26 (Maintenance)","summary":"Node.js 0.8.26 includes a security fix for the HTTP server implementation; users are urged to upgrade.","evidence":"This release contains a security fix for the http server implementation, please upgrade as soon as possible.","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.8.26 (Maintenance)"},"prerequisites":[],"fixed_versions":[{"value":"0.8.26","evidence":"Node.js 0.8.26 (Maintenance)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ac5ad2c9-cce7-4841-8b2b-157fcf3e0be2","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.26","advisory_id":"ac5ad2c9-cce7-4841-8b2b-157fcf3e0be2","event_types":["patch"],"published_at":"2026-10-26T01:17:31.325598+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-10-18T21:52:30+00:00","detail_url":"/events/73721"}]}},{"id":72834,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.10.21 (Stable)","summary":"Node.js 0.10.21 includes a security fix for the HTTP server implementation; the release recommends upgrading as soon as possible.","evidence":"This release contains a security fix for the http server implementation, please upgrade as soon as possible.","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.21 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.21","evidence":"Version 0.10.21 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4442913a-a4b3-4354-9db1-8c815420a4ad","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.21","advisory_id":"4442913a-a4b3-4354-9db1-8c815420a4ad","event_types":["patch"],"published_at":"2026-10-26T01:13:25.394244+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-10-18T22:39:23+00:00","detail_url":"/advisories/advisory%3A4442913a-a4b3-4354-9db1-8c815420a4ad","group":{"id":"advisory:4442913a-a4b3-4354-9db1-8c815420a4ad","revision":1,"primary_event_id":73684,"change":"published","superseded_by":[],"changed":{"id":73684,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.10.21 (Stable)","summary":"Node.js 0.10.21 includes a security fix for the HTTP server implementation; the release recommends upgrading as soon as possible.","evidence":"This release contains a security fix for the http server implementation, please upgrade as soon as possible.","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.21 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.21","evidence":"Version 0.10.21 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4442913a-a4b3-4354-9db1-8c815420a4ad","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.21","advisory_id":"4442913a-a4b3-4354-9db1-8c815420a4ad","event_types":["patch"],"published_at":"2026-10-26T01:13:25.394244+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-10-18T22:39:23+00:00","detail_url":"/events/73684"},"members":[{"id":73684,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.10.21 (Stable)","summary":"Node.js 0.10.21 includes a security fix for the HTTP server implementation; the release recommends upgrading as soon as possible.","evidence":"This release contains a security fix for the http server implementation, please upgrade as soon as possible.","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.21 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.21","evidence":"Version 0.10.21 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4442913a-a4b3-4354-9db1-8c815420a4ad","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.21","advisory_id":"4442913a-a4b3-4354-9db1-8c815420a4ad","event_types":["patch"],"published_at":"2026-10-26T01:13:25.394244+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2013-10-18T22:39:23+00:00","detail_url":"/events/73684"}]}},{"id":72737,"cve_ids":["CVE-2014-0224"],"payload":{"kind":"patch","title":"Node.js 0.10.29 (Stable)","summary":"Node.js 0.10.29 updates OpenSSL to 1.0.1h, citing CVE-2014-0224.","evidence":"openssl: to 1.0.1h (CVE-2014-0224)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.29 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.29","evidence":"Node.js 0.10.29 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2014-0224","evidence":"openssl: to 1.0.1h (CVE-2014-0224)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9d702bb4-c846-4757-9f48-c3655fcdb46a","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.29","advisory_id":"9d702bb4-c846-4757-9f48-c3655fcdb46a","event_types":["patch"],"published_at":"2026-10-26T00:55:32.78424+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2014-06-16T15:06:10+00:00","detail_url":"/advisories/advisory%3A9d702bb4-c846-4757-9f48-c3655fcdb46a","group":{"id":"advisory:9d702bb4-c846-4757-9f48-c3655fcdb46a","revision":1,"primary_event_id":73489,"change":"published","superseded_by":[],"changed":{"id":73489,"cve_ids":["CVE-2014-0224"],"payload":{"kind":"patch","title":"Node.js 0.10.29 (Stable)","summary":"Node.js 0.10.29 updates OpenSSL to 1.0.1h, citing CVE-2014-0224.","evidence":"openssl: to 1.0.1h (CVE-2014-0224)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.29 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.29","evidence":"Node.js 0.10.29 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2014-0224","evidence":"openssl: to 1.0.1h (CVE-2014-0224)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9d702bb4-c846-4757-9f48-c3655fcdb46a","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.29","advisory_id":"9d702bb4-c846-4757-9f48-c3655fcdb46a","event_types":["patch"],"published_at":"2026-10-26T00:55:32.78424+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2014-06-16T15:06:10+00:00","detail_url":"/events/73489"},"members":[{"id":73489,"cve_ids":["CVE-2014-0224"],"payload":{"kind":"patch","title":"Node.js 0.10.29 (Stable)","summary":"Node.js 0.10.29 updates OpenSSL to 1.0.1h, citing CVE-2014-0224.","evidence":"openssl: to 1.0.1h (CVE-2014-0224)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.29 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.29","evidence":"Node.js 0.10.29 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2014-0224","evidence":"openssl: to 1.0.1h (CVE-2014-0224)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9d702bb4-c846-4757-9f48-c3655fcdb46a","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.29","advisory_id":"9d702bb4-c846-4757-9f48-c3655fcdb46a","event_types":["patch"],"published_at":"2026-10-26T00:55:32.78424+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2014-06-16T15:06:10+00:00","detail_url":"/events/73489"}]}},{"id":72702,"cve_ids":["CVE-2014-0224"],"payload":{"kind":"patch","title":"Node.js 0.8.27 (Maintenance)","summary":"Node.js 0.8.27 updates OpenSSL to 1.0.0m and includes other fixes.","evidence":"openssl: update to 1.0.0m (CVE-2014-0224)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.8.27 (Maintenance)"},"prerequisites":[],"fixed_versions":[{"value":"0.8.27","evidence":"Version 0.8.27 (maintenance)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2014-0224","evidence":"openssl: update to 1.0.0m (CVE-2014-0224)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:63f21b57-a69f-4852-b216-63dec798eaa8","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.27","advisory_id":"63f21b57-a69f-4852-b216-63dec798eaa8","event_types":["patch"],"published_at":"2026-10-26T00:50:28.387457+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2014-06-16T15:33:45+00:00","detail_url":"/advisories/advisory%3A63f21b57-a69f-4852-b216-63dec798eaa8","group":{"id":"advisory:63f21b57-a69f-4852-b216-63dec798eaa8","revision":1,"primary_event_id":73436,"change":"published","superseded_by":[],"changed":{"id":73436,"cve_ids":["CVE-2014-0224"],"payload":{"kind":"patch","title":"Node.js 0.8.27 (Maintenance)","summary":"Node.js 0.8.27 updates OpenSSL to 1.0.0m and includes other fixes.","evidence":"openssl: update to 1.0.0m (CVE-2014-0224)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.8.27 (Maintenance)"},"prerequisites":[],"fixed_versions":[{"value":"0.8.27","evidence":"Version 0.8.27 (maintenance)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2014-0224","evidence":"openssl: update to 1.0.0m (CVE-2014-0224)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:63f21b57-a69f-4852-b216-63dec798eaa8","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.27","advisory_id":"63f21b57-a69f-4852-b216-63dec798eaa8","event_types":["patch"],"published_at":"2026-10-26T00:50:28.387457+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2014-06-16T15:33:45+00:00","detail_url":"/events/73436"},"members":[{"id":73436,"cve_ids":["CVE-2014-0224"],"payload":{"kind":"patch","title":"Node.js 0.8.27 (Maintenance)","summary":"Node.js 0.8.27 updates OpenSSL to 1.0.0m and includes other fixes.","evidence":"openssl: update to 1.0.0m (CVE-2014-0224)","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.8.27 (Maintenance)"},"prerequisites":[],"fixed_versions":[{"value":"0.8.27","evidence":"Version 0.8.27 (maintenance)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2014-0224","evidence":"openssl: update to 1.0.0m (CVE-2014-0224)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:63f21b57-a69f-4852-b216-63dec798eaa8","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.8.27","advisory_id":"63f21b57-a69f-4852-b216-63dec798eaa8","event_types":["patch"],"published_at":"2026-10-26T00:50:28.387457+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2014-06-16T15:33:45+00:00","detail_url":"/events/73436"}]}},{"id":72661,"cve_ids":["CVE-2013-6668"],"payload":{"kind":"patch","title":"Node.js 0.10.31 (Stable)","summary":"Node.js 0.10.31 includes a V8 backport for CVE-2013-6668 and updates OpenSSL to v1.0.1i.","evidence":"v8: backport CVE-2013-6668 openssl: Update to v1.0.1i","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.31 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.31","evidence":"Node.js 0.10.31 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2013-6668","evidence":"v8: backport CVE-2013-6668"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f5c916b2-c12a-4962-824a-706924a376cc","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.31","advisory_id":"f5c916b2-c12a-4962-824a-706924a376cc","event_types":["patch"],"published_at":"2026-10-26T00:44:27.001234+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2014-08-19T22:12:08+00:00","detail_url":"/advisories/advisory%3Af5c916b2-c12a-4962-824a-706924a376cc","group":{"id":"advisory:f5c916b2-c12a-4962-824a-706924a376cc","revision":1,"primary_event_id":73381,"change":"published","superseded_by":[],"changed":{"id":73381,"cve_ids":["CVE-2013-6668"],"payload":{"kind":"patch","title":"Node.js 0.10.31 (Stable)","summary":"Node.js 0.10.31 includes a V8 backport for CVE-2013-6668 and updates OpenSSL to v1.0.1i.","evidence":"v8: backport CVE-2013-6668 openssl: Update to v1.0.1i","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.31 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.31","evidence":"Node.js 0.10.31 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2013-6668","evidence":"v8: backport CVE-2013-6668"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f5c916b2-c12a-4962-824a-706924a376cc","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.31","advisory_id":"f5c916b2-c12a-4962-824a-706924a376cc","event_types":["patch"],"published_at":"2026-10-26T00:44:27.001234+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2014-08-19T22:12:08+00:00","detail_url":"/events/73381"},"members":[{"id":73381,"cve_ids":["CVE-2013-6668"],"payload":{"kind":"patch","title":"Node.js 0.10.31 (Stable)","summary":"Node.js 0.10.31 includes a V8 backport for CVE-2013-6668 and updates OpenSSL to v1.0.1i.","evidence":"v8: backport CVE-2013-6668 openssl: Update to v1.0.1i","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.31 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.31","evidence":"Node.js 0.10.31 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2013-6668","evidence":"v8: backport CVE-2013-6668"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f5c916b2-c12a-4962-824a-706924a376cc","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.31","advisory_id":"f5c916b2-c12a-4962-824a-706924a376cc","event_types":["patch"],"published_at":"2026-10-26T00:44:27.001234+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2014-08-19T22:12:08+00:00","detail_url":"/events/73381"}]}},{"id":72654,"cve_ids":["CVE-2015-8027"],"payload":{"kind":"patch","title":"V8 Memory Corruption and Stack Overflow","summary":"A V8 memory corruption vulnerability in Node.js 0.8 and 0.10 can cause a denial of service when deeply recursive workloads trigger garbage collection and an interrupt. The issue is fixed in Node.js v0.8.28 and v0.10.30; limiting JSON request sizes is suggested as a mitigation.","evidence":"A memory corruption vulnerability, which results in a denial-of-service, was identified in the versions of V8 that ship with Node.js 0.8 and 0.10.","products":[{"name":{"value":"Node.js","evidence":"The Node.js Project V8 Memory Corruption and Stack Overflow"},"prerequisites":[],"fixed_versions":[{"value":"v0.8.28","evidence":"And has been released in the following versions: v0.10.30 v0.8.28"},{"value":"v0.10.30","evidence":"And has been released in the following versions: v0.10.30 v0.8.28"}],"affected_versions":[{"value":"0.8","evidence":"the versions of V8 that ship with Node.js 0.8 and 0.10"},{"value":"0.10","evidence":"the versions of V8 that ship with Node.js 0.8 and 0.10"}]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2015-8027","evidence":"PreviousCVE-2015-8027 Denial of Service Vulnerability / CVE-2015-6764 V8 Out-of-bounds Access VulnerabilityNext"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:8245b7b5-3e85-47a1-8184-480e25752a6e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/v8-memory-corruption-stack-overflow","advisory_id":"8245b7b5-3e85-47a1-8184-480e25752a6e","event_types":["patch"],"published_at":"2026-10-26T00:43:29.605348+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2014-07-31T19:00:00+00:00","detail_url":"/advisories/advisory%3A8245b7b5-3e85-47a1-8184-480e25752a6e","group":{"id":"advisory:8245b7b5-3e85-47a1-8184-480e25752a6e","revision":1,"primary_event_id":73372,"change":"published","superseded_by":[],"changed":{"id":73372,"cve_ids":["CVE-2015-8027"],"payload":{"kind":"patch","title":"V8 Memory Corruption and Stack Overflow","summary":"A V8 memory corruption vulnerability in Node.js 0.8 and 0.10 can cause a denial of service when deeply recursive workloads trigger garbage collection and an interrupt. The issue is fixed in Node.js v0.8.28 and v0.10.30; limiting JSON request sizes is suggested as a mitigation.","evidence":"A memory corruption vulnerability, which results in a denial-of-service, was identified in the versions of V8 that ship with Node.js 0.8 and 0.10.","products":[{"name":{"value":"Node.js","evidence":"The Node.js Project V8 Memory Corruption and Stack Overflow"},"prerequisites":[],"fixed_versions":[{"value":"v0.8.28","evidence":"And has been released in the following versions: v0.10.30 v0.8.28"},{"value":"v0.10.30","evidence":"And has been released in the following versions: v0.10.30 v0.8.28"}],"affected_versions":[{"value":"0.8","evidence":"the versions of V8 that ship with Node.js 0.8 and 0.10"},{"value":"0.10","evidence":"the versions of V8 that ship with Node.js 0.8 and 0.10"}]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2015-8027","evidence":"PreviousCVE-2015-8027 Denial of Service Vulnerability / CVE-2015-6764 V8 Out-of-bounds Access VulnerabilityNext"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:8245b7b5-3e85-47a1-8184-480e25752a6e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/v8-memory-corruption-stack-overflow","advisory_id":"8245b7b5-3e85-47a1-8184-480e25752a6e","event_types":["patch"],"published_at":"2026-10-26T00:43:29.605348+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2014-07-31T19:00:00+00:00","detail_url":"/events/73372"},"members":[{"id":73372,"cve_ids":["CVE-2015-8027"],"payload":{"kind":"patch","title":"V8 Memory Corruption and Stack Overflow","summary":"A V8 memory corruption vulnerability in Node.js 0.8 and 0.10 can cause a denial of service when deeply recursive workloads trigger garbage collection and an interrupt. The issue is fixed in Node.js v0.8.28 and v0.10.30; limiting JSON request sizes is suggested as a mitigation.","evidence":"A memory corruption vulnerability, which results in a denial-of-service, was identified in the versions of V8 that ship with Node.js 0.8 and 0.10.","products":[{"name":{"value":"Node.js","evidence":"The Node.js Project V8 Memory Corruption and Stack Overflow"},"prerequisites":[],"fixed_versions":[{"value":"v0.8.28","evidence":"And has been released in the following versions: v0.10.30 v0.8.28"},{"value":"v0.10.30","evidence":"And has been released in the following versions: v0.10.30 v0.8.28"}],"affected_versions":[{"value":"0.8","evidence":"the versions of V8 that ship with Node.js 0.8 and 0.10"},{"value":"0.10","evidence":"the versions of V8 that ship with Node.js 0.8 and 0.10"}]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2015-8027","evidence":"PreviousCVE-2015-8027 Denial of Service Vulnerability / CVE-2015-6764 V8 Out-of-bounds Access VulnerabilityNext"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:8245b7b5-3e85-47a1-8184-480e25752a6e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/v8-memory-corruption-stack-overflow","advisory_id":"8245b7b5-3e85-47a1-8184-480e25752a6e","event_types":["patch"],"published_at":"2026-10-26T00:43:29.605348+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2014-07-31T19:00:00+00:00","detail_url":"/events/73372"}]}},{"id":72623,"cve_ids":["CVE-2014-3566"],"payload":{"kind":"patch","title":"Node.js 0.10.33 (Stable)","summary":"Node.js 0.10.33 disables SSLv2 and SSLv3 negotiation by default to address the POODLE vulnerability; these protocols can still be enabled explicitly.","evidence":"This release handles the recent POODLE vulnerability by disabling SSLv2/SSLv3 by default","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.33 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.33","evidence":"2014.10.20, Version 0.10.33 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2014-3566","evidence":"could be easily compromised as was shown by CVE-2014-3566"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4cd69f9a-8d59-47b7-88d5-ecc489ba3a82","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.33","advisory_id":"4cd69f9a-8d59-47b7-88d5-ecc489ba3a82","event_types":["patch"],"published_at":"2026-10-26T00:40:25.358165+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2014-10-23T19:12:33+00:00","detail_url":"/advisories/advisory%3A4cd69f9a-8d59-47b7-88d5-ecc489ba3a82","group":{"id":"advisory:4cd69f9a-8d59-47b7-88d5-ecc489ba3a82","revision":1,"primary_event_id":73332,"change":"published","superseded_by":[],"changed":{"id":73332,"cve_ids":["CVE-2014-3566"],"payload":{"kind":"patch","title":"Node.js 0.10.33 (Stable)","summary":"Node.js 0.10.33 disables SSLv2 and SSLv3 negotiation by default to address the POODLE vulnerability; these protocols can still be enabled explicitly.","evidence":"This release handles the recent POODLE vulnerability by disabling SSLv2/SSLv3 by default","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.33 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.33","evidence":"2014.10.20, Version 0.10.33 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2014-3566","evidence":"could be easily compromised as was shown by CVE-2014-3566"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4cd69f9a-8d59-47b7-88d5-ecc489ba3a82","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.33","advisory_id":"4cd69f9a-8d59-47b7-88d5-ecc489ba3a82","event_types":["patch"],"published_at":"2026-10-26T00:40:25.358165+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2014-10-23T19:12:33+00:00","detail_url":"/events/73332"},"members":[{"id":73332,"cve_ids":["CVE-2014-3566"],"payload":{"kind":"patch","title":"Node.js 0.10.33 (Stable)","summary":"Node.js 0.10.33 disables SSLv2 and SSLv3 negotiation by default to address the POODLE vulnerability; these protocols can still be enabled explicitly.","evidence":"This release handles the recent POODLE vulnerability by disabling SSLv2/SSLv3 by default","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.33 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.33","evidence":"2014.10.20, Version 0.10.33 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[{"value":"CVE-2014-3566","evidence":"could be easily compromised as was shown by CVE-2014-3566"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4cd69f9a-8d59-47b7-88d5-ecc489ba3a82","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.33","advisory_id":"4cd69f9a-8d59-47b7-88d5-ecc489ba3a82","event_types":["patch"],"published_at":"2026-10-26T00:40:25.358165+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2014-10-23T19:12:33+00:00","detail_url":"/events/73332"}]}},{"id":72547,"cve_ids":[],"payload":{"kind":"patch","title":"io.js Releases 1.3.0","summary":"io.js 1.3.0 changes the default TLS and HTTPS cipher suite to provide Perfect Forward Secrecy with modern browsers and excludes insecure RC4 ciphers.","evidence":"The default cipher suite used by tls and https has been changed to one that achieves Perfect Forward Secrecy with all modern browsers. Additionally, insecure RC4 ciphers have been excluded.","products":[{"name":{"value":"io.js","evidence":"io.js Releases 1.3.0"},"prerequisites":[],"fixed_versions":[{"value":"1.3.0","evidence":"io.js Releases 1.3.0"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-02-20","advisory_id":"e5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","event_types":["patch"],"published_at":"2026-10-26T00:31:13.20713+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-02-20T12:00:00+00:00","detail_url":"/advisories/advisory%3Ae5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","group":{"id":"advisory:e5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","revision":1,"primary_event_id":73221,"change":"published","superseded_by":[],"changed":{"id":73221,"cve_ids":[],"payload":{"kind":"patch","title":"io.js Releases 1.3.0","summary":"io.js 1.3.0 changes the default TLS and HTTPS cipher suite to provide Perfect Forward Secrecy with modern browsers and excludes insecure RC4 ciphers.","evidence":"The default cipher suite used by tls and https has been changed to one that achieves Perfect Forward Secrecy with all modern browsers. Additionally, insecure RC4 ciphers have been excluded.","products":[{"name":{"value":"io.js","evidence":"io.js Releases 1.3.0"},"prerequisites":[],"fixed_versions":[{"value":"1.3.0","evidence":"io.js Releases 1.3.0"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-02-20","advisory_id":"e5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","event_types":["patch"],"published_at":"2026-10-26T00:31:13.20713+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-02-20T12:00:00+00:00","detail_url":"/events/73221"},"members":[{"id":73221,"cve_ids":[],"payload":{"kind":"patch","title":"io.js Releases 1.3.0","summary":"io.js 1.3.0 changes the default TLS and HTTPS cipher suite to provide Perfect Forward Secrecy with modern browsers and excludes insecure RC4 ciphers.","evidence":"The default cipher suite used by tls and https has been changed to one that achieves Perfect Forward Secrecy with all modern browsers. Additionally, insecure RC4 ciphers have been excluded.","products":[{"name":{"value":"io.js","evidence":"io.js Releases 1.3.0"},"prerequisites":[],"fixed_versions":[{"value":"1.3.0","evidence":"io.js Releases 1.3.0"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-02-20","advisory_id":"e5399bb5-4ea7-46b9-8c84-e5a9319ec6dd","event_types":["patch"],"published_at":"2026-10-26T00:31:13.20713+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-02-20T12:00:00+00:00","detail_url":"/events/73221"}]}},{"id":72537,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.4.1 Release","summary":"io.js 1.4.1 updates V8 to 4.1.0.21, including an embargoed fix, and updates libuv to 1.4.2. The announcement does not identify the security issue or provide severity details.","evidence":"io.js 1.4.1 Release Note: version 1.4.0 was tagged and built but not released.","products":[{"name":{"value":"io.js","evidence":"io.js 1.4.1 Release"},"prerequisites":[],"fixed_versions":[{"value":"1.4.1","evidence":"io.js 1.4.1 Release"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f8698240-dcc9-4476-8681-245a38268674","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-02-27","advisory_id":"f8698240-dcc9-4476-8681-245a38268674","event_types":["patch"],"published_at":"2026-10-26T00:29:23.596473+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-02-27T12:00:00+00:00","detail_url":"/advisories/advisory%3Af8698240-dcc9-4476-8681-245a38268674","group":{"id":"advisory:f8698240-dcc9-4476-8681-245a38268674","revision":1,"primary_event_id":73200,"change":"published","superseded_by":[],"changed":{"id":73200,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.4.1 Release","summary":"io.js 1.4.1 updates V8 to 4.1.0.21, including an embargoed fix, and updates libuv to 1.4.2. The announcement does not identify the security issue or provide severity details.","evidence":"io.js 1.4.1 Release Note: version 1.4.0 was tagged and built but not released.","products":[{"name":{"value":"io.js","evidence":"io.js 1.4.1 Release"},"prerequisites":[],"fixed_versions":[{"value":"1.4.1","evidence":"io.js 1.4.1 Release"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f8698240-dcc9-4476-8681-245a38268674","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-02-27","advisory_id":"f8698240-dcc9-4476-8681-245a38268674","event_types":["patch"],"published_at":"2026-10-26T00:29:23.596473+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-02-27T12:00:00+00:00","detail_url":"/events/73200"},"members":[{"id":73200,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.4.1 Release","summary":"io.js 1.4.1 updates V8 to 4.1.0.21, including an embargoed fix, and updates libuv to 1.4.2. The announcement does not identify the security issue or provide severity details.","evidence":"io.js 1.4.1 Release Note: version 1.4.0 was tagged and built but not released.","products":[{"name":{"value":"io.js","evidence":"io.js 1.4.1 Release"},"prerequisites":[],"fixed_versions":[{"value":"1.4.1","evidence":"io.js 1.4.1 Release"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f8698240-dcc9-4476-8681-245a38268674","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-02-27","advisory_id":"f8698240-dcc9-4476-8681-245a38268674","event_types":["patch"],"published_at":"2026-10-26T00:29:23.596473+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-02-27T12:00:00+00:00","detail_url":"/events/73200"}]}},{"id":72507,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.5.1 Release","summary":"io.js 1.5.1 reports resolving a TLS memory leak, though testing indicated some leak problems may remain.","evidence":"The reported TLS memory leak has been resolved via various commits in this release.","products":[{"name":{"value":"io.js","evidence":"io.js v1.5.1"},"prerequisites":[],"fixed_versions":[{"value":"1.5.1","evidence":"io.js v1.5.1"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d5245327-9bb0-412a-b275-292b2f648194","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-03-13","advisory_id":"d5245327-9bb0-412a-b275-292b2f648194","event_types":["patch"],"published_at":"2026-10-26T00:25:51.253002+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-03-13T12:00:00+00:00","detail_url":"/advisories/advisory%3Ad5245327-9bb0-412a-b275-292b2f648194","group":{"id":"advisory:d5245327-9bb0-412a-b275-292b2f648194","revision":1,"primary_event_id":73160,"change":"published","superseded_by":[],"changed":{"id":73160,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.5.1 Release","summary":"io.js 1.5.1 reports resolving a TLS memory leak, though testing indicated some leak problems may remain.","evidence":"The reported TLS memory leak has been resolved via various commits in this release.","products":[{"name":{"value":"io.js","evidence":"io.js v1.5.1"},"prerequisites":[],"fixed_versions":[{"value":"1.5.1","evidence":"io.js v1.5.1"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d5245327-9bb0-412a-b275-292b2f648194","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-03-13","advisory_id":"d5245327-9bb0-412a-b275-292b2f648194","event_types":["patch"],"published_at":"2026-10-26T00:25:51.253002+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-03-13T12:00:00+00:00","detail_url":"/events/73160"},"members":[{"id":73160,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.5.1 Release","summary":"io.js 1.5.1 reports resolving a TLS memory leak, though testing indicated some leak problems may remain.","evidence":"The reported TLS memory leak has been resolved via various commits in this release.","products":[{"name":{"value":"io.js","evidence":"io.js v1.5.1"},"prerequisites":[],"fixed_versions":[{"value":"1.5.1","evidence":"io.js v1.5.1"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d5245327-9bb0-412a-b275-292b2f648194","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-03-13","advisory_id":"d5245327-9bb0-412a-b275-292b2f648194","event_types":["patch"],"published_at":"2026-10-26T00:25:51.253002+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-03-13T12:00:00+00:00","detail_url":"/events/73160"}]}},{"id":72382,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.10.38 (Maintenance)","summary":"Node.js 0.10.38 upgrades OpenSSL to 1.0.1m, which the release says includes fixes for several recently disclosed CVEs.","evidence":"This release upgrades OpenSSL to version 1.0.1m, which includes fixes for several CVEs that were disclosed recently.","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.38 (Maintenance)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.38","evidence":"Node.js 0.10.38 (Maintenance)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f79a9482-4ced-4d2a-8fdb-f70b566b43a9","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.38","advisory_id":"f79a9482-4ced-4d2a-8fdb-f70b566b43a9","event_types":["patch"],"published_at":"2026-10-26T00:21:25.731087+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-03-23T21:43:54+00:00","detail_url":"/advisories/advisory%3Af79a9482-4ced-4d2a-8fdb-f70b566b43a9","group":{"id":"advisory:f79a9482-4ced-4d2a-8fdb-f70b566b43a9","revision":1,"primary_event_id":73027,"change":"published","superseded_by":[],"changed":{"id":73027,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.10.38 (Maintenance)","summary":"Node.js 0.10.38 upgrades OpenSSL to 1.0.1m, which the release says includes fixes for several recently disclosed CVEs.","evidence":"This release upgrades OpenSSL to version 1.0.1m, which includes fixes for several CVEs that were disclosed recently.","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.38 (Maintenance)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.38","evidence":"Node.js 0.10.38 (Maintenance)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f79a9482-4ced-4d2a-8fdb-f70b566b43a9","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.38","advisory_id":"f79a9482-4ced-4d2a-8fdb-f70b566b43a9","event_types":["patch"],"published_at":"2026-10-26T00:21:25.731087+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-03-23T21:43:54+00:00","detail_url":"/events/73027"},"members":[{"id":73027,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.10.38 (Maintenance)","summary":"Node.js 0.10.38 upgrades OpenSSL to 1.0.1m, which the release says includes fixes for several recently disclosed CVEs.","evidence":"This release upgrades OpenSSL to version 1.0.1m, which includes fixes for several CVEs that were disclosed recently.","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.10.38 (Maintenance)"},"prerequisites":[],"fixed_versions":[{"value":"0.10.38","evidence":"Node.js 0.10.38 (Maintenance)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f79a9482-4ced-4d2a-8fdb-f70b566b43a9","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.10.38","advisory_id":"f79a9482-4ced-4d2a-8fdb-f70b566b43a9","event_types":["patch"],"published_at":"2026-10-26T00:21:25.731087+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-03-23T21:43:54+00:00","detail_url":"/events/73027"}]}},{"id":72239,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.12.1 (Stable)","summary":"Node.js 0.12.1 upgrades OpenSSL to 1.0.1m, which includes fixes for several recently disclosed CVEs.","evidence":"This release upgrades OpenSSL to version 1.0.1m, which includes fixes for several CVEs that were disclosed recently.","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.12.1 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.12.1","evidence":"Version 0.12.1 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d2d32815-30d6-45c0-a797-3fc66ecc0fa1","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.12.1","advisory_id":"d2d32815-30d6-45c0-a797-3fc66ecc0fa1","event_types":["patch"],"published_at":"2026-10-26T00:19:23.887625+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-03-24T02:45:44+00:00","detail_url":"/advisories/advisory%3Ad2d32815-30d6-45c0-a797-3fc66ecc0fa1","group":{"id":"advisory:d2d32815-30d6-45c0-a797-3fc66ecc0fa1","revision":1,"primary_event_id":72884,"change":"published","superseded_by":[],"changed":{"id":72884,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.12.1 (Stable)","summary":"Node.js 0.12.1 upgrades OpenSSL to 1.0.1m, which includes fixes for several recently disclosed CVEs.","evidence":"This release upgrades OpenSSL to version 1.0.1m, which includes fixes for several CVEs that were disclosed recently.","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.12.1 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.12.1","evidence":"Version 0.12.1 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d2d32815-30d6-45c0-a797-3fc66ecc0fa1","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.12.1","advisory_id":"d2d32815-30d6-45c0-a797-3fc66ecc0fa1","event_types":["patch"],"published_at":"2026-10-26T00:19:23.887625+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-03-24T02:45:44+00:00","detail_url":"/events/72884"},"members":[{"id":72884,"cve_ids":[],"payload":{"kind":"patch","title":"Node.js 0.12.1 (Stable)","summary":"Node.js 0.12.1 upgrades OpenSSL to 1.0.1m, which includes fixes for several recently disclosed CVEs.","evidence":"This release upgrades OpenSSL to version 1.0.1m, which includes fixes for several CVEs that were disclosed recently.","products":[{"name":{"value":"Node.js","evidence":"Node.js 0.12.1 (Stable)"},"prerequisites":[],"fixed_versions":[{"value":"0.12.1","evidence":"Version 0.12.1 (Stable)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d2d32815-30d6-45c0-a797-3fc66ecc0fa1","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v0.12.1","advisory_id":"d2d32815-30d6-45c0-a797-3fc66ecc0fa1","event_types":["patch"],"published_at":"2026-10-26T00:19:23.887625+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-03-24T02:45:44+00:00","detail_url":"/events/72884"}]}},{"id":72129,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.6.4 release","summary":"io.js 1.6.4 upgrades npm to 2.7.5, which includes two important security fixes.","evidence":"This week we had one io.js release v1.6.4","products":[{"name":{"value":"io.js","evidence":"io.js 1.6.4 release"},"prerequisites":[],"fixed_versions":[{"value":"v1.6.4","evidence":"This week we had one io.js release v1.6.4"}],"affected_versions":[]},{"name":{"value":"npm","evidence":"npm: upgrade npm to 2.7.5."},"prerequisites":[],"fixed_versions":[{"value":"2.7.5","evidence":"npm: upgrade npm to 2.7.5."}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1eaf683a-cd6c-485c-a5e8-d338763c1329","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-04-10","advisory_id":"1eaf683a-cd6c-485c-a5e8-d338763c1329","event_types":["patch"],"published_at":"2026-10-26T00:17:24.352826+00:00","technologies":["io-js","nodejs","npm"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-04-10T12:00:00+00:00","detail_url":"/advisories/advisory%3A1eaf683a-cd6c-485c-a5e8-d338763c1329","group":{"id":"advisory:1eaf683a-cd6c-485c-a5e8-d338763c1329","revision":1,"primary_event_id":72760,"change":"published","superseded_by":[],"changed":{"id":72760,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.6.4 release","summary":"io.js 1.6.4 upgrades npm to 2.7.5, which includes two important security fixes.","evidence":"This week we had one io.js release v1.6.4","products":[{"name":{"value":"io.js","evidence":"io.js 1.6.4 release"},"prerequisites":[],"fixed_versions":[{"value":"v1.6.4","evidence":"This week we had one io.js release v1.6.4"}],"affected_versions":[]},{"name":{"value":"npm","evidence":"npm: upgrade npm to 2.7.5."},"prerequisites":[],"fixed_versions":[{"value":"2.7.5","evidence":"npm: upgrade npm to 2.7.5."}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1eaf683a-cd6c-485c-a5e8-d338763c1329","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-04-10","advisory_id":"1eaf683a-cd6c-485c-a5e8-d338763c1329","event_types":["patch"],"published_at":"2026-10-26T00:17:24.352826+00:00","technologies":["io-js","nodejs","npm"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-04-10T12:00:00+00:00","detail_url":"/events/72760"},"members":[{"id":72760,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 1.6.4 release","summary":"io.js 1.6.4 upgrades npm to 2.7.5, which includes two important security fixes.","evidence":"This week we had one io.js release v1.6.4","products":[{"name":{"value":"io.js","evidence":"io.js 1.6.4 release"},"prerequisites":[],"fixed_versions":[{"value":"v1.6.4","evidence":"This week we had one io.js release v1.6.4"}],"affected_versions":[]},{"name":{"value":"npm","evidence":"npm: upgrade npm to 2.7.5."},"prerequisites":[],"fixed_versions":[{"value":"2.7.5","evidence":"npm: upgrade npm to 2.7.5."}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1eaf683a-cd6c-485c-a5e8-d338763c1329","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-04-10","advisory_id":"1eaf683a-cd6c-485c-a5e8-d338763c1329","event_types":["patch"],"published_at":"2026-10-26T00:17:24.352826+00:00","technologies":["io-js","nodejs","npm"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-04-10T12:00:00+00:00","detail_url":"/events/72760"}]}},{"id":71952,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 2.1.0 fixes the Logjam vulnerability","summary":"io.js 2.1.0 requires Diffie-Hellman parameters to be at least 1024 bits and is reported to fix the Logjam vulnerability.","evidence":"Logjam attack vulnerability detected on Diffie-Hellman Key exchange. io.js fixed the vulnerability on v2.1.0.","products":[{"name":{"value":"io.js","evidence":"io.js fixed the vulnerability on v2.1.0."},"prerequisites":[],"fixed_versions":[{"value":"v2.1.0","evidence":"io.js fixed the vulnerability on v2.1.0."}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:82578073-bebc-49f6-8f42-47e9a1d97f19","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-05-22","advisory_id":"82578073-bebc-49f6-8f42-47e9a1d97f19","event_types":["patch"],"published_at":"2026-10-25T23:59:22.620592+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-05-22T12:00:00+00:00","detail_url":"/advisories/advisory%3A82578073-bebc-49f6-8f42-47e9a1d97f19","group":{"id":"advisory:82578073-bebc-49f6-8f42-47e9a1d97f19","revision":1,"primary_event_id":72508,"change":"published","superseded_by":[],"changed":{"id":72508,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 2.1.0 fixes the Logjam vulnerability","summary":"io.js 2.1.0 requires Diffie-Hellman parameters to be at least 1024 bits and is reported to fix the Logjam vulnerability.","evidence":"Logjam attack vulnerability detected on Diffie-Hellman Key exchange. io.js fixed the vulnerability on v2.1.0.","products":[{"name":{"value":"io.js","evidence":"io.js fixed the vulnerability on v2.1.0."},"prerequisites":[],"fixed_versions":[{"value":"v2.1.0","evidence":"io.js fixed the vulnerability on v2.1.0."}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:82578073-bebc-49f6-8f42-47e9a1d97f19","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-05-22","advisory_id":"82578073-bebc-49f6-8f42-47e9a1d97f19","event_types":["patch"],"published_at":"2026-10-25T23:59:22.620592+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-05-22T12:00:00+00:00","detail_url":"/events/72508"},"members":[{"id":72508,"cve_ids":[],"payload":{"kind":"patch","title":"io.js 2.1.0 fixes the Logjam vulnerability","summary":"io.js 2.1.0 requires Diffie-Hellman parameters to be at least 1024 bits and is reported to fix the Logjam vulnerability.","evidence":"Logjam attack vulnerability detected on Diffie-Hellman Key exchange. io.js fixed the vulnerability on v2.1.0.","products":[{"name":{"value":"io.js","evidence":"io.js fixed the vulnerability on v2.1.0."},"prerequisites":[],"fixed_versions":[{"value":"v2.1.0","evidence":"io.js fixed the vulnerability on v2.1.0."}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[],"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:82578073-bebc-49f6-8f42-47e9a1d97f19","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/weekly/weekly-update.2015-05-22","advisory_id":"82578073-bebc-49f6-8f42-47e9a1d97f19","event_types":["patch"],"published_at":"2026-10-25T23:59:22.620592+00:00","technologies":["io-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2015-05-22T12:00:00+00:00","detail_url":"/events/72508"}]}}],"next_after":73227,"next_before":71952}