UnratedFix available
Node.js 20.12.1 (LTS)
Node.js 20.12.1 is a security release addressing HTTP/2 server crashes and HTTP request smuggling.
Announced Source revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This is a security release
Node.js
Node.js 20.12.1 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 20.12.1
Version 20.12.1 'Iron' (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2024-27983
CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High)
CVE-2024-27982CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
Publisher severity
No explicit severity was extracted.
- Event
- #24332 · Revision 1
- Added to Heist Feed
- Publisher date