UnratedFix available
Node.js 21.0.0 release
Node.js 21.0.0 includes stricter HTTP parsing defaults that the announcement says enhance security, including mandatory CRLF after headers and chunks and rejecting data after a message with the Connection: close header. The --insecure-http-parser flag can disable these changes.
Announced Source revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
With the latest update, all settings that were previously included in strict mode are enabled by default, enhancing code reliability and security.
Node.js
Node.js 21 is now available!
- Affected versions
- Not stated in this extraction
- Fixed versions
- Node.js 21.0.0
To download Node.js 21.0.0, visit:
- Prerequisites
- Not stated in this extraction
Publisher severity
No explicit severity was extracted.
- Event
- #26182 · Revision 1
- Added to Heist Feed
- Publisher date