Skip to content
Heist/ feed
UnratedFix available

Node.js 18.14.1 (LTS)

Type: patchSource: Node.js announcements1 source record

Node.js 18.14.1 fixes five listed CVEs and includes OpenSSL security updates.

Announced Source revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

The following CVEs are fixed in this release:

Node.js

Node.js 18.14.1 (LTS)
Affected versions
Not stated in this extraction
Fixed versions
18.14.1
Node.js 18.14.1 (LTS)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2023-23918
CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
CVE-2023-23919
CVE-2023-23919: Node.js OpenSSL error handling issues in nodejs crypto library (Medium)
CVE-2023-23936
CVE-2023-23936: Fetch API in Node.js did not protect against CRLF injection in host headers (Medium)
CVE-2023-24807
CVE-2023-24807: Regular Expression Denial of Service in Headers in Node.js fetch API (Low)
CVE-2023-23920
CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)

Publisher severity

No explicit severity was extracted.

Event
#28760 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement