Skip to content
Heist/ feed
UnratedFix available

Node.js 19.6.1 (Current)

Type: patchSource: Node.js announcements1 source record

Node.js 19.6.1 fixes multiple security vulnerabilities, including three CVEs, and includes OpenSSL security updates.

Announced Source revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

The following CVEs are fixed in this release: CVE-2023-23919: OpenSSL errors not cleared in error stack (Medium) CVE-2023-23918: Experimental Policies bypass via process.mainModule.require(High) CVE-2023-23920: Insecure loading of ICU data through ICU_DATA environment variable (Low)

Node.js

Node.js 19.6.1 (Current)
Affected versions
Not stated in this extraction
Fixed versions
19.6.1
Node.js 19.6.1 (Current)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2023-23919
CVE-2023-23919: OpenSSL errors not cleared in error stack (Medium)
CVE-2023-23918
CVE-2023-23918: Experimental Policies bypass via process.mainModule.require(High)
CVE-2023-23920
CVE-2023-23920: Insecure loading of ICU data through ICU_DATA environment variable (Low)

Publisher severity

No explicit severity was extracted.

Event
#28862 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement