UnratedFix available

Node.js 18.12.1 (LTS)

Type: patchSource: Node.js announcements1 source record

Node.js 18.12.1 fixes three reported vulnerabilities, including X.509 buffer overflows and DNS rebinding through --inspect.

Announced 4 Nov 2022Source revision 1

Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

The following CVEs are fixed in this release: CVE-2022-3602: X.509 Email Address 4-byte Buffer Overflow (High) CVE-2022-3786: X.509 Email Address Variable Length Buffer Overflow (High) CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)

Node.js

Node.js 18.12.1 (LTS)

Affected versions: Not stated in this extraction
Fixed versions: 18.12.1
Node.js 18.12.1 (LTS)
Prerequisites: Not stated in this extraction

Related CVEs: CVE-2022-3602
CVE-2022-3602: X.509 Email Address 4-byte Buffer Overflow (High)
CVE-2022-3786
CVE-2022-3786: X.509 Email Address Variable Length Buffer Overflow (High)
CVE-2022-43548
CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)

Publisher severity

No explicit severity was extracted.

Event: #29781 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 08:04:32 GMT
Publisher date: Fri, 04 Nov 2022 22:34:29 GMT

Read the original announcement