Skip to content
Heist/ feed
UnratedFix available

Node.js 16.18.1 (LTS)

Type: patchSource: Node.js announcements1 source record

This release fixes a DNS rebinding vulnerability involving the inspector and invalid octal IP addresses.

Announced Source revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

The following CVEs are fixed in this release: CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)

Node.js

Node.js 16.18.1 (LTS)
Affected versions
Not stated in this extraction
Fixed versions
16.18.1
Node.js 16.18.1 (LTS)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2022-43548
CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)

Publisher severity

No explicit severity was extracted.

Event
#29869 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement