UnratedFix available
Node.js security releases for November 2022
Node.js security updates address three vulnerabilities, including OpenSSL certificate buffer overflows and DNS rebinding through --inspect. Updates are available in the listed release versions.
Announced Source revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Updates are now available for v14,x, v16.x, v18.x and v19.x Node.js release lines for the following issues.
Node.js
Node.js v14.21.1 (LTS)
- Affected versions
- All versions of the v14.x, v16.x, v18.x, and v19.x releases lines
Impacts: All versions of the v14.x, v16.x, v18.x, and v19.x releases lines.
- Fixed versions
- v14.21.1
Node.js v14.21.1 (LTS)
v16.18.1Node.js v16.18.1 (LTS)
v18.12.1Node.js v18.12.1 (LTS)
v19.0.1Node.js v19.0.1 (Current)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2022-3602
X.509 Email Address 4-byte Buffer Overflow (High) (CVE-2022-3602)
CVE-2022-3786X.509 Email Address Variable Length Buffer Overflow (High) (CVE-2022-3786)
CVE-2022-43548DNS rebinding in --inspect via invalid octal IP address (Medium) (CVE-2022-43548)
Publisher severity
No explicit severity was extracted.
- Event
- #30005 · Revision 1
- Added to Heist Feed
- Publisher date