MediumFix available
October 12th 2021 Security Releases
Node.js released updates addressing two HTTP request smuggling issues across the 12.x, 14.x, and 16.x release lines.
Announced Source revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Updates are now available for the v16.x, v14.x, and v12.x Node.js release lines for the following issues.
Node.js
Node.js v12.22.7 (LTS)
- Affected versions
- All versions of the 16.x, 14.x, and 12.x releases lines.
Impacts: All versions of the 16.x, 14.x, and 12.x releases lines.
- Fixed versions
- Node.js v12.22.7 (LTS)
Node.js v12.22.7 (LTS)
Node.js v14.18.1 (LTS)Node.js v14.18.1 (LTS)
Node.js v16.11.1 (Current)Node.js v16.11.1 (Current)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2021-22959
HTTP Request Smuggling due to spaced in headers (Medium)(CVE-2021-22959)
CVE-2021-22960HTTP Request Smuggling when parsing the body (Medium)(CVE-2021-22960)
Publisher severity
medium
Two medium severity issues
- Event
- #35775 · Revision 1
- Added to Heist Feed
- Publisher date