UnratedFix available
Node.js 16.6.2 (Current)
Node.js 16.6.2 addresses reported security issues involving DNS hostname handling, HTTP/2 stream cancellation, and HTTPS certificate validation.
Announced Source revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
CVE-2021-3672/CVE-2021-22931: Improper handling of untypical characters in domain names (High)
Node.js
Node.js 16.6.2 (Current)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 16.6.2
Node.js 16.6.2 (Current)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2021-3672
CVE-2021-3672/CVE-2021-22931: Improper handling of untypical characters in domain names (High)
CVE-2021-22931CVE-2021-3672/CVE-2021-22931: Improper handling of untypical characters in domain names (High)
CVE-2021-22940CVE-2021-22940: Use after free on close http2 on stream canceling (High)
CVE-2021-22939CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (Low)
Publisher severity
No explicit severity was extracted.
- Event
- #36922 · Revision 1
- Added to Heist Feed
- Publisher date