UnratedFix available
Node.js 12.22.5 (LTS)
Node.js 12.22.5 (LTS) addresses vulnerabilities involving domain-name handling, HTTP/2 stream cancellation, and HTTPS certificate validation.
Announced Source revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
CVE-2021-3672/CVE-2021-22931: Improper handling of untypical characters in domain names (High)
Node.js
Node.js 12.22.5 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 12.22.5
Node.js 12.22.5 (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2021-3672
CVE-2021-3672/CVE-2021-22931
CVE-2021-22931CVE-2021-3672/CVE-2021-22931
CVE-2021-22940CVE-2021-22940: Use after free on close http2 on stream canceling (High)
CVE-2021-22939CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (Low)
Publisher severity
No explicit severity was extracted.
- Event
- #37020 · Revision 1
- Added to Heist Feed
- Publisher date