UnratedFix available

Node.js 12.22.2 (LTS)

Type: patchSource: Node.js announcements1 source record

Node.js 12.22.2 fixes multiple listed vulnerabilities, including out-of-bounds read, Windows local privilege escalation, and denial-of-service flaws in npm dependencies.

Announced 1 Jul 2021Source revision 1

Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

Vulnerabilities fixed: CVE-2021-22918: libuv upgrade - Out of bounds read (Medium)

Node.js

Node.js 12.22.2 (LTS)

Affected versions: Not stated in this extraction
Fixed versions: 12.22.2
Node.js 12.22.2 (LTS)
Prerequisites: Not stated in this extraction

Related CVEs: CVE-2021-22918
CVE-2021-22918: libuv upgrade
CVE-2021-22921
CVE-2021-22921: Windows installer - Node Installer Local Privilege Escalation (Medium)
CVE-2021-27290
CVE-2021-27290: npm upgrade - ssri Regular Expression Denial of Service (ReDoS) (High)
CVE-2021-23362
CVE-2021-23362: npm upgrade - hosted-git-info Regular Expression Denial of Service (ReDoS) (Medium)

Publisher severity

No explicit severity was extracted.

Event: #38384 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 10:28:22 GMT
Publisher date: Thu, 01 Jul 2021 15:42:17 GMT

Read the original announcement