UnratedFix available

Node.js 10.24.1 (LTS)

Type: patchSource: Node.js announcements1 source record

Node.js 10.24.1 fixes vulnerabilities involving OpenSSL and npm’s y18n module.

Announced 6 Apr 2021Source revision 1

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Vulerabilties fixed: CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High)

Node.js 10.24.1 (LTS)

Affected versions: All versions of the 15.x, 14.x, 12.x and 10.x releases lines
Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines
All versions of the 14.x, 12.x and 10.x releases lines
Impacts: All versions of the 14.x, 12.x and 10.x releases lines
Fixed versions: 10.24.1
Node.js 10.24.1 (LTS)
Prerequisites: Not stated in this extraction

Related CVEs: CVE-2021-3450
CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High)
CVE-2021-3449
CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing (High)
CVE-2020-7774
CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)

No explicit severity was extracted.