UnratedFix available
February 2021 Security Releases
Security updates address denial-of-service, DNS rebinding, and OpenSSL integer-overflow vulnerabilities affecting Node.js release lines 10.x, 12.x, 14.x, and 15.x.
Announced Source revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Security releases available Updates are now available for v10.x, v12.x, v14.x and v15.x Node.js release lines for the following issues.
Node.js
Node.js v10.24.0 (LTS)
- Affected versions
- All versions of the 15.x, 14.x, 12.x and 10.x releases lines
Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines
- Fixed versions
- Node.js v10.24.0 (LTS)
Node.js v10.24.0 (LTS)
Node.js v12.21.0 (LTS)Node.js v12.21.0 (LTS)
Node.js v14.16.0 (LTS)Node.js v14.16.0 (LTS)
Node.js v15.10.0 (Current)Node.js v15.10.0 (Current)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2021-22883
HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (Critical) (CVE-2021-22883)
CVE-2021-22884DNS rebinding in --inspect (CVE-2021-22884)
CVE-2021-23840OpenSSL - Integer overflow in CipherUpdate (CVE-2021-23840)
Publisher severity
No explicit severity was extracted.
- Event
- #40477 · Revision 1
- Added to Heist Feed
- Publisher date