UnratedFix available
Node.js 14.16.0 (LTS)
Node.js 14.16.0 (LTS) fixes vulnerabilities involving HTTP/2, DNS rebinding in the inspector, and OpenSSL.
Announced Source revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion
Node.js
Node.js 14.16.0 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 14.16.0
Node.js 14.16.0 (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2021-22883
CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion
CVE-2021-22884CVE-2021-22884: DNS rebinding in --inspect
CVE-2021-23840CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
Publisher severity
No explicit severity was extracted.
- Event
- #40563 · Revision 1
- Added to Heist Feed
- Publisher date