UnratedFix available

Node.js 12.21.0 (LTS)

Type: patchSource: Node.js announcements1 source record

Node.js 12.21.0 (LTS) includes fixes for vulnerabilities involving HTTP/2 resource exhaustion, DNS rebinding in the inspector, and an OpenSSL integer overflow.

Announced 23 Feb 2021Source revision 1

Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion

Node.js

Node.js 12.21.0 (LTS)

Affected versions: Not stated in this extraction
Fixed versions: 12.21.0
Node.js 12.21.0 (LTS)
Prerequisites: Not stated in this extraction

Related CVEs: CVE-2021-22883
CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion
CVE-2021-22884
CVE-2021-22884: DNS rebinding in --inspect
CVE-2021-23840
CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate

Publisher severity

No explicit severity was extracted.

Event: #40700 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 11:07:24 GMT
Publisher date: Tue, 23 Feb 2021 13:01:45 GMT

Read the original announcement