UnratedFix available

Node.js 15.10.0 (Current)

Type: patchSource: Node.js announcements1 source record

Node.js 15.10.0 fixes vulnerabilities involving HTTP/2 unknownProtocol handling and DNS rebinding in --inspect, and includes an OpenSSL update related to an integer-overflow vulnerability.

Announced 23 Feb 2021Source revision 1

Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

Vulnerabilities fixed: CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion

Node.js

Node.js 15.10.0 (Current)

Affected versions: Not stated in this extraction
Fixed versions: 15.10.0
Node.js 15.10.0 (Current)
Prerequisites: Not stated in this extraction

Related CVEs: CVE-2021-22883
CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion
CVE-2021-22884
CVE-2021-22884: DNS rebinding in --inspect
CVE-2021-23840
CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate

Publisher severity

No explicit severity was extracted.

Event: #40725 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 11:07:44 GMT
Publisher date: Tue, 23 Feb 2021 13:01:31 GMT

Read the original announcement