Skip to content
Heist/ feed
UnratedFix available

Node.js 12.18.0 (LTS)

Type: patchSource: Node.js announcements1 source record

Node.js 12.18.0 (LTS) is a security release that fixes three vulnerabilities, including TLS certificate verification bypass, HTTP/2 denial of service, and memory corruption issues.

Announced Source revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

This is a security release. Vulnerabilities fixed: CVE-2020-8172: TLS session reuse can lead to host certificate verification bypass (High). CVE-2020-11080: HTTP/2 Large Settings Frame DoS (Low). CVE-2020-8174: napi_get_value_string_*() allows various kinds of memory corruption (High).

Node.js

Node.js 12.18.0 (LTS)
Affected versions
Not stated in this extraction
Fixed versions
12.18.0
Node.js 12.18.0 (LTS)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2020-8172
CVE-2020-8172: TLS session reuse can lead to host certificate verification bypass (High).
CVE-2020-11080
CVE-2020-11080: HTTP/2 Large Settings Frame DoS (Low).
CVE-2020-8174
CVE-2020-8174: napi_get_value_string_*() allows various kinds of memory corruption (High).

Publisher severity

No explicit severity was extracted.

Event
#45501 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement