UnratedFix available
Node.js 10.15.2 (LTS)
Node.js 10.15.2 addresses a Slowloris HTTP denial-of-service vulnerability by applying the receive timeout consistently to keep-alive connections.
Announced Source revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This is a security release.
Node.js
Node.js 10.15.2 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 10.15.2
Node.js 10.15.2 (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2019-5737
Node.js: Slowloris HTTP Denial of Service with keep-alive (CVE-2019-5737)
Publisher severity
No explicit severity was extracted.
- Event
- #50938 · Revision 1
- Added to Heist Feed
- Publisher date