(Update 4-Jan-2021) Security releases available Updates are now available for v10,x, v12.x, v14.x and v15.x Node.js release lines for the following issues. In addition to the vulnerabilities listed below, these releases also include an update to npm in order to resolve an issue that was reported against npm by security Read more…
(Update 16-Nov-2020) Security releases available Updates are now available for v12.x, v14.x and v15.x Node.js release lines for the following issues. Denial of Service through DNS request (CVE-2020-8277) A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial Read more…
(Update 15-Sept-2020) Security releases available Updates are now available for v10,x, v12.x and v14.x Node.js release lines for the following issues. HTTP Request Smuggling due to CR-to-Hyphen conversion (High) (CVE-2020-8201) Affected Node.js versions converted carriage returns in HTTP request headers to a hyphen before parsing. This can lead to HTTP Read more…
Node JS 9.2.0 This package is likely a meta/virtual (*) or an installer (*.install) or portable (*.portable) application package. Meta/virtual (*) – has a dependency on the *.install or the *.portable package – it is provided for discoverability and for other packages to take a dependency on. Portable (*.portable/*.commandline (deprecated Read more…
