nodejs-sec

1–30 of 55

0 selected

Feb 16

Node.js security upates for all active release lines, February 2023

The planned security releases are now available. You can read more about the details in https://

unread,

Node.js security upates for all active release lines, February 2023

The planned security releases are now available. You can read more about the details in https://

Feb 16

soyjua...@gmail.com2

11/4/22

Node.js security updates for all active release lines, November 2022

The Node.js project has now released new versions of all supported release lines. For more

unread,

Node.js security updates for all active release lines, November 2022

The Node.js project has now released new versions of all supported release lines. For more

11/4/22

Vladimir de Turckheim

9/23/22

Node.js security updates for all active release lines, September 2022

The Node.js project has now released new versions of all supported release lines. For more

unread,

Node.js security updates for all active release lines, September 2022

The Node.js project has now released new versions of all supported release lines. For more

9/23/22

Vladimir de Turckheim

9/22/22

[Postponed] Node.js security updates for all active release lines, September 2022

Some fixes of the security releases have been recently updated and the Node.js security team still

unread,

[Postponed] Node.js security updates for all active release lines, September 2022

Some fixes of the security releases have been recently updated and the Node.js security team still

9/22/22

Vladimir de Turckheim

9/15/22

Node.js security updates for all active release lines, Month Year

The Node.js project will release new versions of all supported release lines on or shortly after

unread,

Node.js security updates for all active release lines, Month Year

The Node.js project will release new versions of all supported release lines on or shortly after

9/15/22

Matteo Collina3

7/7/22

Node.js security updates for all active release lines, July 2022

The Node.js project has now released new versions of all supported release lines. For more

unread,

Node.js security updates for all active release lines, July 2022

The Node.js project has now released new versions of all supported release lines. For more

7/7/22

6/21/22

OpenSSL June 21 release - assessment

Please see the following blog post for the Node.js project's assessment of the recent OpenSSL

unread,

OpenSSL June 21 release - assessment

Please see the following blog post for the Node.js project's assessment of the recent OpenSSL

6/21/22

5/5/22

OpenSSL update assessment, and Node.js project plans

Please see the following blog post for the Node.js project's assessment of the recent OpenSSL

unread,

OpenSSL update assessment, and Node.js project plans

Please see the following blog post for the Node.js project's assessment of the recent OpenSSL

5/5/22

3/17/22

Node.js security updates for all active release lines, March 2022

The Node.js project has now released new versions of all supported release lines. For more

unread,

Node.js security updates for all active release lines, March 2022

The Node.js project has now released new versions of all supported release lines. For more

3/17/22

1/10/22

Node.js security updates for all active release lines, January 2022

The Node.js project has now released new versions of all supported release lines. For more

unread,

Node.js security updates for all active release lines, January 2022

The Node.js project has now released new versions of all supported release lines. For more

1/10/22

12/16/21

Node.js team assessment of OpenSSL Security Advisory for OpenSSL 3.0.1 (CVE-2021-4044).

The link for the CVE was incorrect in the original post. Here is an updated version: ----------------

unread,

Node.js team assessment of OpenSSL Security Advisory for OpenSSL 3.0.1 (CVE-2021-4044).

The link for the CVE was incorrect in the original post. Here is an updated version: ----------------

12/16/21

11/2/21

Node.js project review of CVE-2021-42574 and CVE-2021-42694

For those who asked for more details about the script referenced, it is now also available in GitHub

unread,

Node.js project review of CVE-2021-42574 and CVE-2021-42694

For those who asked for more details about the script referenced, it is now also available in GitHub

11/2/21

Matteo Collina2

10/12/21

Node.js security updates for all active release lines, October 2021

The Node.js project has now released new versions of all supported release lines. For more

unread,

Node.js security updates for all active release lines, October 2021

The Node.js project has now released new versions of all supported release lines. For more

10/12/21

Daniel Bevenius2

8/31/21

Node.js security updates for versions 12.x, and 14.x releases lines, August 31 2021

The Node.js project has now released new versions of v14, and v12 release lines. For more information

unread,

Node.js security updates for versions 12.x, and 14.x releases lines, August 31 2021

The Node.js project has now released new versions of v14, and v12 release lines. For more information

8/31/21

8/11/21

Node.js security updates for all active release lines, August 2021

The Node.js project has now released new versions of all supported release lines. For more

unread,

Node.js security updates for all active release lines, August 2021

The Node.js project has now released new versions of all supported release lines. For more

8/11/21

Daniel Bevenius

7/30/21

Security updates for all active release lines, 30 July 2021

Updates are now available for v16.x, v14.x, and v12.x Node.js release lines. We normally like to give

unread,

Security updates for all active release lines, 30 July 2021

Updates are now available for v16.x, v14.x, and v12.x Node.js release lines. We normally like to give

7/30/21

Daniel Bevenius3

7/1/21

Security updates for all active release lines, July 2021

Sorry, I made a mistake with the url and the correct one is (the same as is the first message in this

unread,

Security updates for all active release lines, July 2021

Sorry, I made a mistake with the url and the correct one is (the same as is the first message in this

7/1/21

Daniel Bevenius

4/30/21

CVE-2020-1604 information

Based on internal discussions, we believe that Node.js is not affected by CVE-2020-16040. This

unread,

CVE-2020-1604 information

Based on internal discussions, we believe that Node.js is not affected by CVE-2020-16040. This

4/30/21

Daniel Bevenius3

4/7/21

Security updates for all active release lines, April 2021

There was a mistake in the previous post with regards to the following download link for Node v15. It

unread,

Security updates for all active release lines, April 2021

There was a mistake in the previous post with regards to the following download link for Node v15. It

4/7/21

Daniel Bevenius2

2/23/21

Security updates for all active release lines, February 2021

## _(Update 23-Feb-2021)_ Security releases available Updates are now available for v10.x, v12.x, v14

unread,

Security updates for all active release lines, February 2021

## _(Update 23-Feb-2021)_ Security releases available Updates are now available for v10.x, v12.x, v14

2/23/21

2/10/21

Node.js team assessment of CVE-2021-21148

Based on internal discussion and consultation with the V8 team, we believe that Node.js is NOT

unread,

Node.js team assessment of CVE-2021-21148

Based on internal discussion and consultation with the V8 team, we believe that Node.js is NOT

2/10/21

1/4/21

Security updates for all active release lines, January 2021

## _(Update 4-Jan-2021)_ Security releases available Updates are now available for v10,x, v12.x, v14.

unread,

Security updates for all active release lines, January 2021

## _(Update 4-Jan-2021)_ Security releases available Updates are now available for v10,x, v12.x, v14.

1/4/21

11/16/20

Security releases for 15.x, 14.x and 12.x release lines

## _(Update 16-Nov-2020)_ Security releases available Updates are now available for v12.x, v14.x and

unread,

Security releases for 15.x, 14.x and 12.x release lines

## _(Update 16-Nov-2020)_ Security releases available Updates are now available for v12.x, v14.x and

11/16/20

Michael Dawson2

9/15/20

Security updates for all active release lines, September 2020

Updates are now available for v10,x, v12.x and v14.x Node.js release lines for the following issues.

unread,

Security updates for all active release lines, September 2020

Updates are now available for v10,x, v12.x and v14.x Node.js release lines for the following issues.

9/15/20

6/2/20

Security updates to all supported release lines on or shortly after Tuesday, June 2nd, 2020

Updates are now available for all supported Node.js release lines for the following issues. ### TLS

unread,

Security updates to all supported release lines on or shortly after Tuesday, June 2nd, 2020

Updates are now available for all supported Node.js release lines for the following issues. ### TLS

6/2/20

2/6/20

Security updates for all active release lines, February 2020

## _(Update 6-February-2020)_ Security releases available Updates are now available for all active

unread,

Security updates for all active release lines, February 2020

## _(Update 6-February-2020)_ Security releases available Updates are now available for all active

2/6/20

Michael Dawson, Sam Roberts3

12/17/19

Security updates for all active release lines, December 2019

## Update 18-December-2019: Releases available These releases update npm to v6.13.4 to address three

unread,

Security updates for all active release lines, December 2019

## Update 18-December-2019: Releases available These releases update npm to v6.13.4 to address three

12/17/19

9/12/19

OpenSSL releases may require Node.js security releases

### Summary The OpenSSL Security releases of September 10th, 2019 do not affect Node.js. ### Analysis

unread,

OpenSSL releases may require Node.js security releases

### Summary The OpenSSL Security releases of September 10th, 2019 do not affect Node.js. ### Analysis

9/12/19

8/16/19

Security updates for all active release lines, August 2019

Node.js, as well as many other implementations of HTTP/2, have been found vulnerable to Denial of

unread,

Security updates for all active release lines, August 2019

Node.js, as well as many other implementations of HTTP/2, have been found vulnerable to Denial of

8/16/19

2/28/19

Security updates for all active release lines, February 2019

Updates are now available for all active Node.js release lines. In addition to fixes for security

unread,

Security updates for all active release lines, February 2019

Updates are now available for all active Node.js release lines. In addition to fixes for security

2/28/19

Search

Clear search

Close search

Google apps

Main menu