Groups
Conversations
All groups and messages
Send feedback to Google
Help
Account
Search
Maps
YouTube
Play
News
Gmail
Meet
Chat
Contacts
Drive
Calendar
Translate
Photos
Duo
Chrome
Shopping
Finance
Docs
Sheets
Slides
Books
Blogger
Hangouts
Keep
Jamboard
Earth
Collections
Arts and Culture
Google Ads
Podcasts
Stadia
Travel
Forms
More from Google
Sign in
Groups
nodejs-sec
Conversations
About
nodejs-sec
1–30 of 40
Mark all as read
Report abusive group
0 selected
Daniel Bevenius
Jul 30
Security updates for all active release lines, 30 July 2021
Updates are now available for v16.x, v14.x, and v12.x Node.js release lines. We normally like to give
unread,
Security updates for all active release lines, 30 July 2021
Updates are now available for v16.x, v14.x, and v12.x Node.js release lines. We normally like to give
Jul 30
Daniel Bevenius
3
Jul 1
Security updates for all active release lines, July 2021
Sorry, I made a mistake with the url and the correct one is (the same as is the first message in this
unread,
Security updates for all active release lines, July 2021
Sorry, I made a mistake with the url and the correct one is (the same as is the first message in this
Jul 1
Daniel Bevenius
Apr 30
CVE-2020-1604 information
Based on internal discussions, we believe that Node.js is not affected by CVE-2020-16040. This
unread,
CVE-2020-1604 information
Based on internal discussions, we believe that Node.js is not affected by CVE-2020-16040. This
Apr 30
Daniel Bevenius
3
Apr 7
Security updates for all active release lines, April 2021
There was a mistake in the previous post with regards to the following download link for Node v15. It
unread,
Security updates for all active release lines, April 2021
There was a mistake in the previous post with regards to the following download link for Node v15. It
Apr 7
Daniel Bevenius
2
Feb 23
Security updates for all active release lines, February 2021
## _(Update 23-Feb-2021)_ Security releases available Updates are now available for v10.x, v12.x, v14
unread,
Security updates for all active release lines, February 2021
## _(Update 23-Feb-2021)_ Security releases available Updates are now available for v10.x, v12.x, v14
Feb 23
midawson
Feb 10
Node.js team assessment of CVE-2021-21148
Based on internal discussion and consultation with the V8 team, we believe that Node.js is NOT
unread,
Node.js team assessment of CVE-2021-21148
Based on internal discussion and consultation with the V8 team, we believe that Node.js is NOT
Feb 10
midawson
2
Jan 4
Security updates for all active release lines, January 2021
## _(Update 4-Jan-2021)_ Security releases available Updates are now available for v10,x, v12.x, v14.
unread,
Security updates for all active release lines, January 2021
## _(Update 4-Jan-2021)_ Security releases available Updates are now available for v10,x, v12.x, v14.
Jan 4
midawson
2
11/16/20
Security releases for 15.x, 14.x and 12.x release lines
## _(Update 16-Nov-2020)_ Security releases available Updates are now available for v12.x, v14.x and
unread,
Security releases for 15.x, 14.x and 12.x release lines
## _(Update 16-Nov-2020)_ Security releases available Updates are now available for v12.x, v14.x and
11/16/20
Michael Dawson
2
9/15/20
Security updates for all active release lines, September 2020
Updates are now available for v10,x, v12.x and v14.x Node.js release lines for the following issues.
unread,
Security updates for all active release lines, September 2020
Updates are now available for v10,x, v12.x and v14.x Node.js release lines for the following issues.
9/15/20
Sam Roberts
2
6/2/20
Security updates to all supported release lines on or shortly after Tuesday, June 2nd, 2020
Updates are now available for all supported Node.js release lines for the following issues. ### TLS
unread,
Security updates to all supported release lines on or shortly after Tuesday, June 2nd, 2020
Updates are now available for all supported Node.js release lines for the following issues. ### TLS
6/2/20
Sam Roberts
2
2/6/20
Security updates for all active release lines, February 2020
## _(Update 6-February-2020)_ Security releases available Updates are now available for all active
unread,
Security updates for all active release lines, February 2020
## _(Update 6-February-2020)_ Security releases available Updates are now available for all active
2/6/20
Michael Dawson
,
Sam Roberts
3
12/17/19
Security updates for all active release lines, December 2019
## Update 18-December-2019: Releases available These releases update npm to v6.13.4 to address three
unread,
Security updates for all active release lines, December 2019
## Update 18-December-2019: Releases available These releases update npm to v6.13.4 to address three
12/17/19
Sam Roberts
2
9/12/19
OpenSSL releases may require Node.js security releases
### Summary The OpenSSL Security releases of September 10th, 2019 do not affect Node.js. ### Analysis
unread,
OpenSSL releases may require Node.js security releases
### Summary The OpenSSL Security releases of September 10th, 2019 do not affect Node.js. ### Analysis
9/12/19
Sam Roberts
3
8/16/19
Security updates for all active release lines, August 2019
Node.js, as well as many other implementations of HTTP/2, have been found vulnerable to Denial of
unread,
Security updates for all active release lines, August 2019
Node.js, as well as many other implementations of HTTP/2, have been found vulnerable to Denial of
8/16/19
Rod Vagg
2
2/28/19
Security updates for all active release lines, February 2019
Updates are now available for all active Node.js release lines. In addition to fixes for security
unread,
Security updates for all active release lines, February 2019
Updates are now available for all active Node.js release lines. In addition to fixes for security
2/28/19
Rod Vagg
2
11/27/18
Security updates for all active release lines, November 2018
Summary Updates are now available for all active Node.js release lines. These include fixes for the
unread,
Security updates for all active release lines, November 2018
Summary Updates are now available for all active Node.js release lines. These include fixes for the
11/27/18
Rod Vagg
2
8/15/18
Security updates for all active release lines, August 2018
Security releases available Summary Updates are now available for all active Node.js release lines.
unread,
Security updates for all active release lines, August 2018
Security releases available Summary Updates are now available for all active Node.js release lines.
8/15/18
Michael Dawson
2
6/12/18
Security updates for all active release lines, June 2018
Summary Updates are now available for all active Node.js release lines. These include the fix for the
unread,
Security updates for all active release lines, June 2018
Summary Updates are now available for all active Node.js release lines. These include the fix for the
6/12/18
Rod Vagg
2
3/28/18
March 2018 Node.js Security Releases
March 2018 Node.js security releases are now available. See below for full disclosure of the
unread,
March 2018 Node.js Security Releases
March 2018 Node.js security releases are now available. See below for full disclosure of the
3/28/18
Michael Dawson
1/9/18
Meltdown and Spectre - Impact On Node.js
Summary Project zero has recently announced some new attacks that have received a lot of attention:
unread,
Meltdown and Spectre - Impact On Node.js
Summary Project zero has recently announced some new attacks that have received a lot of attention:
1/9/18
Michael Dawson
3
12/8/17
Security updates for all active release lines, December 2017
The build for ARMv6 for v8.9.3 is now available. On Friday, December 8, 2017 at 11:49:24 AM UTC-5,
unread,
Security updates for all active release lines, December 2017
The build for ARMv6 for v8.9.3 is now available. On Friday, December 8, 2017 at 11:49:24 AM UTC-5,
12/8/17
Rod Vagg
,
Rod Vagg
3
11/8/17
OpenSSL update, 1.0.2m
Node.js Releases containing OpenSSL 1.0.2m Releases were made available for active lines yesterday,
unread,
OpenSSL update, 1.0.2m
Node.js Releases containing OpenSSL 1.0.2m Releases were made available for active lines yesterday,
11/8/17
Michael Dawson
2
10/24/17
Security updates for all active release lines, October 2017
Summary Updates are now available for all active Node.js release lines. These include the fix for the
unread,
Security updates for all active release lines, October 2017
Summary Updates are now available for all active Node.js release lines. These include the fix for the
10/24/17
Michael Dawson
,
Michael Dawson
3
9/29/17
Path Validation Vunerability
The CVE has been assigned as CVE-2017-14849. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-
unread,
Path Validation Vunerability
The CVE has been assigned as CVE-2017-14849. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-
9/29/17
Michael Dawson
3
7/25/17
Security updates for all active release lines, July 2017
The CVE for the Constant Hashtable Seeds vulnerability has now been assigned. It is CVE-2017-11499.
unread,
Security updates for all active release lines, July 2017
The CVE for the Constant Hashtable Seeds vulnerability has now been assigned. It is CVE-2017-11499.
7/25/17
Rod Vagg
2
2/1/17
OpenSSL update, 1.0.2k
Security updates are now available for all active Node.js release lines. The following releases are
unread,
OpenSSL update, 1.0.2k
Security updates are now available for all active Node.js release lines. The following releases are
2/1/17
Rod Vagg
11/23/16
Windows 10 console output buffer overflow (libuv CVE-2016-9551)
Please be aware that Node.js v7.2.0 was released today and includes a small security update arising
unread,
Windows 10 console output buffer overflow (libuv CVE-2016-9551)
Please be aware that Node.js v7.2.0 was released today and includes a small security update arising
11/23/16
Rod Vagg
2
10/18/16
October security releases and v6 LTS "Boron" security inclusions
Updates are now available for all active Node.js release lines. The following releases all contain
unread,
October security releases and v6 LTS "Boron" security inclusions
Updates are now available for all active Node.js release lines. The following releases all contain
10/18/16
Rod Vagg
4
9/30/16
[nodejs-sec] Security updates for all active release lines, September 2016
Correction for the correction: Please disregard my last post. We've determined that in fact CVE-
unread,
[nodejs-sec] Security updates for all active release lines, September 2016
Correction for the correction: Please disregard my last post. We've determined that in fact CVE-
9/30/16
Rod Vagg
3
6/23/16
Security updates for all active release lines, June 2016
Releases available After a thorough assessment of the fixes we were planning on including, we have
unread,
Security updates for all active release lines, June 2016
Releases available After a thorough assessment of the fixes we were planning on including, we have
6/23/16
