Vulnerabilities

• Aug 09Wednesday August 9th 2023 Security Releases
• Jun 20Tuesday June 20 2023 Security Releases
• Feb 16Thursday February 16 2023 Security Releases
• Dec 16OpenSSL 3.0.7 update assessment
• Nov 01Nov 3 2022 Security Releases
• Oct 28OpenSSL November Security Release
• Oct 24OpenSSL and zlib update assessment, and Node.js Assessment workflow
• Sep 15September 23rd 2022 Security Releases
• Jul 07July 7th 2022 Security Releases
• Jun 21OpenSSL update assessment, and Node.js project plans
• May 05OpenSSL update assessment, and Node.js project plans
• Mar 18OpenSSL security releases require Node.js security releases
• Jan 11January 10th 2022 Security Releases
• Oct 12October 12th 2021 Security Releases
• Aug 31August 31 2021 Security Releases
• Aug 11August 2021 Security Releases
• Jul 29July 2021 Security Releases
• Jul 01July 2021 Security Releases
• Apr 06April 2021 Security Releases
• Feb 23February 2021 Security Releases
• Jan 04January 2021 Security Releases
• Nov 16November 2020 Security Releases
• Sep 15September 2020 Security Releases
• Jun 02June 2020 Security Releases
• Apr 21OpenSSL security releases do not require Node.js security releases
• Feb 06February 2020 Security Releases
• Dec 18December 2019 Security Releases
• Sep 12OpenSSL security releases do not require Node.js security releases
• Sep 05OpenSSL security releases may require Node.js security releases
• Aug 16August 2019 Security Releases
• Feb 28February 2019 Security Releases
• Nov 28November 2018 Security Releases
• Aug 11August 2018 Security Releases
• Jun 12June 2018 Security Releases
• Mar 21March 2018 Security Releases
• Jan 08Meltdown and Spectre - Impact On Node.js
• Dec 08Data Confidentiality/Integrity Vulnerability, December 2017
• Oct 30OpenSSL update, 1.0.2m
• Oct 24DOS security vulnerability, October 2017
• Sep 29Path validation vulnerability, September 2017
• Jul 11Security updates for all active release lines, July 2017
• Jan 27OpenSSL update, 1.0.2k
• Oct 15October security releases and v6 LTS "Boron" security inclusions
• Sep 23Security updates for all active release lines, September 2016
• Jun 13Security updates for all active release lines, June 2016
• May 02OpenSSL updates, 1.0.1t and 1.0.2h
• Mar 31npm security updates v2.15.1 and v3.8.3
• Feb 29OpenSSL updates, 1.0.2g and 1.0.1s
• Feb 09February 2016 Security Release Summary
• Jan 27OpenSSL upgrade low-severity Node.js security fixes
• Dec 04December Security Release Summary
• Dec 01December Security Release Schedule Update
• Nov 25CVE-2015-8027 Denial of Service Vulnerability / CVE-2015-6764 V8 Out-of-bounds Access Vulnerability
• Jul 31V8 Memory Corruption and Stack Overflow (fixed in Node v0.8.28 and v0.10.30)
• Jun 16OpenSSL and Breaking UTF-8 Change (fixed in Node v0.8.27 and v0.10.29)
• Oct 22DoS Vulnerability (fixed in Node v0.8.26 and v0.10.21)
• May 07HTTP Server Security Vulnerability: Please upgrade to 0.6.17