Vulnerabilities

• 16 Feb 23Thursday February 16 2023 Security Releases
• 16 Dec 22OpenSSL 3.0.7 update assessment
• 01 Nov 22Nov 3 2022 Security Releases
• 28 Oct 22OpenSSL November Security Release
• 24 Oct 22OpenSSL and zlib update assessment, and Node.js Assessment workflow
• 15 Sep 22September 23rd 2022 Security Releases
• 07 Jul 22July 7th 2022 Security Releases
• 21 Jun 22OpenSSL update assessment, and Node.js project plans
• 05 May 22OpenSSL update assessment, and Node.js project plans
• 18 Mar 22OpenSSL security releases require Node.js security releases
• 11 Jan 22January 10th 2022 Security Releases
• 12 Oct 21October 12th 2021 Security Releases
• 31 Aug 21August 31 2021 Security Releases
• 11 Aug 21August 2021 Security Releases
• 29 Jul 21July 2021 Security Releases
• 01 Jul 21July 2021 Security Releases
• 06 Apr 21April 2021 Security Releases
• 23 Feb 21February 2021 Security Releases
• 04 Jan 21January 2021 Security Releases
• 16 Nov 20November 2020 Security Releases
• 15 Sep 20September 2020 Security Releases
• 02 Jun 20June 2020 Security Releases
• 21 Apr 20OpenSSL security releases do not require Node.js security releases
• 06 Feb 20February 2020 Security Releases
• 18 Dec 19December 2019 Security Releases
• 12 Sep 19OpenSSL security releases do not require Node.js security releases
• 05 Sep 19OpenSSL security releases may require Node.js security releases
• 16 Aug 19August 2019 Security Releases
• 28 Feb 19February 2019 Security Releases
• 28 Nov 18November 2018 Security Releases
• 11 Aug 18August 2018 Security Releases
• 12 Jun 18June 2018 Security Releases
• 21 Mar 18March 2018 Security Releases
• 08 Jan 18Meltdown and Spectre - Impact On Node.js
• 08 Dec 17Data Confidentiality/Integrity Vulnerability, December 2017
• 30 Oct 17OpenSSL update, 1.0.2m
• 24 Oct 17DOS security vulnerability, October 2017
• 29 Sep 17Path validation vulnerability, September 2017
• 11 Jul 17Security updates for all active release lines, July 2017
• 27 Jan 17OpenSSL update, 1.0.2k
• 15 Oct 16October security releases and v6 LTS "Boron" security inclusions
• 23 Sep 16Security updates for all active release lines, September 2016
• 13 Jun 16Security updates for all active release lines, June 2016
• 02 May 16OpenSSL updates, 1.0.1t and 1.0.2h
• 31 Mar 16npm security updates v2.15.1 and v3.8.3
• 29 Feb 16OpenSSL updates, 1.0.2g and 1.0.1s
• 09 Feb 16February 2016 Security Release Summary
• 27 Jan 16OpenSSL upgrade low-severity Node.js security fixes
• 04 Dec 15December Security Release Summary
• 01 Dec 15December Security Release Schedule Update
• 25 Nov 15CVE-2015-8027 Denial of Service Vulnerability / CVE-2015-6764 V8 Out-of-bounds Access Vulnerability
• 31 Jul 14V8 Memory Corruption and Stack Overflow (fixed in Node v0.8.28 and v0.10.30)
• 16 Jun 14OpenSSL and Breaking UTF-8 Change (fixed in Node v0.8.27 and v0.10.29)
• 22 Oct 13DoS Vulnerability (fixed in Node v0.8.26 and v0.10.21)
• 07 May 12HTTP Server Security Vulnerability: Please upgrade to 0.6.17