First published: Tue Nov 08 2022(Updated: )
Hi upstream just released nodejs 14.21.1 to fix <a href="https://access.redhat.com/security/cve/CVE-2022-43548">CVE-2022-43548</a> <a href="https://github.com/nodejs/node/releases/tag/v14.21.1">https://github.com/nodejs/node/releases/tag/v14.21.1</a> <a href="https://nodejs.org/en/blog/release/v18.12.1/">https://nodejs.org/en/blog/release/v18.12.1/</a> <a href="https://nodejs.org/en/blog/release/v16.18.1/">https://nodejs.org/en/blog/release/v16.18.1/</a>
Affected Software | Affected Version | How to fix |
---|---|---|
Node.js |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
REDHAT-BUG-2140911 addresses a critical security vulnerability that impacts the safety of Node.js applications.
To fix REDHAT-BUG-2140911, upgrade your Node.js installation to version 14.21.1 or later.
Versions of Node.js prior to 14.21.1 are affected by REDHAT-BUG-2140911.
Yes, REDHAT-BUG-2140911 was released to address the vulnerability outlined in CVE-2022-43548.
The fix for REDHAT-BUG-2140911 was released on August 2, 2023.