nodejs-april-2024-security-releases: Wednesday, April 3, 2024 Security Releases
Updates are now available for the v18.x, v20.x and 21.x Node.js release lines for the following issues.
This security release includes the following dependency updates to address public vulnerabilities:
llhttp version 9.2.1 on 21.x, 20.x, and 18.x
undici version 6.11.1 on 21.x
undici version 5.28.4 on 18.x and 20.x
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
llhttpto a version that resolves this vulnerability.Fixed in 9.2.1 - Upgrade
Upgrade
undicito a version that resolves this vulnerability.Fixed in 5.28.4 - Upgrade
Upgrade
undicito a version that resolves this vulnerability.Fixed in 6.11.1
Event History
Frequently Asked Questions
Which Node.js release lines received these dependency updates?
Updates are available for the v18.x, v20.x, and v21.x Node.js release lines.
Which dependency versions are included in the updates?
llhttp is updated to version 9.2.1 on Node.js 18.x, 20.x, and 21.x. undici is updated to 6.11.1 on 21.x and to 5.28.4 on 18.x and 20.x.