nodejs-january-2021-security-releases: January 2021 Security Releases
Published Jan 4, 2021
·Updated
Updates are now available for v10,x, v12.x, v14.x and v15.x Node.js release lines for the following issues.
In addition to the vulnerabilities listed below, these releases also include an update to npm in order to resolve an issue that was reported against npm by security scanners even though it was not vulnerable.
Affected Software
1 affected component
OpenJS Foundation Node.js
Event History
Jan 4, 2021
Advisory Published
via Node.js·07:30 PM
Data Sourced
via Node.js·07:30 PM
Description
Frequently Asked Questions
1
Which Node.js deployments need to be reviewed for these updates?
Deployments using the v10.x, v12.x, v14.x, or v15.x Node.js release lines should be reviewed, as updates were made available for each of those lines.
2
Does the npm update in these releases indicate that npm was vulnerable?
No. The npm update addresses an issue reported by security scanners, but npm was not vulnerable according to the release information.