Node.js’ Post

Stay tuned

🚨 Security release pre-alert: We will release new versions of v16, v18 and v20 release lines on or shortly after August 8, 2023. This will address: - 3 high severity issues - 3 moderate severity issues - 2 low severity issues https://hubs.la/Q01Zrmft0

Stay tuned

🚨 Security release pre-alert: We will release new versions of the 18.x, 20.x and, 21.x releases lines on or shortly after, Tuesday February 6, 2024. This will address: 4 high severity issues 4 medium severity issues 1 low severity issue Details: https://hubs.la/Q02j8YdR0

Stay tuned

🚨 Security release pre-alert: We will release new versions of the 18.x, 20.x and, 21.x releases lines on or shortly after, Tuesday February 6, 2024. This will address: 4 high severity issues 4 medium severity issues 1 low severity issue Details: https://hubs.la/Q02j8RwQ0

new version of Node.js 💚

Be prepared to patch high-severity vulnerability in curl and libcurl. Though some might think of it as Log4j reloaded but it is not. Normal OS updates should take care of it that makes it different from Log4j that was deeply embedded with no direct update capability. One of the key attack surfaces will be in docker base images that aren’t receiving updates and which happen to have an application that leverages the vulnerable libcurl. Only time will tell how critical this vulnerably is once more details follows. https://lnkd.in/eVhAF6qX

A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise.