[SUSE-SU-2021:2824-1] Security update for nodejs12

Severity Important
CVEs 5

Security update for nodejs12

This update for nodejs12 fixes the following issues:

Update to 12.22.5:

  • CVE-2021-3672/CVE-2021-22931: Improper handling of untypical characters in domain names (bsc#1189370, bsc#1188881)
  • CVE-2021-22940: Use after free on close http2 on stream canceling (bsc#1189368)
  • CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (bsc#1189369)
  • CVE-2021-22930: http2: fixes use after free on close http2 on stream canceling (bsc#1188917)
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...