Node.js v10.24.0 released!

[NewsBot]

Node.js v10.24.0 has been released.

This is a security release.

Notable changes

Vulnerabilities fixed:

• CVE-2021-22883: HTTP2 ‘unknownProtocol’ cause Denial of Service by resource exhaustion
  • Affected Node.js versions are vulnerable to denial of service attacks when too many connection attempts with an ‘unknownProtocol’ are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the proces…

Link: Release 2021-02-23, Version 10.24.0 'Dubnium' (LTS), @richardlau · nodejs/node · GitHub

[bot]

Corresponding tweet for this thread:

Devtalk (dev_talk)

Share link for this tweet.