Node.js v14.17.4 and v12.22.4 released!

[NewsBot]

Node.js v14.17.4 and v12.22.4 has been released.

This is a security release.

Notable Changes

• CVE-2021-22930: Use after free on close http2 on stream canceling (High)
  • Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior. You can read more about it in CVE - CVE-2021-22930

This releases also fixes some regressions with internationalization introduced by the ICU updates in Node.js 14.17.0 and …

Link: Release 2021-07-29, Version 14.17.4 'Fermium' (LTS), @richardlau · nodejs/node · GitHub

This is a security release.

Notable Changes

• CVE-2021-22930: Use after free on close http2 on stream canceling (High)
  • Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior. You can read more about it in CVE - CVE-2021-22930

Commits

• [499e56babe] - build: fix label-pr workflow (M…

Link: https://github.com/nodejs/node/releases/tag/v12.22.4