Node.js v16.6.2, v14.17.5 and v12.22.5 released!

[NewsBot]

Node.js v16.6.2, v14.17.5 and v12.22.5 has been released.

This is a security release.

Notable Changes

• CVE-2021-3672/CVE-2021-22931: Improper handling of untypical characters in domain names (High)
  • Node.js was vulnerable to Remote Code Execution, XSS, application crashes due to missing input validation of hostnames returned by Domain Name Servers in the Node.js DNS library which can lead to the output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library. You can read mor…

Link: Release 2021-08-11, Version 16.6.2 (Current), @BethGriggs · nodejs/node · GitHub

This is a security release.

Notable Changes

• CVE-2021-3672/CVE-2021-22931: Improper handling of untypical characters in domain names (High)
  • Node.js was vulnerable to Remote Code Execution, XSS, application crashes due to missing input validation of hostnames returned by Domain Name Servers in the Node.js DNS library which can lead to the output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library. You can read mor…

Link: Release 2021-08-11, Version 14.17.5 'Fermium' (LTS), @BethGriggs · nodejs/node · GitHub

This is a security release.

Notable Changes

• CVE-2021-3672/CVE-2021-22931: Improper handling of untypical characters in domain names (High)
  • Node.js was vulnerable to Remote Code Execution, XSS, application crashes due to missing input validation of hostnames returned by Domain Name Servers in the Node.js DNS library which can lead to the output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library. You can read mor…

Link: Release 2021-08-11, Version 12.22.5 'Erbium' (LTS), @BethGriggs · nodejs/node · GitHub