Node.js Multiple Vulnerabilities

Release Date: 13 Aug 2021 5337 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

Multiple vulnerabilities have been identified in Node.js, a remote user can exploit these vulnerabilities to trigger cross-site scripting, denial of service condition, remote code execution and security restriction bypass on the targeted system.

Impact

Cross-Site Scripting
Denial of Service
Remote Code Execution
Security Restriction Bypass

System / Technologies affected

Node.js versions 16.x, 14.x, and 12.x

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:
https://nodejs.org/en/blog/vulnerability/aug-2021-security-releases/

Vulnerability Identifier

Source

nodejs