Alpine/nodejs: high 8.1

napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.

Action: Upgrade nodejs to 12.18.0-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2020-8174#Alpine:v3.17/nodejs
• https://security.alpinelinux.org/vuln/CVE-2020-8174

published 2020-07-24T22:15:12.280Z · modified 2026-09-11T10:17:51.449160598Z · JSON