tocsin

Alpine/nodejs: high 7.5

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordin

Action: Upgrade nodejs to 14.16.0-r0 or later.

Affected

introducedfixedlast affected
014.16.0-r0-

Fixed versions

14.16.0-r0

Sources

published · modified · JSON