tocsin

Debian/nodejs: high 7.4

Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL which are unpatched are vulnerable to the Marvin Attack - https://people.redhat.com

Action: Upgrade nodejs to 18.20.4+dfsg-1~deb12u1 or later.

Affected

introducedfixedlast affected
018.20.4+dfsg-1~deb12u1-

Fixed versions

18.20.4+dfsg-1~deb12u1

Sources

published · modified · JSON