Alpine/nodejs-current: low 3.1
Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the encoding for the fill value did not match the encoding specified. For example, 'Buffer.alloc(0x100, "This
Action: Upgrade nodejs-current to 9.2.1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.2.1-r0 | - |
Fixed versions
| 9.2.1-r0 |
Sources
- osv: ALPINE-CVE-2017-15897#Alpine:v3.22/nodejs-current
- https://security.alpinelinux.org/vuln/CVE-2017-15897
published · modified · JSON