Alpine/nodejs-current: high 8.1

napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.

Action: Upgrade nodejs-current to 14.4.0-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2020-8174#Alpine:v3.14/nodejs-current
• https://security.alpinelinux.org/vuln/CVE-2020-8174

published 2020-07-24T22:15:12.280Z · modified 2026-11-03T06:32:26.420545446Z · JSON