Alpine/nodejs-current: high 7.4

TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.

Action: Upgrade nodejs-current to 14.4.0-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2020-8172#Alpine:v3.18/nodejs-current
• https://security.alpinelinux.org/vuln/CVE-2020-8172

published 2020-06-08T14:15:13.213Z · modified 2026-11-03T06:32:31.667475452Z · JSON