Node.js — June 2020 Security Releases

(Update 2-June-2020) Security releases available Updates are now available for all supported Node.js release lines for the following issues. TLS session reuse can lead to host certificate verification bypass (High) (CVE-2020-8172) The 'session' event could be emitted before the 'secureConnect' event. It should not be, because the connection may fail to be authorized. If it was saved an authorized

[efcl]

Node.jsのセキュリティアップデートそれぞれのバージョンがアップデートされている - Node.js v10.21.0 (LTS) - Node.js v12.18.0 (LTS) - Node.js v14.4.0 (Current)

[tmatsuu]

Node.js、2020-06-02に重大(High)な脆弱性修正リリースを予告。10.x, 12.x, 14.x向けに。