Node.js - v16.18.1
Security
This is a security release.
Notable changes
The following CVEs are fixed in this release:
- CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)
More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.
Commits
- [
9ffddd7098
] - inspector: harden IP address validation again (Tobias NieΓen) nodejs-private/node-private#354
Security
Details
date
Nov. 4, 2022, 5:57 p.m.
name
2022-11-04, Version 16.18.1 'Gallium' (LTS), @BethGriggs
type
Patch
official page
π
Register or login to:
- πView and search all Node.js releases.
- π οΈCreate and share lists to track your tools.
- π¨Setup notifications for major, security, feature or patch updates.
- πMuch more coming soon!