Unscored DSA-4826-1 2 CVEs

nodejs - security update

Published Jan 6, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	nodejs	10.23.1~dfsg-1~deb10u1

Vulnerabilities 2

Unscored —

CVE-2020-8265

Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementat…

Node.js node nodejs nodejs Debian Ubuntu Alpine

Jan 6, 2021
Unscored —

CVE-2020-8287 Public exploit EPSS 16%

Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for ex…

Node.js node nodejs nodejs Debian Ubuntu Alpine

Jan 6, 2021