| Package | Affected versions | Patched versions |
|---|---|---|
| node.js | ≥ 4.0.0, ≤ 4.1.2≥ 4.2.0, < 4.8.7≥ 6.0.0, ≤ 6.8.1≥ 6.9.0, < 6.12.2≥ 8.0.0, ≤ 8.8.1≥ 8.9.0, < 8.9.3≥ 9.0.0, < 9.2.1 | 4.8.76.12.28.9.39.2.1 |
Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free