Fluid Attacks Database

Description

TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
alpine v3.11	nodejs	>=0 <12.20.1-r0	12.20.1-r0
alpine v3.12	nodejs	>=0 <12.18.3-r0	12.18.3-r0
alpine v3.13	nodejs	>=0 <12.18.0-r0	12.18.0-r0
alpine v3.21	nodejs	>=0 <12.18.0-r0	12.18.0-r0
alpine v3.14	nodejs	>=0 <12.18.0-r0	12.18.0-r0
alpine v3.15	nodejs	>=0 <12.18.0-r0	12.18.0-r0
alpine v3.16	nodejs	>=0 <12.18.0-r0	12.18.0-r0
alpine v3.17	nodejs	>=0 <12.18.0-r0	12.18.0-r0
alpine v3.18	nodejs	>=0 <12.18.0-r0	12.18.0-r0
alpine v3.19	nodejs	>=0 <12.18.0-r0	12.18.0-r0

1-10 of 17

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.