Node.js has released security updates addressing 16 vulnerabilities affecting its built-in HTTP/2, HTTPS, and TLS software, with seven issues rated as high severity.
The fixes arrive in versions 22.23.5, 24.22.3, and 26.13.1.
The flaws include memory disclosures and potential server crashes, though no active exploitation has been reported.
Older versions that have reached end-of-life do not receive patches.
https://en.hacks.gr/epeigoysa-enimerosi-gia-to-node-js-diorthothikan-16-kena-asfaleias/