From 1c530cbe1f80ad131c15875311a834b0893c750d Mon Sep 17 00:00:00 2001 From: Rafael Gonzaga Date: Tue, 30 Jan 2024 12:55:57 -0300 Subject: [PATCH] blog: add february 2024 security release announcement (#6268) --- .../february-2024-security-releases.md | 34 +++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 pages/en/blog/vulnerability/february-2024-security-releases.md diff --git a/pages/en/blog/vulnerability/february-2024-security-releases.md b/pages/en/blog/vulnerability/february-2024-security-releases.md new file mode 100644 index 0000000000000..c99d882a17477 --- /dev/null +++ b/pages/en/blog/vulnerability/february-2024-security-releases.md @@ -0,0 +1,34 @@ +--- +date: '2024-01-30:17:30:00.617Z' +category: vulnerability +title: Tuesday February 6 2024 Security Releases +layout: blog-post.hbs +author: Rafael Gonzaga +--- + +## Summary + +The Node.js project will release new versions of the 18.x, 20.x and, 21.x +releases lines on or shortly after, Tuesday February 6 2024 in order to address: + +- 4 high severity issues. +- 4 medium severity issue. +- 1 low severity issue. + +## Impact + +The 21.x release line of Node.js is vulnerable to 4 high severity issues, 4 medium severity issues, and 1 low severity issue. + +The 20.x release line of Node.js is vulnerable to 4 high severity issues, 4 medium severity issues, and 1 low severity issue. + +In addition, the 18.x release line of Node.js is vulnerable to 2 high severity issues, 2 medium severity issues, and 1 low severity issue. + +## Release timing + +Releases will be available on, or shortly after, Tuesday February 6 2024. + +## Contact and future updates + +The current Node.js security policy can be found at [https://nodejs.org/security/](/security/). Please follow the process outlined in if you wish to report a vulnerability in Node.js. + +Subscribe to the low-volume announcement-only nodejs-sec mailing list at to stay up to date on security vulnerabilities and security-related releases of Node.js and the projects maintained in the nodejs GitHub organization.