Repository navigation
Possible wrong CVE-2021-22930 reference (should be CVE-2021-22940) in tagged v16.6.2 / v14.17.5 releases #40306
Description
Activity
@nodejs/security
- changed the title
[-]Wrong CVE-2021-22930 reference (should be CVE-2021-22940) in tagged v16.6.2 / v14.17.5 releases[/-][+]Possible wrong CVE-2021-22930 reference (should be CVE-2021-22940) in tagged v16.6.2 / v14.17.5 releases[/+]on Oct 4, 2021 on it
Reacted by Christian Fischer@mcollina CVE-2021-22930 seems still private. Is that expected?
Not really, I just requested pubblication. it'll be out soon.
Changelog fix: #40308
Blog fix: nodejs/nodejs.org#4143Reacted by Michael Dawson and Christian Fischer- added a commit that references this issue
on Oct 4, 2021 Thanks a lot for everyone contributing to this report. 👍
- added a commit that references this issue
on Oct 5, 2021 - added a commit that references this issue
on May 22, 2026
As this is affecting this repository / the tagged releases of this repo i hope this is the correct place to report this problem, if not please let me know where to forward the following below.
On the following tags:
as well as in the related CHANGELOG_v14.md / CHANGELOG_v16.md the following is stated for the mentioned releases:
Comparing the releases with the announcement here:
https://nodejs.org/en/blog/vulnerability/aug-2021-security-releases/
this probably should be the following instead:
due to: