Skip to content

Commit

Permalink
april 2021 security release pre-announcement
Browse files Browse the repository at this point in the history
  • Loading branch information
danbev committed Mar 31, 2021
1 parent 488c86f commit 9e00c40
Show file tree
Hide file tree
Showing 2 changed files with 36 additions and 2 deletions.
4 changes: 2 additions & 2 deletions build.js
Original file line number Diff line number Diff line change
Expand Up @@ -278,8 +278,8 @@ function getSource (callback) {
},
banner: {
visible: true,
text: 'Deep discounts on Node.js certifications and training available through April 9',
link: 'https://openjsf.org/certification/'
text: 'New security releases to be made available April 6, 2021',
link: '/en/blog/vulnerability/april-2021-security-releases/'
}
}
}
Expand Down
34 changes: 34 additions & 0 deletions locale/en/blog/vulnerability/april-2021-security-releases.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,34 @@
---
date: 2021-04-06T16:00:00.000Z
category: vulnerability
title: April 2021 Security Releases
slug: april-2021-security-releases
layout: blog-post.hbs
author: Daniel Bevenius
---

# Summary

The Node.js project will release new versions of all supported release lines on or shortly after Tuesday, April 6th, 2021.

* Three High severity issues

## Impact

The 15.x release line of Node.js is vulnerable to two high severity issues.

The 14.x release line of Node.js is vulnerable to three high severity issues.

The 12.x release line of Node.js is vulnerable to three high severity issues.

The 10.x release line of Node.js is vulnerable to three high severity issues.

## Release timing

Releases will be available at, or shortly after, Tuesday, April 6th, 2021.

## Contact and future updates

The current Node.js security policy can be found at https://nodejs.org/en/security/. Please follow the process outlined in https://github.com/nodejs/node/blob/master/SECURITY.md if you wish to report a vulnerability in Node.js.

Subscribe to the low-volume announcement-only nodejs-sec mailing list at https://groups.google.com/forum/#!forum/nodejs-sec to stay up to date on security vulnerabilities and security-related releases of Node.js and the projects maintained in the nodejs GitHub organization.

0 comments on commit 9e00c40

Please sign in to comment.