यो पुरानो संस्करण हो। पछिल्लो संस्करण 14.21.3 हो। Node.js 14 14.21.3 · रिलिज:
इन्स्टलर फाइलहरू 14.18.1
| आर्किटेक्चर | प्रकार | कसका लागि | फाइल साइज | डाउनलोड | SHA256 |
|---|---|---|---|---|---|
| ६४-बिट | MSI | सबै प्रयोगकर्ता | — | nodejs.org | VirusTotal |
| ६४-बिट | ZIP → पोर्टेबल | — | — | nodejs.org | VirusTotal |
| ३२-बिट | MSI | सबै प्रयोगकर्ता | — | nodejs.org | VirusTotal |
| ३२-बिट | ZIP → पोर्टेबल | — | — | nodejs.org | VirusTotal |
लिङ्क र SHA256, Windows Package Manager का कम्युनिटी म्यानिफेस्टबाट लिइएका हुन्। फाइल चलाउनुअघि त्यसको ह्यास मिलाएर हेर्नुहोस्।
रिलिज नोटहरू
This is a security release.
Notable changes
- CVE-2021-22959: HTTP Request Smuggling due to spaced in headers (Medium)
- The http parser accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS). More details will be available at CVE-2021-22959 after publication.
- CVE-2021-22960: HTTP Request Smuggling when parsing the body (Medium)
- The parse ignores chunk extensions when parsing the body of chunked requests. This leads to HTTP Request Smuggling (HRS) under certain conditions. More details will be available at CVE-2021-22960 after publication.
Commits
- [8c254ca7e4] - deps: update llhttp to 2.1.4 (Fedor Indutny) nodejs-private/node-private#285
- [9b92ae2499] - http: add regression test for smuggling content length (Matteo Collina) nodejs-private/node-private#285
- [f467539719] - http: add regression test for chunked smuggling (Matteo Collina) nodejs-private/node-private#285
