Aceasta este o versiune mai veche. Versiunea actuală este 14.21.3. Node.js 14 14.21.3 · Data lansării:
Fișiere de instalare 14.16.1
| Arhitectură | Tip | Domeniu | Dimensiune fișier | Descărcare | SHA256 |
|---|---|---|---|---|---|
| 64 de biți | MSI | Toți utilizatorii | — | nodejs.org | VirusTotal |
| 64 de biți | ZIP → Portabil | — | — | nodejs.org | VirusTotal |
| 32 de biți | MSI | Toți utilizatorii | — | nodejs.org | VirusTotal |
| 32 de biți | ZIP → Portabil | — | — | nodejs.org | VirusTotal |
Linkul și hash-ul SHA256 provin din manifestul comunitar al Windows Package Manager. Comparați hash-ul fișierului descărcat înainte de a-l rula.
Note de versiune
This is a security release.
Notable Changes
Vulnerabilities fixed:
- CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High)
- This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt
- Impacts:
- All versions of the 15.x, 14.x, 12.x and 10.x releases lines
- CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing (High)
- This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt
- Impacts:
- All versions of the 15.x, 14.x, 12.x and 10.x releases lines
- CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
- This is a vulnerability in the y18n npm module which may be exploited by prototype pollution. You can read more about it in https://github.com/advisories/GHSA-c4w7-xm78-47vh
- Impacts:
- All versions of the 14.x, 12.x and 10.x releases lines
Commits
- [467be7a950] - deps: upgrade npm to 6.14.12 (Ruy Adorno) #37918
- [6bc8f58182] - deps: update archs files for OpenSSL-1.1.1k (Tobias Nießen) #37938
- [403a014ef6] - deps: upgrade openssl sources to 1.1.1k (Tobias Nießen) #37938
