Change Details

Changelog: https://github.com/nodejs/node/releases/tag/v18.9.1 The following CVEs are fixed in this release: CVE-2022-32212: DNS rebinding in --inspect on macOS Insufficient fix for macOS devices on v18.5.0 CVE-2022-32222: Node 18 reads openssl.cnf from /home/iojs/build/ upon startup on MacOS CVE-2022-32213: HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding CVE-2022-32215: HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding CVE-2022-35256: HTTP Request Smuggling - Incorrect Parsing of Header Fields CVE-2022-35255: Weak randomness in WebCrypto keygen

Changelog: https://github.com/nodejs/node/releases/tag/v18.10.0 The following CVEs are fixed (as part of 18.9.1): CVE-2022-32212: DNS rebinding in --inspect on macOS Insufficient fix for macOS devices on v18.5.0 CVE-2022-32222: Node 18 reads openssl.cnf from /home/iojs/build/ upon startup on MacOS CVE-2022-32213: HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding CVE-2022-32215: HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding CVE-2022-35256: HTTP Request Smuggling - Incorrect Parsing of Header Fields CVE-2022-35255: Weak randomness in WebCrypto keygen

Changelog: https://github.com/nodejs/node/releases/tag/v18.9.110.0 The following CVEs are fixed in this release:(as part of 18.9.1): CVE-2022-32212: DNS rebinding in --inspect on macOS Insufficient fix for macOS devices on v18.5.0 CVE-2022-32222: Node 18 reads openssl.cnf from /home/iojs/build/ upon startup on MacOS CVE-2022-32213: HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding CVE-2022-32215: HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding CVE-2022-35256: HTTP Request Smuggling - Incorrect Parsing of Header Fields CVE-2022-35255: Weak randomness in WebCrypto keygen