Several bugs in Node.js lead to Remote Code Execution

Threat Level

Vulnerability Report

For a detailed advisory, download the pdf file here

Summary

Node.js has released several fixes for vulnerabilities in the JavaScript runtime environment, which could lead to arbitrary code execution, HTTP request smuggling, DNS rebinding vulnerability and other bugs