CVE-2021-22940

Publication date

2021-08-16 00:00:00

Family

hackerone

State

PUBLISHED

Description

Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.