diff options
author | Richard Lau <riclau@uk.ibm.com> | 2020-09-14 23:02:57 +0300 |
---|---|---|
committer | Richard Lau <riclau@uk.ibm.com> | 2020-09-15 23:49:55 +0300 |
commit | 8e173836538efb95f5ac5e898f177efff681d2aa (patch) | |
tree | 5ac694953b6914dde8232cc8a884a810ab281120 /doc/api/https.md | |
parent | 9ab5c6b96ceef1ac53729e243d5f8de8641d05ae (diff) |
2020-09-15, Version 14.11.0 (Current)
This is a security release.
Notable changes:
Vulnerabilities fixed:
- CVE-2020-8251: Denial of Service by resource exhaustion CWE-400 due
to unfinished HTTP/1.1 requests (Critical).
- CVE-2020-8201: HTTP Request Smuggling due to CR-to-Hyphen conversion
(High).
PR-URL: https://github.com/nodejs-private/node-private/pull/225
Diffstat (limited to 'doc/api/https.md')
-rw-r--r-- | doc/api/https.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/api/https.md b/doc/api/https.md index 8dbe4d2f224..40dcf4b1d7f 100644 --- a/doc/api/https.md +++ b/doc/api/https.md @@ -115,7 +115,7 @@ See [`http.Server#maxHeadersCount`][]. ### `server.requestTimeout` <!-- YAML -added: REPLACEME +added: v14.11.0 --> * {number} **Default:** `0` |