Skip to content

Commit 8e5ef67

Browse files
RafaelGSSmhdawson
andcommitted
Update apps/site/pages/en/blog/vulnerability/upcoming-cve-for-eol-versions.md
Co-authored-by: Michael Dawson <mdawson@devrus.com> Signed-off-by: Rafael Gonzaga <rafael.nunu@hotmail.com>
1 parent 2042f36 commit 8e5ef67

File tree

1 file changed

+14
-14
lines changed

1 file changed

+14
-14
lines changed

apps/site/pages/en/blog/vulnerability/upcoming-cve-for-eol-versions.md

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
date: '2025-01-14T16:00:00.000Z'
2+
date: '2025-01-06:00:00.000Z'
33
category: vulnerability
44
title: Upcoming CVE for End-of-Life Node.js Versions
55
layout: blog-post
@@ -18,24 +18,24 @@ notification to inform users that these versions are no longer maintained and
1818
may pose significant security risks.
1919

2020
The CVE will cite **Unsupported When Assigned** under
21-
[CWE-1104](https://cwe.mitre.org/data/definitions/1104.html): *Use of Unmaintained Third Party Components*.
21+
[CWE-1104](https://cwe.mitre.org/data/definitions/1104.html): _Use of Unmaintained Third Party Components_.
2222
For more details on this decision, you can refer to the discussion in
2323
[this GitHub issue](https://github.com/nodejs/security-wg/issues/1401).
2424

2525
## Why Issue a CVE?
2626

2727
Many organizations rely on CVE notifications to track security issues across
28-
their software stacks. The Node.js project guarantee a timely resolution and disclosure
28+
their software stacks. The Node.js project aims for a timely resolution and disclosure
2929
for all reported vulnerabilities for the _maintained_ release lines.
3030
However, we do not issue CVEs for EOL release lines.
3131
By issuing a CVE for EOL versions of Node.js, we aim to:
3232

33-
* **Raise Awareness:** Inform users that running EOL versions exposes their
34-
applications to potential vulnerabilities.
35-
* **Encourage Upgrades:** Prompt organizations and developers to update to
36-
actively supported Node.js versions.
37-
* **Improve Security:** Reduce the number of applications running outdated and
38-
unsupported versions of Node.js.
33+
- **Raise Awareness:** Inform users that running EOL versions exposes their
34+
applications to potential vulnerabilities.
35+
- **Encourage Upgrades:** Prompt organizations and developers to update to
36+
actively supported Node.js versions.
37+
- **Improve Security:** Reduce the number of applications running outdated and
38+
unsupported versions of Node.js.
3939

4040
> Node.js v16, despite being EOL for over a year, has still 11 million downloads per month.
4141
@@ -67,10 +67,10 @@ npx is-my-node-vulnerable
6767

6868
As of the date of this announcement, the following versions are actively supported:
6969

70-
* Node.js 23 (Current)
71-
* Node.js 22 (LTS)
72-
* Node.js 20 (Maintenance LTS)
73-
* Node.js 18 (Maintenance LTS)
70+
- Node.js 23 (Current)
71+
- Node.js 22 (LTS)
72+
- Node.js 20 (Maintenance LTS)
73+
- Node.js 18 (Maintenance LTS)
7474

7575
All other versions are no longer supported and should be considered deprecated.
7676

@@ -79,7 +79,7 @@ All other versions are no longer supported and should be considered deprecated.
7979
We understand that upgrading may require effort, and we’re here to help. If you have
8080
any questions or need assistance, please reach out to us via:
8181

82-
* [Node.js Help Repository](https://github.com/nodejs/help)
82+
- [Node.js Help Repository](https://github.com/nodejs/help)
8383

8484
For organizations or developers who require continued use of EOL Node.js versions,
8585
the [OpenJS Ecosystem Sustainability Program](https://nodejs.org/en/about/previous-releases#commercial-support)

0 commit comments

Comments
 (0)