Node.js Patches Multiple Vulnerabilities That Enable DoS Attacks and Process Crashes

Node.js published a security release (LTS) addressing seven CVEs affecting TLS (critical SNICallback flaw allowing unauthenticated process crashes), HTTP/2 flow-control (memory leak/DoS), V8 string-hashing (HashDoS), Web Crypto HMAC timing oracle, HTTP header prototype pollution, and two permission-model filesystem bypasses; administrators should urgently upgrade affected 20.x/22.x/24.x/25.x releases to the provided patched versions.