High severity7.5NVD Advisory· Published Sep 18, 2020· Updated Jun 17, 2026

CVE-2020-8251

Description

Node.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests submission which can make the server unable to accept new connections.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

osv-coords3 versions
pkg:bitnami/node pkg:bitnami/node-min pkg:rpm/opensuse/nodejs14&distro=openSUSE%20Tumbleweed
>= 14.0.0, < 14.11.0+ 2 more
- (no CPE)range: >= 14.0.0, < 14.11.0
- (no CPE)range: >= 14.0.0, < 14.11.0
- (no CPE)range: < 14.17.5-1.2
Node.js/Node.jsv53 versions
4.0+ 2 more
- (no CPE)range: 4.0
- (no CPE)range: <14.11.0
- cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*range: >=14.0.0,<14.11.0
Fedoraproject/Fedora
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

nodejs.org/en/blog/vulnerability/september-2020-security-releases/nvdVendor Advisory
security.gentoo.org/glsa/202101-07nvdThird Party Advisory
security.netapp.com/advisory/ntap-20201009-0004/nvdThird Party Advisory
hackerone.com/reports/868834nvdPermissions Required
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.007
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000