{
  "cve": [
    "CVE-2018-7162"
  ],
  "vulnerable": "9.x || 10.x",
  "patched": "^9.11.2 || ^10.4.1",
  "ref": "https://nodejs.org/en/blog/vulnerability/june-2018-security-releases/",
  "overview": "All versions of 9.x and later are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash. This can be accomplished by sending duplicate/unexpected messages during the handshake. This vulnerability has been addressed by updating the TLS implementation. Thanks to Jordan Zebor at F5 Networks all of his help investigating this issue with the Node.js team.",
  "affectedEnvironments": [
    "all"
  ],
  "severity": "high"
}