# OpenSSL security releases do not require Node.js security releases

DevFeed: [OpenSSL security releases do not require Node.js security releases](<https://devfeed.tech/articles/openssl-security-releases-do-not-require-node-js-security-releases-2866.md>)

Original publisher: [Read original article](<https://nodejs.org/en/blog/vulnerability/april-2020-openssl-updates>)

Published: 2020-04-21T12:00:00Z

Content type: news

Language: en

Sources: [Node.js Blog](<https://devfeed.tech/sources/node-js-blog.md>)

Topics: [Node.js](<https://devfeed.tech/topics/node-js.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [releases](<https://devfeed.tech/topics/releases.md>)

Tags: [node-js](<https://devfeed.tech/tags/node-js.md>), [releases](<https://devfeed.tech/tags/releases.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

An OpenSSL 1.1.1g issue does not affect Node.js because Node.js and its dependencies do not call the affected function, so Node.js security releases are not required.

## Source excerpt

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.