# Kibana 4.4.1, 4.3.2, 4.1.5 - Updated node.js versions due to upstream vulnerabilities

**URL:** <https://discuss.elastic.co/t/kibana-4-4-1-4-3-2-4-1-5-updated-node-js-versions-due-to-upstream-vulnerabilities/41643>\
**Category:** Security Announcements\
**Created:** [February 12, 2016, 5:01pm UTC](https://discuss.elastic.co/t/kibana-4-4-1-4-3-2-4-1-5-updated-node-js-versions-due-to-upstream-vulnerabilities/41643 "2016-02-12T17:01:35Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Court](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/court/32/6640_2.png) [@Court](https://discuss.elastic.co/u/Court)\
**Post date:** [February 12, 2016, 5:01pm UTC](https://discuss.elastic.co/t/kibana-4-4-1-4-3-2-4-1-5-updated-node-js-versions-due-to-upstream-vulnerabilities/41643/1 "2016-02-12T17:01:35Z")

</div>

**Summary:**

The bundled versions of node.js in Kibana contain HTTP-related security vulnerabilities. Fixed versions of node.js were recently released.

For the original node.js security announcement, see [https://nodejs.org/en/blog/vulnerability/february-2016-security-releases/](https://nodejs.org/en/blog/vulnerability/february-2016-security-releases/)

**Fixed versions:**

Kibana versions 4.4.1 and 4.3.2 have had their bundled node versions bumped to 0.12.10 from 0.12.9.

Kibana version 4.1.5 has had its bundled node version bumped to 0.10.42 from 0.10.35.

**Remediation:**

Users should upgrade their Kibana versions to either 4.4.1, 4.3.2, or 4.1.5.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:46pm UTC](https://discuss.elastic.co/t/kibana-4-4-1-4-3-2-4-1-5-updated-node-js-versions-due-to-upstream-vulnerabilities/41643/2 "2017-07-06T13:46:27Z")

</div>