# Kibana 4.4.1, 4.3.2, 4.1.5 - Updated node.js versions due to upstream vulnerabilities

**URL:** <https://discuss.elastic.co/t/kibana-4-4-1-4-3-2-4-1-5-updated-node-js-versions-due-to-upstream-vulnerabilities/41643>\
**Category:** Security Announcements\
**Created:** [February 12, 2016, 5:01pm UTC](https://discuss.elastic.co/t/kibana-4-4-1-4-3-2-4-1-5-updated-node-js-versions-due-to-upstream-vulnerabilities/41643 "2016-02-12T17:01:35Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![Court](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/court/32/6640_2.png) [@Court](https://discuss.elastic.co/u/Court)\
**Post date:** [February 12, 2016, 5:01pm UTC](https://discuss.elastic.co/t/kibana-4-4-1-4-3-2-4-1-5-updated-node-js-versions-due-to-upstream-vulnerabilities/41643/1 "2016-02-12T17:01:35Z")

</div>

**Summary:**

The bundled versions of node.js in Kibana contain HTTP-related security vulnerabilities. Fixed versions of node.js were recently released.

For the original node.js security announcement, see [https://nodejs.org/en/blog/vulnerability/february-2016-security-releases/](https://nodejs.org/en/blog/vulnerability/february-2016-security-releases/)

**Fixed versions:**

Kibana versions 4.4.1 and 4.3.2 have had their bundled node versions bumped to 0.12.10 from 0.12.9.

Kibana version 4.1.5 has had its bundled node version bumped to 0.10.42 from 0.10.35.

**Remediation:**

Users should upgrade their Kibana versions to either 4.4.1, 4.3.2, or 4.1.5.

---

_[View the full topic](https://discuss.elastic.co/t/kibana-4-4-1-4-3-2-4-1-5-updated-node-js-versions-due-to-upstream-vulnerabilities/41643)._