Node.js sort-of dodged a bullet here. It includes a version of openssl that it links against when building the crypto module (and, I would think, the tls modul

Node.js sort-of dodged a bullet here. It includes a version of openssl that it links against when building the crypto module (and, I would think, the tls module). Node.js v0.10.26 uses OpenSSL 1.0.1e 11 Feb 2013. However (in openssl.gyp): https://github.com/joyent/node/blob/master/deps/openssl/openssl.gyp#L1068 https://github.com/joyent/node/blob/master/deps/openssl/open... It disables the heartbeat with the compile time option due to a workaround for Microsoft's IIS, of all things. So the affected window for node would have been Sep 11, 2012 to Mar 27, 2013 (based on the commit history).