The SDK-for-Node.js buildpack includes the community June 2020 security release Node.js runtimes.
This buildpack contains the following Node.js runtimes: v10.20.1, v10.21.0, v12.17.0, v12.18.0. It is based on the community Node.js buildpack v1.7.20. The latest v10 runtime is the default runtime when one is not specified in the package.json. An existing application will not be affected by the new buildpack until you redeploy or restage. New applications will automatically use the new buildpack.
Additionally, the v10.21.0 and v12.18.0 runtimes include CVE-2020-8172, CVE-2020-11080, CVE-2020-8174 and CVE-2020-10531 from the June 2020 Security Releases.