Количество 29
Количество 29
BDU:2026-00456
Уязвимость функции createHook() модуля async_hooks программной платформы Node.js, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260401-73-0034
Уязвимость nodejs20
ROS-20260401-73-0033
Уязвимость nodejs
CVE-2025-59466
We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions.
CVE-2025-59466
We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions.
CVE-2025-59466
We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions.
CVE-2025-59466
We have identified a bug in Node.js error handling where "Maximum call ...
GHSA-52xj-vx8w-46qj
We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions.
RLSA-2026:2783
Important: nodejs:20 security update
RLSA-2026:2782
Important: nodejs:22 security update
RLSA-2026:2781
Important: nodejs:24 security update
RLSA-2026:2422
Important: nodejs:20 security update
RLSA-2026:2421
Important: nodejs:22 security update
RLSA-2026:2420
Important: nodejs:24 security update
RLSA-2026:1843
Important: nodejs22 security update
RLSA-2026:1842
Important: nodejs24 security update
ELSA-2026-2783
ELSA-2026-2783: nodejs:20 security update (IMPORTANT)
ELSA-2026-2782
ELSA-2026-2782: nodejs:22 security update (IMPORTANT)
ELSA-2026-2781
ELSA-2026-2781: nodejs:24 security update (IMPORTANT)
ELSA-2026-2422
ELSA-2026-2422: nodejs:20 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-00456 Уязвимость функции createHook() модуля async_hooks программной платформы Node.js, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | 7 месяцев назад |
 | ROS-20260401-73-0034 Уязвимость nodejs20 | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
| ROS-20260401-73-0033 Уязвимость nodejs | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
 | CVE-2025-59466 We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | CVE-2025-59466 We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions. | CVSS3: 5.9 | 1% Низкий | 6 месяцев назад |
 | CVE-2025-59466 We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
| CVE-2025-59466 We have identified a bug in Node.js error handling where "Maximum call ... | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
| GHSA-52xj-vx8w-46qj We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions. | CVSS3: 5.9 | 1% Низкий | 6 месяцев назад |
 | RLSA-2026:2783 Important: nodejs:20 security update | 5 месяцев назад | ||
| RLSA-2026:2782 Important: nodejs:22 security update | 5 месяцев назад | ||
| RLSA-2026:2781 Important: nodejs:24 security update | 5 месяцев назад | ||
| RLSA-2026:2422 Important: nodejs:20 security update | 6 месяцев назад | ||
| RLSA-2026:2421 Important: nodejs:22 security update | 6 месяцев назад | ||
| RLSA-2026:2420 Important: nodejs:24 security update | 6 месяцев назад | ||
| RLSA-2026:1843 Important: nodejs22 security update | 6 месяцев назад | ||
| RLSA-2026:1842 Important: nodejs24 security update | 6 месяцев назад | ||
| ELSA-2026-2783 ELSA-2026-2783: nodejs:20 security update (IMPORTANT) | 5 месяцев назад | ||
| ELSA-2026-2782 ELSA-2026-2782: nodejs:22 security update (IMPORTANT) | 5 месяцев назад | ||
| ELSA-2026-2781 ELSA-2026-2781: nodejs:24 security update (IMPORTANT) | 5 месяцев назад | ||
| ELSA-2026-2422 ELSA-2026-2422: nodejs:20 security update (IMPORTANT) | 6 месяцев назад |
Уязвимостей на страницу