Количество 24
Количество 24
CVE-2025-23166
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
CVE-2025-23166
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
CVE-2025-23166
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
CVE-2025-23166
CVE-2025-23166
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowExce ...
GHSA-rrjv-57mm-j6cm
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
ELSA-2025-8514
ELSA-2025-8514: nodejs:20 security update (IMPORTANT)
ELSA-2025-8506
ELSA-2025-8506: nodejs:22 security update (IMPORTANT)
ELSA-2025-8468
ELSA-2025-8468: nodejs:20 security update (IMPORTANT)
ELSA-2025-8467
ELSA-2025-8467: nodejs:22 security update (IMPORTANT)
BDU:2025-10620
Уязвимость функции ThrowException() модели разрешений программной платформы Node.js, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2025:01879-1
Security update for nodejs22
SUSE-SU-2025:01878-1
Security update for nodejs22
RLSA-2025:8506
Important: nodejs:22 security update
RLSA-2025:8493
Important: nodejs22 security update
RLSA-2025:8467
Important: nodejs:22 security update
ELSA-2025-8493
ELSA-2025-8493: nodejs22 security update (IMPORTANT)
SUSE-SU-2025:02045-1
Security update for nodejs20
SUSE-SU-2025:02039-1
Security update for nodejs20
RLSA-2025:8514
Important: nodejs:20 security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-23166 The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime. | CVSS3: 7.5 | 0% Низкий | 7 месяцев назад |
 | CVE-2025-23166 The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime. | CVSS3: 7.5 | 0% Низкий | 7 месяцев назад |
 | CVE-2025-23166 The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime. | CVSS3: 7.5 | 0% Низкий | 7 месяцев назад |
 | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад | |
| CVE-2025-23166 The C++ method SignTraits::DeriveBits() may incorrectly call ThrowExce ... | CVSS3: 7.5 | 0% Низкий | 7 месяцев назад |
| GHSA-rrjv-57mm-j6cm The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime. | CVSS3: 7.5 | 0% Низкий | 7 месяцев назад |
| ELSA-2025-8514 ELSA-2025-8514: nodejs:20 security update (IMPORTANT) | 6 месяцев назад | ||
| ELSA-2025-8506 ELSA-2025-8506: nodejs:22 security update (IMPORTANT) | 7 месяцев назад | ||
| ELSA-2025-8468 ELSA-2025-8468: nodejs:20 security update (IMPORTANT) | 7 месяцев назад | ||
| ELSA-2025-8467 ELSA-2025-8467: nodejs:22 security update (IMPORTANT) | 7 месяцев назад | ||
 | BDU:2025-10620 Уязвимость функции ThrowException() модели разрешений программной платформы Node.js, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | 7 месяцев назад |
 | SUSE-SU-2025:01879-1 Security update for nodejs22 | 6 месяцев назад | ||
| SUSE-SU-2025:01878-1 Security update for nodejs22 | 6 месяцев назад | ||
 | RLSA-2025:8506 Important: nodejs:22 security update | 5 месяцев назад | ||
| RLSA-2025:8493 Important: nodejs22 security update | 3 месяца назад | ||
| RLSA-2025:8467 Important: nodejs:22 security update | 5 месяцев назад | ||
| ELSA-2025-8493 ELSA-2025-8493: nodejs22 security update (IMPORTANT) | 6 месяцев назад | ||
| SUSE-SU-2025:02045-1 Security update for nodejs20 | 6 месяцев назад | ||
| SUSE-SU-2025:02039-1 Security update for nodejs20 | 6 месяцев назад | ||
| RLSA-2025:8514 Important: nodejs:20 security update | 5 месяцев назад |
Уязвимостей на страницу