Количество 11
Количество 11
CVE-2025-23166
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
CVE-2025-23166
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
CVE-2025-23166
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
CVE-2025-23166
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowExce ...
GHSA-rrjv-57mm-j6cm
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
ELSA-2025-8514
ELSA-2025-8514: nodejs:20 security update (IMPORTANT)
ELSA-2025-8506
ELSA-2025-8506: nodejs:22 security update (IMPORTANT)
ELSA-2025-8468
ELSA-2025-8468: nodejs:20 security update (IMPORTANT)
ELSA-2025-8467
ELSA-2025-8467: nodejs:22 security update (IMPORTANT)
SUSE-SU-2025:01879-1
Security update for nodejs22
SUSE-SU-2025:01878-1
Security update for nodejs22
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-23166 The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime. | CVSS3: 7.5 | 0% Низкий | около 1 месяца назад |
 | CVE-2025-23166 The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime. | CVSS3: 7.5 | 0% Низкий | около 1 месяца назад |
 | CVE-2025-23166 The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime. | CVSS3: 7.5 | 0% Низкий | около 1 месяца назад |
| CVE-2025-23166 The C++ method SignTraits::DeriveBits() may incorrectly call ThrowExce ... | CVSS3: 7.5 | 0% Низкий | около 1 месяца назад |
| GHSA-rrjv-57mm-j6cm The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime. | CVSS3: 7.5 | 0% Низкий | около 1 месяца назад |
| ELSA-2025-8514 ELSA-2025-8514: nodejs:20 security update (IMPORTANT) | 9 дней назад | ||
| ELSA-2025-8506 ELSA-2025-8506: nodejs:22 security update (IMPORTANT) | 16 дней назад | ||
| ELSA-2025-8468 ELSA-2025-8468: nodejs:20 security update (IMPORTANT) | 16 дней назад | ||
| ELSA-2025-8467 ELSA-2025-8467: nodejs:22 security update (IMPORTANT) | 16 дней назад | ||
 | SUSE-SU-2025:01879-1 Security update for nodejs22 | 8 дней назад | ||
| SUSE-SU-2025:01878-1 Security update for nodejs22 | 8 дней назад |
Уязвимостей на страницу