Red Hat Security AdvisoryRHSA-2025:8902
nodejs:20 security update
Released 2025-06-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.4) nodejs-1:20.19.2-2.module+el9.4.0+23180+d266bac7.aarch64::nodejs:20, nodejs-1:20.19.2-2.module+el9.4.0+23180+d266bac7.ppc64le::nodejs:20, nodejs-1:20.19.2-2.module+el9.4.0+23180+d266bac7.s390x::nodejs:20 +20
Fixes 1 record
Priority MEDIUM 40
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00817 · Published 2025-05-19 · Fixed CWE-248
