Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

3 records

Release: NodeJS Node 10.*, 11.* and 15 more versions Clear all filters
TI-2023-14415 CVE-2023-30590 · GHSA-v63h-9gvh-2x49

The generateKeys() API function returned from crypto.createDiffieHellman() only generates…

Priority MEDIUM 42

The generateKeys() API function returned from crypto.createDiffieHellman() only generates missing (or outdated) keys, that is, it only generates a private key if none has been set yet, but the function is also needed to…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01462 Published 2023-11-28 Partial fix · 16.20.1, 18.16.1 +1
TI-2023-14413 CVE-2023-30588 · GHSA-g526-x7vj-cfv6

When an invalid public key is used to create an x509 certificate using the…

Priority LOW 26

When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate() API a non-expect termination occurs making it susceptible to DoS attacks when the attacker could force interruptions of…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01157 Published 2023-11-28 Partial fix · 16.20.1, 18.16.1 +1