The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread. This in turn could be used to cause a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packaging-bundlerUpgrade nodejsUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-nodemon | Apr 21, 2023 | Feb 23, 2023 |
| Alpine Linux | — | Upgrade nodejs | Aug 22, 2024 | Feb 23, 2023 |
| Amazon_linux_2023 | — | Upgrade nodejs-libsUpgrade npmUpgrade nodejs-full-i18nUpgrade v8-develUpgrade nodejs-libs-debuginfoUpgrade nodejs-docsUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-debugsource | Feb 17, 2025 | Feb 16, 2023 |
| Centos_linux | — | Upgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejs-packagingUpgrade nodejs-debuginfoUpgrade nodejs-packaging-bundlerUpgrade nodejs-docsUpgrade nodejs-debugsourceUpgrade nodejs | Apr 10, 2023 | Feb 23, 2023 |
| Debian | — | Upgrade nodejs | Jan 3, 2024 | Feb 23, 2023 |
| Oracle_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-packaging-bundlerUpgrade nodejsUpgrade npmUpgrade nodejs-develUpgrade nodejs-full-i18n | Apr 5, 2023 | Feb 16, 2023 |
| Redhat_linux | — | Upgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade nodejs-debuginfoUpgrade nodejs-develUpgrade nodejs-packaging-bundlerUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs | Apr 10, 2023 | Feb 23, 2023 |
| Rocky_linux | — | Upgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-debugsource | Mar 12, 2024 | Feb 23, 2023 |
| Suse | — | Upgrade corepack16Upgrade nodejs16Upgrade nodejs18-develUpgrade nodejs16-develUpgrade nodejs18-docsUpgrade nodejs18Upgrade corepack18Upgrade npm16Upgrade nodejs16-docsUpgrade npm18 | Mar 6, 2023 | Feb 23, 2023 |
| Ubuntu | — | Upgrade nodejsUpgrade libnode72Upgrade libnode64Upgrade libnode108 | Mar 5, 2024 | Feb 23, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub