The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate() API a non-expect termination occurs making it susceptible to DoS attacks when the attacker could force interruptions of application processing, as the process terminates when accessing public key info of provided certificates from user code. The current context of the users will be gone, and that will cause a DoS scenario. This vulnerability affects all active Node.js versions v16, v18, and, v20.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade nodejs-packaging-bundlerUpgrade nodejs-packagingUpgrade npmUpgrade nodejs | Aug 3, 2023 | Jul 31, 2023 |
| Amazon_linux_2023 | — | Upgrade nodejs-docsUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-libs-debuginfoUpgrade nodejs-develUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade nodejs-debugsourceUpgrade npmUpgrade v8-devel | Feb 17, 2025 | Jun 20, 2023 |
| Centos_linux | — | Upgrade nodejs-libs-debuginfoUpgrade nodejs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-libsUpgrade nodejs-packaging-bundler | Aug 1, 2023 | Jul 31, 2023 |
| Debian | — | Upgrade nodejs | Jan 3, 2024 | Nov 28, 2023 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | May 10, 2024 | Nov 28, 2023 |
| Oracle_linux | — | Upgrade graalvm-community-17-llvm-toolchainUpgrade graalvm-community-21-native-imageUpgrade graalvm-community-17-native-imageUpgrade graalvm-community-17-libpolyglotUpgrade nodejs-docsUpgrade graalvm-community-17-polyglotUpgrade nodejs-full-i18nUpgrade graalvm-community-17-rubyUpgrade graalvm-community-17-llvmUpgrade graalvm-community-17-native-image-llvm-backendUpgrade graalvm-community-17-icu4jUpgrade graalvm-community-17-jdkUpgrade graalvm-community-17-regexUpgrade graalvm-community-17-ruby-develUpgrade nodejsUpgrade nodejs-packaging-bundlerUpgrade nodejs-libsUpgrade nodejs-packagingUpgrade graalvm-community-17-python-develUpgrade graalvm-community-17-javascriptUpgrade graalvm-community-17-toolsUpgrade graalvm-community-17-espressoUpgrade npmUpgrade graalvm-community-17-pythonUpgrade graalvm-community-17-nodejsUpgrade graalvm-community-17-espresso-llvmUpgrade nodejs-develUpgrade graalvm-community-17-wasmUpgrade nodejs-nodemonUpgrade graalvm-community-21-jdkUpgrade graalvm-community-17-nodejs-devel | May 21, 2024 | Jun 20, 2023 |
| Redhat_linux | — | Upgrade nodejs-libs-debuginfoUpgrade nodejsUpgrade nodejs-packaging-bundlerUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-libsUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade npmNo solution existsUpgrade nodejs-nodemon | Aug 1, 2023 | Jul 31, 2023 |
| Rocky_linux | — | Upgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade npm | Mar 5, 2024 | Nov 28, 2023 |
| Suse | — | Upgrade nodejs18Upgrade nodejs18-develUpgrade nodejs16-develUpgrade corepack18Upgrade nodejs18-docsUpgrade nodejs16Upgrade nodejs16-docsUpgrade npm16Upgrade npm18Upgrade corepack16 | Jun 28, 2023 | Jun 27, 2023 |
| Ubuntu | — | Upgrade libnode108Upgrade nodejs-doc (Ubuntu Pro)Upgrade nodejs-dev (Ubuntu Pro)Upgrade libnode-devUpgrade libnode72Upgrade nodejsUpgrade nodejs-legacy (Ubuntu Pro)Upgrade nodejs-docUpgrade libnode64Upgrade nodejs (Ubuntu Pro) | Apr 17, 2024 | Nov 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 28, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub