The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The generateKeys() API function returned from crypto.createDiffieHellman() only generates missing (or outdated) keys, that is, it only generates a private key if none has been set yet, but the function is also needed to compute the corresponding public key after calling setPrivateKey(). However, the documentation says this API call: "Generates private and public Diffie-Hellman key values".
The documented behavior is very different from the actual behavior, and this difference could easily lead to security issues in applications that use these APIs as the DiffieHellman may be used as the basis for application-level security, implications are consequently broad.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade npmUpgrade nodejs-packagingUpgrade nodejs-packaging-bundlerUpgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-libsUpgrade nodejs-docs | Aug 3, 2023 | Jul 31, 2023 |
| Amazon_linux_2023 | — | Upgrade nodejsUpgrade nodejs-libs-debuginfoUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade npmUpgrade nodejs-debugsourceUpgrade v8-develUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-debuginfo | Feb 17, 2025 | Jun 20, 2023 |
| Centos_linux | — | Upgrade nodejs-packaging-bundlerUpgrade nodejs-libs-debuginfoUpgrade nodejs-nodemonUpgrade nodejs-debuginfoUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade npmUpgrade nodejsUpgrade nodejs-libs | Aug 1, 2023 | Jul 31, 2023 |
| Debian | — | Upgrade nodejs | Jan 3, 2024 | Nov 28, 2023 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | May 10, 2024 | Nov 28, 2023 |
| Oracle_linux | — | Upgrade graalvm-community-17-native-image-llvm-backendUpgrade graalvm-community-17-espresso-llvmUpgrade graalvm-community-17-native-imageUpgrade graalvm-community-17-python-develUpgrade graalvm-community-17-icu4jUpgrade nodejsUpgrade nodejs-docsUpgrade graalvm-community-21-native-imageUpgrade graalvm-community-17-jdkUpgrade graalvm-community-17-pythonUpgrade graalvm-community-17-nodejs-develUpgrade graalvm-community-17-regexUpgrade graalvm-community-17-espressoUpgrade graalvm-community-17-ruby-develUpgrade graalvm-community-17-llvmUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade graalvm-community-17-javascriptUpgrade nodejs-libsUpgrade npmUpgrade graalvm-community-17-polyglotUpgrade graalvm-community-17-llvm-toolchainUpgrade graalvm-community-17-libpolyglotUpgrade graalvm-community-17-nodejsUpgrade nodejs-packaging-bundlerUpgrade graalvm-community-17-rubyUpgrade graalvm-community-21-jdkUpgrade graalvm-community-17-wasmUpgrade nodejs-packagingUpgrade graalvm-community-17-toolsUpgrade nodejs-full-i18n | May 21, 2024 | Jun 20, 2023 |
| Redhat_linux | — | Upgrade nodejs-packaging-bundlerUpgrade nodejsUpgrade npmUpgrade nodejs-libsUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade nodejs-libs-debuginfoUpgrade nodejs-nodemonNo solution existsUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-debuginfo | Aug 1, 2023 | Jul 31, 2023 |
| Rocky_linux | — | Upgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-develUpgrade npm | Mar 5, 2024 | Nov 28, 2023 |
| Suse | — | Upgrade nodejs12-develUpgrade nodejs16-docsUpgrade nodejs12Upgrade npm14Upgrade corepack18Upgrade nodejs18Upgrade corepack16Upgrade npm12Upgrade nodejs16-develUpgrade nodejs14Upgrade nodejs12-docsUpgrade nodejs14-develUpgrade nodejs18-docsUpgrade nodejs18-develUpgrade npm16Upgrade corepack14Upgrade nodejs14-docsUpgrade nodejs16Upgrade npm18 | Jun 28, 2023 | Jun 27, 2023 |
| Ubuntu | — | Upgrade nodejs-docUpgrade nodejs (Ubuntu Pro)Upgrade libnode64Upgrade nodejs-legacy (Ubuntu Pro)Upgrade libnode-devUpgrade nodejs-doc (Ubuntu Pro)Upgrade libnode108Upgrade libnode72Upgrade nodejs-dev (Ubuntu Pro)Upgrade nodejs | Apr 17, 2024 | Nov 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 28, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub