The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate() API a non-expect termination occurs making it susceptible to DoS attacks when the attacker could force interruptions of application processing, as the process terminates when accessing public key info of provided certificates from user code. The current context of the users will be gone, and that will cause a DoS scenario. This vulnerability affects all active Node.js versions v16, v18, and, v20.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade nodejs-packaging-bundlerUpgrade npmUpgrade nodejs-packagingUpgrade nodejs | Aug 3, 2023 | Jul 31, 2023 |
| Amazon_linux_2023 | — | Upgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-develUpgrade nodejs-libs-debuginfoUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade npmUpgrade v8-develUpgrade nodejs-debugsource | Feb 17, 2025 | Jun 20, 2023 |
| Centos_linux | — | Upgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-packaging-bundlerUpgrade nodejsUpgrade nodejs-libsUpgrade nodejs-packagingUpgrade nodejs-libs-debuginfoUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-docsUpgrade nodejs-nodemon | Aug 1, 2023 | Jul 31, 2023 |
| Debian | — | Upgrade nodejs | Jan 3, 2024 | Nov 28, 2023 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | May 10, 2024 | Nov 28, 2023 |
| Oracle_linux | — | Upgrade graalvm-community-17-toolsUpgrade npmUpgrade graalvm-community-17-espressoUpgrade graalvm-community-17-wasmUpgrade graalvm-community-17-espresso-llvmUpgrade graalvm-community-17-nodejsUpgrade graalvm-community-21-jdkUpgrade graalvm-community-17-pythonUpgrade nodejs-nodemonUpgrade graalvm-community-17-nodejs-develUpgrade nodejs-develUpgrade graalvm-community-17-javascriptUpgrade graalvm-community-17-python-develUpgrade graalvm-community-17-regexUpgrade graalvm-community-21-native-imageUpgrade nodejs-libsUpgrade graalvm-community-17-llvmUpgrade graalvm-community-17-rubyUpgrade graalvm-community-17-libpolyglotUpgrade nodejs-packaging-bundlerUpgrade graalvm-community-17-llvm-toolchainUpgrade graalvm-community-17-ruby-develUpgrade graalvm-community-17-native-image-llvm-backendUpgrade graalvm-community-17-native-imageUpgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-packagingUpgrade graalvm-community-17-jdkUpgrade nodejs-docsUpgrade graalvm-community-17-polyglotUpgrade graalvm-community-17-icu4j | May 21, 2024 | Jun 20, 2023 |
| Redhat_linux | — | Upgrade nodejs-libsUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-full-i18nNo solution existsUpgrade npmUpgrade nodejs-packaging-bundlerUpgrade nodejs-develUpgrade nodejs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-docsUpgrade nodejs-libs-debuginfoUpgrade nodejs | Aug 1, 2023 | Jul 31, 2023 |
| Rocky_linux | — | Upgrade nodejsUpgrade npmUpgrade nodejs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-full-i18nUpgrade nodejs-devel | Mar 5, 2024 | Nov 28, 2023 |
| Suse | — | Upgrade nodejs16Upgrade nodejs18-docsUpgrade nodejs16-develUpgrade nodejs18-develUpgrade corepack18Upgrade nodejs18Upgrade npm16Upgrade corepack16Upgrade npm18Upgrade nodejs16-docs | Jun 28, 2023 | Jun 27, 2023 |
| Ubuntu | — | Upgrade nodejs (Ubuntu Pro)Upgrade nodejsUpgrade nodejs-legacy (Ubuntu Pro)Upgrade libnode64Upgrade nodejs-docUpgrade libnode72Upgrade nodejs-dev (Ubuntu Pro)Upgrade nodejs-doc (Ubuntu Pro)Upgrade libnode-devUpgrade libnode108 | Apr 17, 2024 | Nov 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 28, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub