The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The generateKeys() API function returned from crypto.createDiffieHellman() only generates missing (or outdated) keys, that is, it only generates a private key if none has been set yet, but the function is also needed to compute the corresponding public key after calling setPrivateKey(). However, the documentation says this API call: "Generates private and public Diffie-Hellman key values".
The documented behavior is very different from the actual behavior, and this difference could easily lead to security issues in applications that use these APIs as the DiffieHellman may be used as the basis for application-level security, implications are consequently broad.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-docsUpgrade nodejs-libsUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-packaging-bundlerUpgrade npmUpgrade nodejs-full-i18n | Aug 3, 2023 | Jul 31, 2023 |
| Amazon_linux_2023 | — | Upgrade npmUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-debuginfoUpgrade nodejs-debugsourceUpgrade v8-develUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade nodejs-libs-debuginfoUpgrade nodejs | Feb 17, 2025 | Jun 20, 2023 |
| Centos_linux | — | Upgrade nodejs-develUpgrade npmUpgrade nodejsUpgrade nodejs-libsUpgrade nodejs-docsUpgrade nodejs-libs-debuginfoUpgrade nodejs-packagingUpgrade nodejs-packaging-bundlerUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-full-i18nUpgrade nodejs-nodemon | Aug 1, 2023 | Jul 31, 2023 |
| Debian | — | Upgrade nodejs | Jan 3, 2024 | Nov 28, 2023 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | May 10, 2024 | Nov 28, 2023 |
| Oracle_linux | — | Upgrade graalvm-community-17-llvmUpgrade graalvm-community-17-icu4jUpgrade graalvm-community-17-javascriptUpgrade graalvm-community-17-ruby-develUpgrade graalvm-community-21-native-imageUpgrade graalvm-community-17-regexUpgrade graalvm-community-17-pythonUpgrade nodejs-docsUpgrade graalvm-community-17-nodejs-develUpgrade graalvm-community-17-native-imageUpgrade nodejs-develUpgrade npmUpgrade graalvm-community-17-native-image-llvm-backendUpgrade graalvm-community-17-jdkUpgrade nodejs-nodemonUpgrade nodejs-libsUpgrade graalvm-community-17-python-develUpgrade graalvm-community-17-espressoUpgrade nodejsUpgrade graalvm-community-17-espresso-llvmUpgrade nodejs-full-i18nUpgrade graalvm-community-21-jdkUpgrade graalvm-community-17-libpolyglotUpgrade graalvm-community-17-nodejsUpgrade nodejs-packagingUpgrade graalvm-community-17-wasmUpgrade graalvm-community-17-toolsUpgrade graalvm-community-17-polyglotUpgrade graalvm-community-17-llvm-toolchainUpgrade nodejs-packaging-bundlerUpgrade graalvm-community-17-ruby | May 21, 2024 | Jun 20, 2023 |
| Redhat_linux | — | Upgrade nodejsUpgrade nodejs-packaging-bundlerUpgrade nodejs-develUpgrade npmUpgrade nodejs-libsUpgrade nodejs-nodemonUpgrade nodejs-libs-debuginfoUpgrade nodejs-debuginfoUpgrade nodejs-debugsourceNo solution existsUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-docs | Aug 1, 2023 | Jul 31, 2023 |
| Rocky_linux | — | Upgrade nodejs-develUpgrade npmUpgrade nodejs-debuginfoUpgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-debugsource | Mar 5, 2024 | Nov 28, 2023 |
| Suse | — | Upgrade nodejs14-docsUpgrade nodejs16Upgrade npm18Upgrade corepack14Upgrade nodejs18-develUpgrade nodejs14-develUpgrade npm14Upgrade nodejs12-docsUpgrade npm12Upgrade nodejs14Upgrade nodejs16-develUpgrade nodejs18Upgrade nodejs18-docsUpgrade corepack18Upgrade nodejs16-docsUpgrade corepack16Upgrade nodejs12Upgrade nodejs12-develUpgrade npm16 | Jun 28, 2023 | Jun 27, 2023 |
| Ubuntu | — | Upgrade libnode64Upgrade nodejs (Ubuntu Pro)Upgrade nodejs-docUpgrade nodejs-legacy (Ubuntu Pro)Upgrade nodejs-dev (Ubuntu Pro)Upgrade nodejsUpgrade libnode72Upgrade nodejs-doc (Ubuntu Pro)Upgrade libnode108Upgrade libnode-dev | Apr 17, 2024 | Nov 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 28, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub