Lucene search
+L

4 matches found

OSV
OSV
added 2025/05/19 2:15 a.m.20 views

AZL-65066 CVE-2025-23166 affecting package nodejs18 for versions less than 18.20.3-8

The C++ method SignTraits::DeriveBits may incorrectly call ThrowException based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary...

7.5CVSS7.2AI score0.00812EPSS
SaveExploits0References1
Rows per page
Query Builder