2 matches found
OESA-2024-1168 nodejs security update
Node.js is an open-source, cross-platform, JavaScript runtime environment, it executes JavaScript code outside of a browser. Security Fixes: A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include polic...
7.5CVSS8.3AI score0.99999EPSS
SaveExploits21References4
USN-6039-1 openssl, openssl1.0 vulnerabilities
It was discovered that OpenSSL was not properly managing file locks when processing policy constraints. If a user or automated system were tricked into processing a certificate chain with specially crafted policy constraints, a remote attacker could possibly use this issue to cause a denial of...
7.5CVSS6.8AI score0.03658EPSS
SaveExploits0References4
20