Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2022/10/17 10:42 a.m.11 views

nodejs: weak randomness in WebCrypto keygen

A vulnerability was found in NodeJS due to weak randomness in the WebCrypto keygen within the SecretKeyGenTraits::DoKeyGen in src/crypto/cryptokeygen.cc. Node.js made calls to EntropySource in SecretKeyGenTraits::DoKeyGen. However, it does not check the return value and assumes the EntropySource...

9.1CVSS7.3AI score0.0187EPSS
SaveExploits1References6
Rows per page
Query Builder