node-cve-2026-106074-check

node-cve-2026-106074-check Offline version-evidence checker for CVE-2026-106074 — Node.js: Crypto entropy cache duplication in snapshots. It compares the Node.js versions you report against the fixed releases named in the official October 2026 Node.js security release and classifies each one as...

nodejs: nodejs: predictable random values via snapshot entropy cache reuse

A flaw was found in Node.js crypto. Internal entropy caches used by crypto.randomUUID, crypto.randomUUIDv7, and crypto.randomInt can be saved into user-land startup snapshots --build-snapshot and single executable applications built with useSnapshot. If those APIs or dependents such as...

nodejs: nodejs: predictable random values via snapshot entropy cache reuse

A flaw was found in Node.js crypto. Internal entropy caches used by crypto.randomUUID, crypto.randomUUIDv7, and crypto.randomInt can be saved into user-land startup snapshots --build-snapshot and single executable applications built with useSnapshot. If those APIs or dependents such as...

Node.js Crypto Entropy Cache Duplication Checker

Node.js versions 22.x, 24.x, and 26.x contain a crypto entropy cache duplication issue in snapshots and single executable applications. This Python tool compares operator-supplied runtime versions against fixed releases...

Node.js 26.12.0 Crypto Entropy Cache Duplication

Node.js versions before 22.23.4, 24.22.1, and 26.12.1 may save crypto entropy caches into startup snapshots and single executable applications, causing repeated random values across processes...

Exploit for CVE-2026-106074

node-cve-2026-106074-check Standalon...

AZL-111050 CVE-2026-106074 affecting package nodejs for versions less than 24.22.1-0

A flaw in Node.js crypto causes the internal entropy caches used by crypto.randomUUID, crypto.randomUUIDv7, and crypto.randomInt to be saved into user-land startup snapshots --build-snapshot and single executable applications built with useSnapshot. If any of these functions, or an API that relie...

CVE-2026-106074

A flaw in Node.js crypto causes the internal entropy caches used by crypto.randomUUID, crypto.randomUUIDv7, and crypto.randomInt to be saved into user-land startup snapshots --build-snapshot and single executable applications built with useSnapshot. If any of these functions, or an API that relie...

EUVD-2026-109104

A flaw in Node.js crypto causes the internal entropy caches used by crypto.randomUUID, crypto.randomUUIDv7, and crypto.randomInt to be saved into user-land startup snapshots --build-snapshot and single executable applications built with useSnapshot. If any of these functions, or an API that relie...

CVE-2026-106074

A flaw in Node.js "crypto" causes the internal entropy caches used by "crypto.randomUUID", "crypto.randomUUIDv7", and "crypto.randomInt" to be saved into user-land startup snapshots "--build-snapshot" and single executable applications built with "useSnapshot". If any of these functions, or an AP...

CVE-2026-106074

A flaw in Node.js crypto causes the internal entropy caches used by crypto.randomUUID, crypto.randomUUIDv7, and crypto.randomInt to be saved into user-land startup snapshots --build-snapshot and single executable applications built with useSnapshot. If any of these functions, or an API that relie...

CVE-2026-106074

A flaw in the Node.js crypto module causes internal entropy caches used by crypto.randomUUID(), crypto.randomUUIDv7(), and crypto.randomInt() to be saved into user-land startup snapshots (--build-snapshot) and single executable applications built with useSnapshot. Consequently, every process star...

CVE-2026-106074

A flaw in Node.js crypto causes the internal entropy caches used by crypto.randomUUID, crypto.randomUUIDv7, and crypto.randomInt to be saved into user-land startup snapshots --build-snapshot and single executable applications built with useSnapshot. If any of these functions, or an API that relie...

CVE-2026-106074

A flaw in Node.js crypto causes the internal entropy caches used by crypto.randomUUID, crypto.randomUUIDv7, and crypto.randomInt to be saved into user-land startup snapshots --build-snapshot and single executable applications built with useSnapshot. If any of these functions, or an API that relie...

CVE-2026-106074

A flaw in Node.js crypto causes the internal entropy caches used by crypto.randomUUID, crypto.randomUUIDv7, and crypto.randomInt to be saved into user-land startup snapshots --build-snapshot and single executable applications built with useSnapshot. If any of these functions, or an API that relie...

CVE-2026-106074

A flaw in Node.js crypto causes the internal entropy caches used by crypto.randomUUID, crypto.randomUUIDv7, and crypto.randomInt to be saved into user-land startup snapshots --build-snapshot and single executable applications built with useSnapshot. If any of these functions, or an API that relie...

Red Hat: CVE-2026-106074: nodejs: nodejs: predictable random values via snapshot entropy cache reuse

A flaw in Node.js crypto causes the internal entropy caches used by crypto.randomUUID, crypto.randomUUIDv7, and crypto.randomInt to be saved into user-land startup snapshots --build-snapshot and single executable applications built with useSnapshot. If any of these functions, or an API that relie...