p PatchFirst

PatchFirst · Latest vulnerabilities

node.js 23.6.1: known vulnerabilities

Known vulnerabilities affecting node.js 23.6.1: 1. Compare the fixes below with your installed release.

RSS ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 1

  1. CVE-2025-23166

    High · CVSS 7.5EPSS 0.82%No fix published

    CVE-2025-23166

    The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.

    node.jsNode.js
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →