Node.js - CVE CyberSecurity Database News

Feb 20, 2024 Exploit Node.js

CVE-2024-22019: Critical Vulnerability in Node.js HTTP Servers - Denial of Service Exploit Through Crafted Chunked Encoding

A newly discovered vulnerability in Node.js HTTP servers, identified as CVE-2024-22019, is posing a significant risk to web applications and online services. The vulnerability

Feb 20, 2024 Node.js

CVE-2024-21892 - Node.js Insecure Environment Variable Ignoring and Unprivileged Code Injection on Linux with CAP_NET_BIND_SERVICE

CVE-2024-21892 refers to a recently discovered vulnerability in Node.js that affects Linux systems running processes with elevated privileges using CAP_NET_BIND_SERVICE. This

Nov 28, 2023 API Exploit Node.js

CVE-2023-30588: DoS Vulnerability in Node.js Crypto Library due to Invalid Public Key in x509 Certificates

A new vulnerability, CVE-2023-30588, has been identified in Node.js crypto library that could lead to Denial-of-Service (DoS) attacks. The issue arises when an invalid

Nov 28, 2023 API Exploit Node.js

CVE-2023-30590: Critical Vulnerability in the generateKeys() API Function of crypto.createDiffieHellman() Leading to Security Issues in Applications

A significant discrepancy has been discovered in the generateKeys() API function returned by crypto.createDiffieHellman(), as described in the CVE-2023-30590. This vulnerability traces back to

Nov 28, 2023 Windows Exploit Node.js

CVE-2023-30585 - Node.js MSI Installer Vulnerability on Windows Systems

A critical vulnerability, under the identifier CVE-2023-30585, has been identified in the Node.js (.msi version) installation process, specifically affecting Windows users who install Node.