Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate() API a non-expect termination occurs making it susceptible to DoS attacks when the attacker could force interruptions of application processing, as the process terminates when accessing public key info of provided certificates from user code. The current context of the users will be gone, and that will cause a DoS scenario. This vulnerability affects all active Node.js versions v16, v18, and, v20.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
nodejs 安全漏洞
Vulnerability Description
nodejs是一个基于ChromeV8引擎的JavaScript运行环境，通过对Chromev8引擎进行了封装以及使用事件驱动和非阻塞IO的应用让Javascript开发高性能的后台应用成为了可能。 nodejs存在安全漏洞，该漏洞源于公钥信息无效，攻击者可以强制中断应用程序处理，受到DoS攻击。
CVSS Information
N/A
Vulnerability Type
N/A