Skip to content

Commit ab21231

Browse files
authored
chore: update impacted version
nodejs/nodejs.org#8550
1 parent a2ddeb0 commit ab21231

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

vuln/core/159.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@
22
"cve": [
33
"CVE-2025-59464"
44
],
5-
"vulnerable": "20.x || 22.x || 24.x",
6-
"patched": "^20.20.0 || ^22.22.0 || ^24.13.0",
5+
"vulnerable": "24.x",
6+
"patched": "^24.12.0",
77
"ref": "https://nodejs.org/en/blog/vulnerability/december-2025-security-releases",
88
"description": "Memory leak that enables remote Denial of Service against applications processing TLS client certificates",
99
"overview": "A memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to UTF-8 without freeing the allocated buffer. When applications call `socket.getPeerCertificate(true)`, each certificate field leaks memory, allowing remote clients to trigger steady memory growth through repeated TLS connections. Over time this can lead to resource exhaustion and denial of service.",

0 commit comments

Comments
 (0)