UpHeron
All vulnerabilities

Servers and applications

CVE-2023-30588

When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate() API a non-expect termination occurs making it susceptible to DoS attacks when the attacker could force interruptions of application processing, as the process terminates when accessing public key info of provided certificates from user code. The current context of the users will be gone, and that…

Severity
Medium 5.3
Published
28 Nov 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
16.20.1, 18.16.1, 20.3.1
Sources
NVD

Affected software

SoftwareAffected versions
Node.jsServers and applications · cpe:a:nodejs:node.js
  • From 16.0.0 before 16.20.1
  • From 18.0.0 before 18.16.1
  • From 20.0.0 before 20.3.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-30588
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-30588